chore(deps): update container image adminer to latest@3b3012a (#15218)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| adminer | digest | `9099f67` -> `3b3012a` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://togithub.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy42My4wIiwidXBkYXRlZEluVmVyIjoiMzcuNjMuMCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciJ9-->

.github/renovate.json5

@@ -304,7 +304,7 @@
     },
     {
       "matchDatasources": ["docker"],
-      "matchPackagePrefixes": ["tccr.io/truecharts/immich"],
+      "matchPackagePrefixes": ["altran1502/immich"],
       "groupName": "immich",
     },
     {
@@ -369,7 +369,7 @@
     },
     {
       "matchDatasources": ["docker"],
-      "matchPackagePrefixes": ["tccr.io/truecharts/authentik"],
+      "matchPackagePrefixes": ["ghcr.io/goauthentik/"],
       "groupName": "authentik",
     },
     {

charts/incubator/netbootxyz/Chart.yaml

@@ -21,7 +21,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/netbootxyz
   - https://github.com/netbootxyz/netboot.xyz
 type: application
-version: 0.0.10
+version: 0.1.0
 annotations:
   truecharts.org/category: networking
   truecharts.org/SCALE-support: "true"

charts/incubator/netbootxyz/values.yaml

@@ -9,6 +9,9 @@ securityContext:
     runAsNonRoot: false
     runAsUser: 0
     runAsGroup: 0
+    capabilities:
+      add:
+        - SYS_CHROOT
 
 workload:
   main:

charts/stable/adminer/Chart.yaml

@@ -25,4 +25,4 @@ sources:
   - https://github.com/vrana/adminer
   - http://hub.docker.com/_/adminer/
 type: application
-version: 5.0.34
+version: 5.0.35

charts/stable/adminer/values.yaml

@@ -1,7 +1,7 @@
 image:
   pullPolicy: IfNotPresent
   repository: adminer
-  tag: latest@sha256:9099f67fdd0269f568f040ef527366a3c99b9a23de53e1305fdf4c59a9851ff0
+  tag: latest@sha256:3b3012a52604eb23dc99a36a50132e8df75fe40e3e68cdd82a718a7b994159dd
 securityContext:
   container:
     readOnlyRootFilesystem: false

charts/stable/immich/Chart.yaml

@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: "1.86.0"
+appVersion: "1.88.1"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
@@ -22,7 +22,7 @@ name: immich
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/stable/immich
   - https://github.com/immich-app/immich
-version: 8.1.39
+version: 9.0.0
 annotations:
   truecharts.org/category: media
   truecharts.org/SCALE-support: "true"

charts/stable/immich/questions.yaml

@@ -124,14 +124,6 @@ questions:
             additional_attrs: true
             type: dict
             attrs:
-# Include{persistenceBasic}
-        - variable: externallibrary
-          label: App External Library Storage
-          description: Stores the External Library.
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
 # Include{persistenceBasic}
 # Include{persistenceList}
 # Include{ingressRoot}

charts/stable/immich/templates/_config.tpl

@@ -7,21 +7,13 @@
   {{- end }}
 
 configmap:
-  web-config:
-    enabled: true
-    data:
-      PORT: {{ .Values.service.web.ports.web.port | quote }}
-      NODE_ENV: production
-      IMMICH_SERVER_URL: {{ printf "http://%v-server:%v" $fname .Values.service.server.ports.server.port }}
-      PUBLIC_IMMICH_SERVER_URL: {{ printf "http://%v-server:%v" $fname .Values.service.server.ports.server.port }}
-      {{- with .Values.immich.public_login_page_message }}
-      PUBLIC_LOGIN_PAGE_MESSAGE: {{ . }}
-      {{- end }}
-
   server-config:
     enabled: true
     data:
-      SERVER_PORT: {{ .Values.service.server.ports.server.port | quote }}
+      SERVER_PORT: {{ .Values.service.main.ports.main.port | quote }}
+      {{- with .Values.immich.public_login_page_message }}
+      PUBLIC_LOGIN_PAGE_MESSAGE: {{ . }}
+      {{- end }}
 
   micro-config:
     enabled: true
@@ -56,12 +48,6 @@ configmap:
       TYPESENSE_PORT: {{ .Values.service.typesense.ports.typesense.port | quote }}
       {{- end }}
 
-  proxy-config:
-    enabled: true
-    data:
-      IMMICH_WEB_URL: {{ printf "http://%v-web:%v" $fname .Values.service.web.ports.web.port }}
-      IMMICH_SERVER_URL: {{ printf "http://%v-server:%v" $fname .Values.service.server.ports.server.port }}
-
 secret:
   typesense-secret:
     enabled: true

charts/stable/immich/templates/_machinelearning.tpl

@@ -1,7 +1,7 @@
 {{/* Define the machinelearning container */}}
 {{- define "immich.machinelearning" -}}
 {{- $fname := (include "tc.v1.common.lib.chart.names.fullname" .) -}}
-{{- $serverUrl := printf "http://%v-server:%v/server-info/ping" $fname .Values.service.server.ports.server.port }}
+{{- $serverUrl := printf "http://%v:%v/api/server-info/ping" $fname .Values.service.main.ports.main.port }}
 enabled: true
 type: Deployment
 podSpec:

charts/stable/immich/templates/_microservices.tpl

@@ -1,6 +1,6 @@
 {{- define "immich.microservices" -}}
 {{- $fname := (include "tc.v1.common.lib.chart.names.fullname" .) -}}
-{{- $serverUrl := printf "http://%v-server:%v/server-info/ping" $fname .Values.service.server.ports.server.port }}
+{{- $serverUrl := printf "http://%v:%v/api/server-info/ping" $fname .Values.service.main.ports.main.port }}
 enabled: true
 type: Deployment
 podSpec:
@@ -13,7 +13,10 @@ podSpec:
       enabled: true
       primary: true
       imageSelector: image
-      args: start-microservices.sh
+      command: /bin/sh
+      args:
+        - -c
+        - /usr/src/app/start-microservices.sh
       securityContext:
         capabilities:
           disableS6Caps: true
@@ -30,13 +33,13 @@ podSpec:
         readiness:
           enabled: true
           type: tcp
-          port: '{{ .Values.service.microservices.ports.microservices.port }}'
+          port: {{ .Values.service.microservices.ports.microservices.port }}
         liveness:
           enabled: true
           type: tcp
-          port: '{{ .Values.service.microservices.ports.microservices.port }}'
+          port: {{ .Values.service.microservices.ports.microservices.port }}
         startup:
           enabled: true
           type: tcp
-          port: '{{ .Values.service.microservices.ports.microservices.port }}'
+          port: {{ .Values.service.microservices.ports.microservices.port }}
 {{- end -}}

charts/stable/immich/templates/_proxy.tpl

@@ -1,45 +0,0 @@
-{{- define "immich.proxy" -}}
-{{- $fname := (include "tc.v1.common.lib.chart.names.fullname" .) -}}
-{{- $serverUrl := printf "http://%v-server:%v/server-info/ping" $fname .Values.service.server.ports.server.port }}
-{{- $webUrl := printf "http://%v-web:%v/robots.txt" $fname .Values.service.web.ports.web.port }}
-enabled: true
-type: Deployment
-podSpec:
-  initContainers:
-    wait-server:
-      {{/* Wait for server */}}
-      {{- include "immich.wait" (dict "url" $serverUrl) | nindent 6 }}
-      {{/* Wait for web, otherwise nginx will fail to find host */}}
-      {{- include "immich.wait" (dict "url" $webUrl) | nindent 6 }}
-  containers:
-    proxy:
-      enabled: true
-      primary: true
-      imageSelector: proxyImage
-      securityContext:
-        capabilities:
-          disableS6Caps: true
-          add:
-            - CHOWN
-            - SETUID
-            - SETGID
-      envFrom:
-        - configMapRef:
-            name: proxy-config
-      probes:
-        readiness:
-          enabled: true
-          type: http
-          path: /api/server-info/ping
-          port: {{ .Values.service.main.ports.main.targetPort }}
-        liveness:
-          enabled: true
-          type: http
-          path: /api/server-info/ping
-          port: {{ .Values.service.main.ports.main.targetPort }}
-        startup:
-          enabled: true
-          type: http
-          path: /api/server-info/ping
-          port: {{ .Values.service.main.ports.main.targetPort }}
-{{- end -}}

charts/stable/immich/templates/_server.tpl

@@ -2,7 +2,10 @@
 enabled: true
 primary: true
 imageSelector: image
-args: start-server.sh
+command: /bin/sh
+args:
+  - -c
+  - /usr/src/app/start-server.sh
 securityContext:
   capabilities:
     disableS6Caps: true
@@ -19,16 +22,16 @@ probes:
   liveness:
     enabled: true
     type: http
-    path: /server-info/ping
-    port: {{ .Values.service.server.ports.server.port }}
+    path: /api/server-info/ping
+    port: {{ .Values.service.main.ports.main.port }}
   readiness:
     enabled: true
     type: http
-    path: /server-info/ping
-    port: {{ .Values.service.server.ports.server.port }}
+    path: /api/server-info/ping
+    port: {{ .Values.service.main.ports.main.port }}
   startup:
     enabled: true
     type: http
-    path: /server-info/ping
-    port: {{ .Values.service.server.ports.server.port }}
+    path: /api/server-info/ping
+    port: {{ .Values.service.main.ports.main.port }}
 {{- end -}}

charts/stable/immich/templates/_wait.tpl

@@ -8,7 +8,7 @@ command:
   - -c
   - |
     echo "Pinging [{{ $url }}] until it is ready..."
-    until wget --spider --quiet "{{ $url }}"; do
+    until wget --spider --quiet --timeout=3 --tries 1 "{{ $url }}"; do
       echo "Waiting for [{{ $url }}] to be ready..."
       sleep 2
     done

charts/stable/immich/templates/_web.tpl

@@ -1,42 +0,0 @@
-{{/* Define the web container */}}
-{{- define "immich.web" -}}
-{{- $fname := (include "tc.v1.common.lib.chart.names.fullname" .) -}}
-{{- $serverUrl := printf "http://%v-server:%v/server-info/ping" $fname .Values.service.server.ports.server.port }}
-enabled: true
-type: Deployment
-podSpec:
-  initContainers:
-    wait-server:
-      {{/* Wait for server */}}
-      {{- include "immich.wait" (dict "url" $serverUrl) | nindent 6 }}
-  containers:
-    web:
-      enabled: true
-      primary: true
-      imageSelector: webImage
-      securityContext:
-        capabilities:
-          disableS6Caps: true
-          add:
-            - SETUID
-            - SETGID
-      envFrom:
-        - configMapRef:
-            name: web-config
-      probes:
-        readiness:
-          enabled: true
-          type: http
-          path: /robots.txt
-          port: {{ .Values.service.web.ports.web.port }}
-        liveness:
-          enabled: true
-          type: http
-          path: /robots.txt
-          port: {{ .Values.service.web.ports.web.port }}
-        startup:
-          enabled: true
-          type: http
-          path: /robots.txt
-          port: {{ .Values.service.web.ports.web.port }}
-{{- end -}}

charts/stable/immich/templates/common.yaml

@@ -3,9 +3,6 @@
 
 {{- $fname := (include "tc.v1.common.lib.chart.names.fullname" .) -}}
 
-{{/* Render Proxy Workload */}}
-{{- $_ := set .Values.workload "proxy" (include "immich.proxy" . | fromYaml) -}}
-
 {{- $_ := set .Values.workload.main.podSpec.containers "main" (include "immich.server" . | fromYaml) -}}
 {{- if .Values.immich.enable_typesense -}}
   {{/* Append init container to server, to make sure typesense is ready before starting */}}
@@ -13,9 +10,6 @@
   {{- $_ := set .Values.workload.main.podSpec.initContainers "wait-typesense" (include "immich.wait" (dict "url" $url) | fromYaml) -}}
 {{- end -}}
 
-{{/* Render Web Workload */}}
-{{- $_ := set .Values.workload "web" (include "immich.web" . | fromYaml) -}}
-
 {{/* Render Microservices Workload */}}
 {{- $_ := set .Values.workload "microservices" (include "immich.microservices" . | fromYaml) -}}
 
@@ -54,5 +48,17 @@
   {{- $_ := mustMergeOverwrite .Values $config -}}
 {{- end -}}
 
+{{- range $idx, $persistence := .Values.persistenceList -}}
+  {{- $_ := set $persistence "targetSelector" (dict
+      "main" (dict "main" dict)
+      "microservices" (dict "microservices" dict)
+  ) -}}
+{{- end -}}
+
+{{- $envList := .Values.workload.main.podSpec.containers.main.envList -}}
+{{- if $envList -}}
+  {{- $_ := set .Values.workload.microservices.podSpec.containers.microservices "envList" $envList -}}
+{{- end -}}
+
 {{/* Render the templates */}}
 {{ include "tc.v1.common.loader.apply" . }}

charts/stable/immich/values.yaml

@@ -1,67 +1,38 @@
 image:
   repository: altran1502/immich-server
-  tag: v1.86.0@sha256:b04b0cb5db7f954d1d7a9c9792f9feedcaaabed03b2f251ef7c6a8169be10086
+  tag: v1.88.1@sha256:87dd30e8938ec894d1a05b5ce436fd12d432f4f76992f85495b84a2f9d2b2583
   pullPolicy: IfNotPresent
 mlImage:
   repository: altran1502/immich-machine-learning
-  tag: v1.86.0@sha256:4f745b74a3d534fde87ba8ae3c7de97c1504596188d6da3fd38a2777acacda8a
-  pullPolicy: IfNotPresent
-webImage:
-  repository: altran1502/immich-web
-  tag: v1.86.0@sha256:f2e806d4cbe7e443de0c004e7d6bc585b00e1d187913591fdc1fca944143026d
-  pullPolicy: IfNotPresent
-proxyImage:
-  repository: altran1502/immich-proxy
-  tag: v1.86.0@sha256:96a557932b457fba8eb38d1d0d476f2e07fa8971d8a926886ebc543a6b35f012
+  tag: v1.88.1@sha256:68391160d4fca56382a3eb8eff969f1728fed019bd8d737cab5d64950512d333
   pullPolicy: IfNotPresent
 typesenseImage:
   repository: typesense/typesense
   tag: 0.25.1@sha256:3724f68156097114d07790e1c8bfaaca13b12eaecd602776d30d9933029064c7
   pullPolicy: IfNotPresent
+
 securityContext:
   container:
     readOnlyRootFilesystem: false
     runAsNonRoot: false
     runAsUser: 0
     runAsGroup: 0
+
 immich:
   enable_ml: true
   enable_typesense: true
   public_login_page_message: Immich
   log_level: log
+
 service:
   main:
-    # Main service targets the proxy
-    targetSelector: proxy
+    # Main service targets the server
+    targetSelector: main
     ports:
       main:
         port: 10323
         protocol: http
-        targetSelector: proxy
-        targetPort: 8080
-  server:
-    enabled: true
-    type: ClusterIP
-    # Server is the main container
-    targetSelector: main
-    ports:
-      server:
-        enabled: true
-        primary: true
-        port: 10001
-        protocol: http
         targetSelector: main
-  web:
-    enabled: true
-    type: ClusterIP
-    targetSelector: web
-    ports:
-      web:
-        enabled: true
-        primary: true
-        port: 10000
-        protocol: http
-        targetSelector: web
   microservices:
     enabled: true
     type: ClusterIP
@@ -95,6 +66,7 @@ service:
         port: 10002
         protocol: http
         targetSelector: typesense
+
 persistence:
   mlcache:
     enabled: true
@@ -162,24 +134,19 @@ persistence:
         main: {}
       microservices:
         microservices: {}
-  externallibrary:
-    enabled: true
-    mountPath: /media
-    targetSelector:
-      # Main pod/container is server
-      main:
-        main: {}
-      microservices:
-        microservices: {}
+
 cnpg:
   main:
     enabled: true
     user: immich
     database: immich
+
 redis:
   enabled: true
   redisUsername: default
+
 portal:
   open:
     enabled: true
+
 updated: true

charts/stable/nextcloud/Chart.yaml

@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: 7.1.3
+appVersion: 27.1.3
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
@@ -29,7 +29,7 @@ sources:
   - https://github.com/nextcloud/docker
   - https://github.com/nextcloud/helm
 type: application
-version: 22.2.2
+version: 22.2.3
 annotations:
   truecharts.org/category: cloud
   truecharts.org/SCALE-support: "true"

charts/stable/nextcloud/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/nextcloud-fpm
   pullPolicy: IfNotPresent
-  tag: v27.1.3@sha256:adac91d64cdbbef29e44a1bbd95349636e7558334267a1adc231cab5dc8e0a2f
+  tag: v27.1.3@sha256:92e84e6feb04bb4c0912d33d8d43334faa0772930dc11333d60d5adb537fe2fa
 nginxImage:
   repository: nginxinc/nginx-unprivileged
   pullPolicy: IfNotPresent

charts/stable/redmine/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v2
 appVersion: 5.0.6
 kubeVersion: ">=1.16.0-0"
-version: 8.0.18
+version: 8.1.0
 name: redmine
 description: Redmine is a flexible project management web application written using Ruby on Rails framework.
 type: application

charts/stable/redmine/questions.yaml

@@ -85,13 +85,13 @@ questions:
                 description: "The UserID of the user running the application"
                 schema:
                   type: int
-                  default: 568
+                  default: 999
               - variable: runAsGroup
                 label: "runAsGroup"
                 description: "The groupID this App of the user running the application"
                 schema:
                   type: int
-                  default: 568
+                  default: 999
 # Include{securityContextContainer}
 # Include{securityContextAdvanced}
 # Include{securityContextPod}
@@ -100,7 +100,7 @@ questions:
                 description: "The group that should own ALL storage."
                 schema:
                   type: int
-                  default: 568
+                  default: 999
 
 # Include{resources}
 # Include{advanced}

charts/stable/redmine/values.yaml

@@ -27,6 +27,10 @@ portal:
 securityContext:
   container:
     readOnlyRootFilesystem: false
+    runAsUser: 999
+    runAsGroup: 999
+  pod:
+    fsGroup: 999
 workload:
   main:
     podSpec:

charts/stable/stun-turn-server/Chart.yaml

@@ -8,8 +8,8 @@ dependencies:
     repository: https://library-charts.truecharts.org
     version: 14.3.5
 deprecated: false
-description: "This is a Basic STUN & TURN server that was mainly created for Nextcloud Talk."
-home: https://truecharts.org/charts/incubator/stun-turn-server
+description: "This is a Basic STUN & TURN server that was mainly created for Nextcloud Talk."
+home: https://truecharts.org/charts/stable/stun-turn-server
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/stun-turn-server.png
 keywords:
   - stun-turn-server
@@ -21,6 +21,7 @@ maintainers:
     url: https://truecharts.org
 name: stun-turn-server
 sources:
-  - https://github.com/truecharts/charts/tree/master/charts/incubator/stun-turn-server
+  - https://github.com/truecharts/charts/tree/master/charts/stable/stun-turn-server
+  - https://hub.docker.com/r/ich777/stun-turn-server
 type: application
-version: 3.0.6
+version: 3.0.7

charts/stable/webtop/Chart.yaml

@@ -23,7 +23,7 @@ sources:
   - https://github.com/orgs/linuxserver/packages/container/package/webtop
   - https://github.com/linuxserver/docker-webtop#readme
 type: application
-version: 6.0.185
+version: 6.0.186
 annotations:
   truecharts.org/category: Tools-Utilities
   truecharts.org/SCALE-support: "true"

charts/stable/webtop/values.yaml

@@ -12,7 +12,7 @@ fedoraXFCEImage:
   pullPolicy: Always
 archXFCEImage:
   repository: lscr.io/linuxserver/webtop
-  tag: arch-xfce@sha256:1a36f894a5c290530220ab88712e8a230cc1d1c5ba16d4762cf9440bf581c3a8
+  tag: arch-xfce@sha256:b7ea6379704b401441938f941795e988b1b752a91a555ffa713175b8d6f053f1
   pullPolicy: Always
 alpineKDEImage:
   repository: lscr.io/linuxserver/webtop
@@ -56,7 +56,7 @@ ubuntuI3Image:
   pullPolicy: Always
 fedoraI3Image:
   repository: lscr.io/linuxserver/webtop
-  tag: fedora-i3@sha256:8577a75abc39c28c38af4d59f49f080f9cf7a6e08b4f3ec594374ae18362604e
+  tag: fedora-i3@sha256:6c9c1f8da9108bf6aedf98427765b533dbe3d1a4216bea116688e432d6bddfc0
   pullPolicy: Always
 archI3Image:
   repository: lscr.io/linuxserver/webtop
@@ -88,7 +88,7 @@ ubuntuICEWMImage:
   pullPolicy: Always
 fedoraICEWMImage:
   repository: lscr.io/linuxserver/webtop
-  tag: fedora-icewm@sha256:32bdb87e3d54e872a67e189cfcec561466218efade69dd857fb33d5c064be92a
+  tag: fedora-icewm@sha256:6c513870165f66f7dc2d8a520dc4b73e85b4fadd71701870b4809c9782696ba5
   pullPolicy: Always
 archICEWMImage:
   repository: lscr.io/linuxserver/webtop