chore(deps): update container image tccr.io/truecharts/adminer to latest (#13519)

Signed-off-by: TrueCharts-Bot <bot@truecharts.org>

.all-contributorsrc

@@ -1964,6 +1964,114 @@
       "contributions": [
         "code"
       ]
+    },
+    {
+      "login": "aamirazad",
+      "name": "Aamir Azad",
+      "avatar_url": "https://avatars.githubusercontent.com/u/82281117?v=4",
+      "profile": "http://tigertutoringtool.aamira.me",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "jordan-woyak",
+      "name": "Jordan Woyak",
+      "avatar_url": "https://avatars.githubusercontent.com/u/1768214?v=4",
+      "profile": "https://github.com/jordan-woyak",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "simon-hofmann",
+      "name": "Simon Hofman",
+      "avatar_url": "https://avatars.githubusercontent.com/u/23562420?v=4",
+      "profile": "https://github.com/simon-hofmann",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "notyouraveragegamer",
+      "name": "notyouraveragegamer",
+      "avatar_url": "https://avatars.githubusercontent.com/u/104248676?v=4",
+      "profile": "https://github.com/NotYourAverageGamer",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "varac",
+      "name": "Varac",
+      "avatar_url": "https://avatars.githubusercontent.com/u/488213?v=4",
+      "profile": "https://www.varac.net",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "tuxpizza",
+      "name": "tuxsudo",
+      "avatar_url": "https://avatars.githubusercontent.com/u/84710786?v=4",
+      "profile": "https://tux.pizza",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "TylerRudie",
+      "name": "TylerRudie",
+      "avatar_url": "https://avatars.githubusercontent.com/u/2695916?v=4",
+      "profile": "https://github.com/TylerRudie",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "qnb59bny5x",
+      "name": "qnb59bny5x",
+      "avatar_url": "https://avatars.githubusercontent.com/u/108427982?v=4",
+      "profile": "https://github.com/qnb59bny5x",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "drndos",
+      "name": "Filip Bednárik",
+      "avatar_url": "https://avatars.githubusercontent.com/u/5576134?v=4",
+      "profile": "https://blog.drndos.sk",
+      "contributions": [
+        "bug"
+      ]
+    },
+    {
+      "login": "sshcherbinin",
+      "name": "Serhii Shcherbinin",
+      "avatar_url": "https://avatars.githubusercontent.com/u/92396963?v=4",
+      "profile": "https://github.com/sshcherbinin",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "qraynaud",
+      "name": "Quentin Raynaud",
+      "avatar_url": "https://avatars.githubusercontent.com/u/65991?v=4",
+      "profile": "https://github.com/qraynaud",
+      "contributions": [
+        "bug"
+      ]
+    },
+    {
+      "login": "thegcat",
+      "name": "Felix Schäfer",
+      "avatar_url": "https://avatars.githubusercontent.com/u/22835?v=4",
+      "profile": "http://fachschaften.org",
+      "contributions": [
+        "doc"
+      ]
     }
   ],
   "contributorsPerLine": 7,

.github/README.md

@@ -124,7 +124,7 @@ A lot of our work is based on the great effort of others. We would love to exten
 ## Contributors ✨
 
 <!-- ALL-CONTRIBUTORS-BADGE:START - Do not remove or modify this section -->
-[![All Contributors](https://img.shields.io/badge/all_contributors-210-orange.svg?style=for-the-badge)](#contributors)
+[![All Contributors](https://img.shields.io/badge/all_contributors-222-orange.svg?style=for-the-badge)](#contributors)
 <!-- ALL-CONTRIBUTORS-BADGE:END -->
 
 Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/docs/en/emoji-key)):
@@ -406,6 +406,22 @@ Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/d
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/MickaelFontes"><img src="https://avatars.githubusercontent.com/u/81414455?v=4?s=100" width="100px;" alt="MickaelFontes"/><br /><sub><b>MickaelFontes</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=MickaelFontes" title="Code">💻</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/blastik"><img src="https://avatars.githubusercontent.com/u/3662083?v=4?s=100" width="100px;" alt="David CM"/><br /><sub><b>David CM</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=blastik" title="Code">💻</a></td>
     </tr>
+    <tr>
+      <td align="center" valign="top" width="14.28%"><a href="http://tigertutoringtool.aamira.me"><img src="https://avatars.githubusercontent.com/u/82281117?v=4?s=100" width="100px;" alt="Aamir Azad"/><br /><sub><b>Aamir Azad</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=aamirazad" title="Documentation">📖</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/jordan-woyak"><img src="https://avatars.githubusercontent.com/u/1768214?v=4?s=100" width="100px;" alt="Jordan Woyak"/><br /><sub><b>Jordan Woyak</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=jordan-woyak" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/simon-hofmann"><img src="https://avatars.githubusercontent.com/u/23562420?v=4?s=100" width="100px;" alt="Simon Hofman"/><br /><sub><b>Simon Hofman</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=simon-hofmann" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/NotYourAverageGamer"><img src="https://avatars.githubusercontent.com/u/104248676?v=4?s=100" width="100px;" alt="notyouraveragegamer"/><br /><sub><b>notyouraveragegamer</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=notyouraveragegamer" title="Documentation">📖</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://www.varac.net"><img src="https://avatars.githubusercontent.com/u/488213?v=4?s=100" width="100px;" alt="Varac"/><br /><sub><b>Varac</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=varac" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://tux.pizza"><img src="https://avatars.githubusercontent.com/u/84710786?v=4?s=100" width="100px;" alt="tuxsudo"/><br /><sub><b>tuxsudo</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=tuxpizza" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/TylerRudie"><img src="https://avatars.githubusercontent.com/u/2695916?v=4?s=100" width="100px;" alt="TylerRudie"/><br /><sub><b>TylerRudie</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=TylerRudie" title="Documentation">📖</a></td>
+    </tr>
+    <tr>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/qnb59bny5x"><img src="https://avatars.githubusercontent.com/u/108427982?v=4?s=100" width="100px;" alt="qnb59bny5x"/><br /><sub><b>qnb59bny5x</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=qnb59bny5x" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://blog.drndos.sk"><img src="https://avatars.githubusercontent.com/u/5576134?v=4?s=100" width="100px;" alt="Filip Bednárik"/><br /><sub><b>Filip Bednárik</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Adrndos" title="Bug reports">🐛</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/sshcherbinin"><img src="https://avatars.githubusercontent.com/u/92396963?v=4?s=100" width="100px;" alt="Serhii Shcherbinin"/><br /><sub><b>Serhii Shcherbinin</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=sshcherbinin" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/qraynaud"><img src="https://avatars.githubusercontent.com/u/65991?v=4?s=100" width="100px;" alt="Quentin Raynaud"/><br /><sub><b>Quentin Raynaud</b></sub></a><br /><a href="https://github.com/truecharts/charts/issues?q=author%3Aqraynaud" title="Bug reports">🐛</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="http://fachschaften.org"><img src="https://avatars.githubusercontent.com/u/22835?v=4?s=100" width="100px;" alt="Felix Schäfer"/><br /><sub><b>Felix Schäfer</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=thegcat" title="Documentation">📖</a></td>
+    </tr>
   </tbody>
 </table>
 

.github/actions/collect-changes/action.yaml

@@ -50,7 +50,6 @@ runs:
         # Set output to changed charts
         echo "Changed charts: ${CHARTS[*]}"
         printf "::set-output name=addedOrModified::%s\n" "${CHARTS[*]}"
-        
 
     - name: Collect bumped charts after last tag
       id: filter-bumped-charts

.github/ct-install.yaml

@@ -12,15 +12,18 @@ chart-dirs:
 excluded-charts:
   - charts/dependency/subchart
   - charts/incubator/twingate-connector
+  - charts/incubator/docassemble
   - charts/incubator/eco
   - charts/incubator/midarr
   - charts/incubator/orbital-sync
   - charts/incubator/plex-meta-manager
+  - charts/incubator/telepush
   - charts/library/common
   - charts/stable/alertmanager-bot
   - charts/stable/alertmanager-bot
   - charts/stable/alertmanager-discord
   - charts/stable/amcrest2mqtt
+  - charts/stable/arksurvivalevolved
   - charts/stable/tauticord
   - charts/stable/discordgsm
   - charts/stable/facebox
@@ -28,6 +31,7 @@ excluded-charts:
   - charts/stable/heimdall
   - charts/stable/mc-router
   - charts/stable/multus
+  - charts/stable/local-ai
   - charts/stable/orbital-sync
   - charts/stable/plex-meta-manager
   - charts/stable/pod-gateway

.github/workflows/catalog-test.yaml

@@ -17,7 +17,7 @@ jobs:
     container:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         name: Checkout
         with:
           fetch-depth: 100

.github/workflows/charts-lint.yaml

@@ -22,13 +22,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout [master]
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 1
           ref: master
 
       - name: Checkout [commit]
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}

.github/workflows/charts-release.yaml

@@ -17,13 +17,13 @@ jobs:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
 
       - name: Checkout Helm-Staging
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 1
           repository: truecharts/helm-staging
@@ -93,7 +93,7 @@ jobs:
           GPG_PASSPHRASE: "${{ secrets.GPG_PASSPHRASE }}"
 
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 0
@@ -125,7 +125,7 @@ jobs:
           find . -name '*.sh' | xargs chmod +x
 
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         if: |
           steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
         with:
@@ -206,6 +206,10 @@ jobs:
                 echo "" >> website/docs/charts/${train}/${chart}/index.md
                 cat charts/${train}/${chart}/Chart.yaml | yq .description -r >> website/docs/charts/${train}/${chart}/index.md
                 echo "" >> website/docs/charts/${train}/${chart}/index.md
+                echo "## Chart Sources" >> website/docs/charts/${train}/${chart}/index.md
+                echo "" >> website/docs/charts/${train}/${chart}/index.md
+                cat charts/${train}/${chart}/Chart.yaml | go-yq .sources -r >> website/docs/charts/${train}/${chart}/index.md
+                echo "" >> website/docs/charts/${train}/${chart}/index.md
                 echo "## Available Documentation" >> website/docs/charts/${train}/${chart}/index.md
                 echo "" >> website/docs/charts/${train}/${chart}/index.md
 
@@ -240,7 +244,7 @@ jobs:
           git push
 
       - name: Checkout Catalog
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         if: |
           steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
         with:

.github/workflows/charts-test.yaml

@@ -50,7 +50,7 @@ jobs:
       detected6: ${{ steps.list-changed.outputs.detected6 }}
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -115,7 +115,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -127,7 +127,7 @@ jobs:
             helmv3
           helm: "3.9.4"
 
-      - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4
+      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: "3.11"
 
@@ -169,6 +169,9 @@ jobs:
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
             helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
           fi
+          if [[ "${{ matrix.chart }}" != "charts/enterprise/traefik" ]]; then
+            helm install traefik truecharts/traefik --namespace traefik --create-namespace --wait
+          fi
 
       - name: Run chart-testing (install)
         run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" # --upgrade
@@ -185,7 +188,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -197,7 +200,7 @@ jobs:
             helmv3
           helm: "3.9.4"
 
-      - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4
+      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: "3.11"
 
@@ -231,6 +234,9 @@ jobs:
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
             helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
           fi
+          if [[ "${{ matrix.chart }}" != "charts/enterprise/traefik" ]]; then
+            helm install traefik truecharts/traefik --namespace traefik --create-namespace --wait
+          fi
 
       - name: Run chart-testing (install)
         run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" # --upgrade
@@ -247,7 +253,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -259,7 +265,7 @@ jobs:
             helmv3
           helm: "3.9.4"
 
-      - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4
+      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: "3.11"
 
@@ -293,6 +299,9 @@ jobs:
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
             helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
           fi
+          if [[ "${{ matrix.chart }}" != "charts/enterprise/traefik" ]]; then
+            helm install traefik truecharts/traefik --namespace traefik --create-namespace --wait
+          fi
 
       - name: Run chart-testing (install)
         run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" # --upgrade
@@ -309,7 +318,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -321,7 +330,7 @@ jobs:
             helmv3
           helm: "3.9.4"
 
-      - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4
+      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: "3.11"
 
@@ -355,6 +364,9 @@ jobs:
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
             helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
           fi
+          if [[ "${{ matrix.chart }}" != "charts/enterprise/traefik" ]]; then
+            helm install traefik truecharts/traefik --namespace traefik --create-namespace --wait
+          fi
 
       - name: Run chart-testing (install)
         run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" # --upgrade
@@ -371,7 +383,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -383,7 +395,7 @@ jobs:
             helmv3
           helm: "3.9.4"
 
-      - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4
+      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: "3.11"
 
@@ -417,6 +429,10 @@ jobs:
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
             helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
           fi
+          if [[ "${{ matrix.chart }}" != "charts/enterprise/traefik" ]]; then
+            helm install traefik truecharts/traefik --namespace traefik --create-namespace --wait
+          fi
+
       - name: Run chart-testing (install)
         run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" # --upgrade
 
@@ -432,7 +448,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -444,7 +460,7 @@ jobs:
             helmv3
           helm: "3.9.4"
 
-      - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4
+      - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4
         with:
           python-version: "3.11"
 
@@ -478,6 +494,9 @@ jobs:
           if [[ "${{ matrix.chart }}" != "charts/operators/prometheus-operator" ]]; then
             helm install prometheus-operator truecharts/prometheus-operator --namespace prometheus-operator --create-namespace --wait
           fi
+          if [[ "${{ matrix.chart }}" != "charts/enterprise/traefik" ]]; then
+            helm install traefik truecharts/traefik --namespace traefik --create-namespace --wait
+          fi
 
       - name: Run chart-testing (install)
         run: ct install --config ".github/ct-install.yaml" --charts "${{ matrix.chart }}" # --upgrade

.github/workflows/daily.yaml

@@ -20,7 +20,7 @@ jobs:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
@@ -55,7 +55,7 @@ jobs:
           done
 
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           repository: truecharts/website
           path: website
@@ -248,7 +248,7 @@ jobs:
           helm repo update
 
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
@@ -257,7 +257,7 @@ jobs:
         run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
 
       - name: Checkout website
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 1
           repository: truecharts/website
@@ -377,7 +377,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1

.github/workflows/pr-validate.yaml

@@ -17,7 +17,7 @@ jobs:
       addedOrModifiedCharts: ${{ steps.collect-changes.outputs.addedOrModifiedCharts }}
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
 
       - name: Collect changes
         id: collect-changes
@@ -57,7 +57,7 @@ jobs:
       head-commit-message: ${{ steps.get_head_commit_message.outputs.headCommitMsg }}
     steps:
       - name: Get repo
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - name: verbose head git commit message

.github/workflows/prune.yaml

@@ -9,7 +9,7 @@ jobs:
     name: "prune old releases"
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           fetch-depth: 0
       - uses: actions/delete-package-versions@0d39a63126868f5eefaa47169615edd3c0f61e20 # v4

.github/workflows/renovate-bump.yaml

@@ -14,12 +14,12 @@ jobs:
     container:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         name: Checkout
         with:
           fetch-depth: 0
           token: ${{ secrets.BOT_TOKEN }}
-      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+      - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         name: Checkout
         with:
           fetch-depth: 0

.github/workflows/renovate.yml

@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
         with:
           token: ${{ secrets.BOT_TOKEN }}
       - name: Self-hosted Renovate

.github/workflows/schedule-sync-labels.yaml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
 

charts/dependency/clickhouse/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "23.8.2.7"
+appVersion: "23.8.3.48"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.6
+    version: 14.0.12
 deprecated: false
 description: ClickHouse is a column-oriented database management system (DBMS) for online analytical processing of queries (OLAP).
 home: https://truecharts.org/charts/dependency/clickhouse
@@ -22,7 +22,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/clickhouse
   - https://clickhouse.com/
 type: application
-version: 7.0.7
+version: 7.0.11
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/clickhouse/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/clickhouse
   pullPolicy: IfNotPresent
-  tag: v23.8.2.7@sha256:59d8931ff246dfe2740cfb53ae5db62242b05b1bd9f8dffac3dbbb634109fe0a
+  tag: v23.8.3.48@sha256:6dfb2322a26e5990b908cc3f49ceee230b241a67e791886ec76965df1a8aff11
 
 workload:
   main:

charts/dependency/kube-state-metrics/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "2.9.2"
+appVersion: "2.10.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.6
+    version: 14.0.12
 deprecated: false
 description: kube-state-metrics is a simple service that listens to the Kubernetes API server and generates metrics about the state of the objects.
 home: https://truecharts.org/charts/dependency/kube-state-metrics
@@ -21,7 +21,7 @@ name: kube-state-metrics
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/kube-state-metrics
 type: application
-version: 3.0.12
+version: 3.0.26
 annotations:
   truecharts.org/catagories: |
     - metrics

charts/dependency/kube-state-metrics/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/kube-state-metrics
   pullPolicy: IfNotPresent
-  tag: v2.9.2@sha256:3afe680fae090d3ffda0c969d914d4ddbbfd2da0be668c8a6f344b73e8c207a2
+  tag: v2.10.0@sha256:538721a09681e1a5ee190cc348b7a27b0543eb2bade4afa4a2a89e21ca846f9d
 
 service:
   main:

charts/dependency/mariadb/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "11.0.3"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.6
+    version: 14.0.12
 deprecated: false
 description: Fast, reliable, scalable, and easy to use open-source relational database system.
 home: https://truecharts.org/charts/dependency/mariadb
@@ -25,7 +25,7 @@ sources:
   - https://github.com/prometheus/mysqld_exporter
   - https://mariadb.org
 type: application
-version: 9.0.15
+version: 9.0.29
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/mariadb/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/mariadb
   pullPolicy: IfNotPresent
-  tag: v11.0.3@sha256:4a87c148792e6bb9bbc340e6a992255ee8596fa3e9b28de5038c632cf28ec93c
+  tag: v11.0.3@sha256:aeb1d81f269a5c37db7dcdc4dbcd221582f150f5ad15dc21893c6f63c46f5fbc
 
 workload:
   main:

charts/dependency/memcached/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "1.6.21"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.6
+    version: 14.0.12
 deprecated: false
 description: Memcached is a memory-backed database caching solution
 home: https://truecharts.org/charts/dependency/memcached
@@ -23,7 +23,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-memcached
   - http://memcached.org/
 type: application
-version: 8.0.16
+version: 8.0.30
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/memcached/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/memcached
   pullPolicy: IfNotPresent
-  tag: v1.6.21@sha256:117c7f246c0854b46f655a73f411f418e8f78a50cafec5e92d6ebfdb49319331
+  tag: v1.6.21@sha256:66ac27883febf5687134c4c7c4724437174d704565a3bf5e8ea0038d2f9e7c7b
 
 service:
   main:

charts/dependency/mongodb/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "6.0.9"
+appVersion: "7.0.2"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.6
+    version: 14.0.12
 deprecated: false
 description: Fast, reliable, scalable, and easy to use open-source no-sql database system.
 home: https://truecharts.org/charts/dependency/mongodb
@@ -23,7 +23,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-mongodb
   - https://www.mongodb.com
 type: application
-version: 8.0.11
+version: 8.0.26
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/mongodb/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/mongodb
   pullPolicy: IfNotPresent
-  tag: v6.0.9@sha256:8a867b30c13acb263a0b9f29b8fb9d733fe6bd659d84563db06102c45571dd25
+  tag: v7.0.2@sha256:6dd833c278dd211f6c8b5aa8cc32de2f886e53c347cb676cc8d8eb1e0de848f3
 
 workload:
   main:

charts/dependency/node-exporter/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "1.6.1"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.6
+    version: 14.0.12
 deprecated: false
 description: Prometheus exporter for hardware and OS metrics exposed by UNIX kernels, with pluggable metric collectors.
 home: https://truecharts.org/charts/dependency/node-exporter
@@ -21,7 +21,7 @@ name: node-exporter
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/node-exporter
 type: application
-version: 3.0.14
+version: 3.0.29
 annotations:
   truecharts.org/catagories: |
     - metrics

charts/dependency/node-exporter/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/node-exporter
   pullPolicy: IfNotPresent
-  tag: v1.6.1@sha256:0672c1a846be61018b11cd88ce0df3629d7a80ec895b93051b2b7a5c7fe8b080
+  tag: v1.6.1@sha256:c150064746d1155d557663650603ea428eacd22c40da62f2ec3078b4c2ade1ba
 
 service:
   main:

charts/dependency/redis/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "7.2.1"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.6
+    version: 14.0.12
 deprecated: false
 description: Open source, advanced key-value store.
 home: https://truecharts.org/charts/dependency/redis
@@ -23,7 +23,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-redis
   - http://redis.io/
 type: application
-version: 8.0.19
+version: 8.0.32
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/redis/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/redis
   pullPolicy: IfNotPresent
-  tag: v7.2.1@sha256:37dfec3b4ba963bb135f7948e82fec8753e0b52bf714307bf001a3e3d50f2fbf
+  tag: v7.2.1@sha256:01e1cd968ac2fa89c5c9008d49e63531d843c396eebff62f910784cbe2873811
 
 workload:
   main:

charts/dependency/solr/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "9.3.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.6
+    version: 14.0.12
 deprecated: false
 description: Apache Solr
 home: https://truecharts.org/charts/dependency/solr
@@ -22,7 +22,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/solr
   - https://github.com/apache/solr
 type: application
-version: 6.0.16
+version: 6.0.29
 annotations:
   truecharts.org/catagories: |
     - search

charts/dependency/solr/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/solr
   pullPolicy: IfNotPresent
-  tag: v9.3.0@sha256:a4c234e4dd04d2ebc4c18b97097973cb153fdb22a4ade306ad7607c1a032980c
+  tag: v9.3.0@sha256:6006fc17d23089aa2807b51eff894a5a1c90d2f1f0175714b6015da6137a6dd4
 
 workload:
   main:

charts/enterprise/authelia/Chart.yaml

@@ -3,11 +3,11 @@ appVersion: "4.37.5"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.9
   - condition: redis.enabled
     name: redis
     repository: https://deps.truecharts.org
-    version: 7.0.6
+    version: 8.0.29
 deprecated: false
 description: Authelia is a Single Sign-On Multi-Factor portal for web apps
 home: https://truecharts.org/charts/enterprise/authelia
@@ -35,7 +35,7 @@ sources:
   - https://github.com/authelia/chartrepo
   - https://github.com/authelia/authelia
 type: application
-version: 18.1.0
+version: 19.0.3
 annotations:
   truecharts.org/catagories: |
     - security

charts/enterprise/authelia/docs/Setup-Guide.md

@@ -103,6 +103,7 @@ The last step is adding the `forwardauth` along with the standard `ingress` sett
 - In this example we use the same name as above, or `auth`. Click `Add` to the `Traefik Middlewares` section, and enter your `forwardauth` name.
 
 ![TraefikForwardAuthMiddleware](img/TraefikForwardAuthMiddleware.png)
+
 ### References
 
 The origin material for this guide is available on the [LLDAP Github](https://github.com/lldap/lldap). While further information on Authelia can be found on their [Github](https://github.com/authelia/authelia) and [website](https://www.authelia.com/).

charts/enterprise/authelia/templates/_configmap.tpl

@@ -219,10 +219,10 @@ data:
         {{- with $notifier.smtp.username }}
         username: {{ . }}
         {{- end }}
-        sender: {{ $notifier.smtp.sender }}
-        identifier: {{ $notifier.smtp.identifier }}
+        sender: {{ $notifier.smtp.sender | quote }}
+        identifier: {{ $notifier.smtp.identifier | quote }}
         subject: {{ $notifier.smtp.subject | quote }}
-        startup_check_address: {{ $notifier.smtp.startup_check_address }}
+        startup_check_address: {{ $notifier.smtp.startup_check_address | quote }}
         disable_require_tls: {{ $notifier.smtp.disable_require_tls }}
         disable_html_emails: {{ $notifier.smtp.disable_html_emails }}
         tls:

charts/enterprise/blocky/Chart.yaml

@@ -1,13 +1,13 @@
 apiVersion: v2
-appVersion: "0.21.0"
+appVersion: "0.22.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.9
   - condition: redis.enabled
     name: redis
     repository: https://deps.truecharts.org
-    version: 7.0.6
+    version: 8.0.29
 description: Blocky is a DNS proxy, DNS enhancer and ad-blocker for the local network written in Go
 home: https://truecharts.org/charts/enterprise/blocky
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/blocky.png
@@ -25,7 +25,7 @@ sources:
   - https://0xerr0r.github.io/blocky/
   - https://github.com/0xERR0R/blocky
   - https://github.com/Mozart409/blocky-frontend
-version: 8.0.0
+version: 9.0.1
 annotations:
   truecharts.org/catagories: |
     - network

charts/enterprise/blocky/docs/setup-guide.md

@@ -1,12 +1,29 @@
 # Blocky Setup Guide
 
-This will guide you through the basic setup of Blocky which is the preferred DNS solution for TrueCharts. This guide will cover basic setup options which will get you up and running and is not all inclusive.
+This will guide you through the basic setup of Blocky which is the preferred DNS solution for TrueCharts. This guide will cover basic setup options which will get you up and running and is not all inclusive. Configuring your devices to use Blocky is out of scope of this guide.
 
 ## Upstream DNS
 
-Blocky has multiple DNS entries configured by default these can be overridden to your personal preferences or left as default.
+Blocky has the following DNS entries configured by default. They can be overridden to your personal preferences or left as default. Here are some common ones:
 
-Blocky supports 3 methods for upstream DNS.
+- 1.1.1.1
+- 1.0.0.1
+- 8.8.8.8
+- 8.8.4.4
+- 9.9.9.9
+- 149.112.112.112
+- 208.67.222.222
+- 208.67.220.220
+- 8.26.56.26
+- 8.20.247.20
+- 185.228.168.9
+- 185.228.169.9
+- 76.76.19.19
+- 76.223.122.150
+- 76.76.2.0
+- 76.76.10.0
+
+Blocky supports 3 methods for upstream DNS. You can use any combination of the below.
 
 - UDP - Basic DNS
 - DoT - DNS over TLS
@@ -37,9 +54,9 @@ While UDP provides no security for DNS both DoT and DoH will encrypt DNS request
 
 ## Bootstrap DNS
 
-For DNS providers that do not use an IP address for DoT or DoH a bootstrap DNS provider
- is needed to resolve the DoT or DoH address. This provider can be any UDP upstream DNS.
- In the below example I am using Google DNS.
+If you entered a non-IP address (meaning you used a domain name) for DoT or DoH, then you need to ensure that a bootstrap DNS provider
+is configured to resolve the DoT or DoH address. This provider can be any UDP upstream DNS.
+In the below example I am using Google DNS.
 
 ![blocky-bootstrap-google](./img/blocky-bootstrap-google.png)
 
@@ -59,10 +76,17 @@ certain blocklists if you find legitimate traffic being blocked.
 
 1. Pick a Group Name for your blocklists.
 2. Add List entries for each blocklist by URL.
-  ![blocky-blacklist](./img/blocky-blacklist.png)
+   ![blocky-blacklist](./img/blocky-blacklist.png)
 3. Add a Clients Group Block and set Client Group Name to `default`
 4. Under Groups Entry enter the Group name you used above.
-  ![blocky-blacklist-group](./img/blocky-blacklist-group.png)
+   ![blocky-blacklist-group](./img/blocky-blacklist-group.png)
+
+## Networking
+
+If you want to use Blocky on your local network to take advantage of the filtering above, or the k8s-gateway below, you
+need to setup a static ip address and leave the default setting DNS TCP Service and DNS UDP Service as LoadBalancer.
+
+You need to configure the devices on your network to use the static IP address configured above. This can be done per device or by changing the DHCP or DNS settings on your router.
 
 ## k8s-Gateway Configuration
 
@@ -75,4 +99,3 @@ is to add your root domain in the Domain name block.
 ## Prometheus/Grafana
 
 TBD
-

charts/enterprise/blocky/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: tccr.io/truecharts/blocky
-  tag: v0.21.0@sha256:ed72f8a64307b7b734174589ac631726dd642cc8202c3bdf2eeb1de4adedbe0a
+  tag: v0.22.0@sha256:385055de8ad0b9074d2057d054768d649b8289c5dd566367e0b6289ba5d661a4
   pullPolicy: IfNotPresent
 
 k8sgatewayImage:

charts/enterprise/clusterissuer/Chart.yaml

@@ -10,7 +10,7 @@ keywords:
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.9
 kubeVersion: ">=1.16.0-0"
 maintainers:
   - email: info@truecharts.org
@@ -21,7 +21,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/enterprise/clusterissuer
   - https://cert-manager.io/
 type: application
-version: 4.0.1
+version: 4.1.2
 annotations:
   truecharts.org/catagories: |
     - core

charts/enterprise/clusterissuer/docs/how-to.md

@@ -14,7 +14,6 @@ It is important to configure Scale with reliable nameserver to avoid issues hand
 
 ![clusterissuer scale nameservers](img/scale-network-nameserver.png)
 
-
 ## Install clusterissuer App
 
 :::note
@@ -37,7 +36,7 @@ Login to Cloudflare dashboard and go to the [Cloudflare API Tokens](https://dash
 
 ![clusterissuer app card](img/cf-apitokens-template.png)
 
-The recommended  `API Token` permissions are below:
+The recommended `API Token` permissions are below:
 ![clusterissuer app card](img/cf-apitokens-perms.png)
 
 #### Cloudflare ACME Issuer Settings

charts/enterprise/clusterissuer/questions.yaml

@@ -47,6 +47,8 @@ questions:
                             description: rfc2136 (Advanced)
                           - value: HTTP01
                             description: HTTP01 (Experimental)
+                          - value: acmedns
+                            description: ACME DNS (Advanced)
                     - variable: server
                       label: Server
                       description: "Server for ACME, for example: letsencrypt"
@@ -195,7 +197,64 @@ questions:
                         type: string
                         required: true
                         default: ""
-
+                    - variable: acmednsHost
+                      label: ACME DNS host
+                      description: "ACME DNS API server address"
+                      schema:
+                        show_if: [["type", "=", "acmedns"]]
+                        type: string
+                        required: true
+                        default: "https://auth.acme-dns.io"
+                    - variable: acmednsConfig
+                      label: ACME DNS config
+                      description: "ACME DNS per-domain auth configuration"
+                      schema:
+                        show_if: [["type", "=", "acmedns"]]
+                        type: list
+                        default: []
+                        items:
+                          - variable: acmednsEntry
+                            label: 'ACME DNS entry'
+                            schema:
+                              type: dict
+                              attrs:
+                                - variable: domain
+                                  label: Domain
+                                  schema:
+                                    type: string
+                                    required: true
+                                - variable: username
+                                  label: Username
+                                  schema:
+                                    type: string
+                                    required: true
+                                - variable: password
+                                  label: Password
+                                  schema:
+                                    type: string
+                                    required: true
+                                - variable: fulldomain
+                                  label: Full domain
+                                  schema:
+                                    type: string
+                                    required: true
+                                - variable: subdomain
+                                  label: Subdomain
+                                  schema:
+                                    type: string
+                                    required: true
+                                - variable: allowFrom
+                                  label: Allow from
+                                  schema:
+                                    type: list
+                                    default: []
+                                    items:
+                                      - variable: cidr
+                                        label: CIDR
+                                        schema:
+                                          type: ipaddr
+                                          cidr: true
+                                          required: true
         - variable: CA
           label: Certificate Authority Issuer
           schema:

charts/enterprise/clusterissuer/templates/clusterissuer/_ACME.tpl

@@ -1,15 +1,31 @@
 {{- define "certmanager.clusterissuer.acme" -}}
 {{- $operator := index $.Values.operator "cert-manager" -}}
 {{- $namespace := $operator.namespace | default "cert-manager" -}}
+
+{{- $rfctsigSecret := .rfctsigSecret | default "" -}}
+{{/* https://cert-manager.io/docs/configuration/acme/dns01/rfc2136/#troubleshooting */}}
+{{- if $rfctsigSecret -}} {{/* If we try to decode and fail, go on and encode it. */}}
+  {{- if (contains "illegal base64" (b64dec $rfctsigSecret)) -}}
+    {{- $rfctsigSecret = b64enc $rfctsigSecret -}}
+  {{- end -}}
+{{- end -}}
+
 {{- range .Values.clusterIssuer.ACME }}
-  {{- if not (mustRegexMatch "^[a-z]+(-?[a-z]){0,63}-?[a-z]+$" .name) -}}
+  {{- if or (not .name) (not (mustRegexMatch "^[a-z]+(-?[a-z]){0,63}-?[a-z]+$" .name)) -}}
     {{- fail "ACME - Expected name to be all lowercase with hyphens, but not start or end with a hyphen" -}}
   {{- end -}}
-  {{- $validTypes := list "HTTP01" "cloudflare" "route53" "digitalocean" "akamai" "rfc2136" -}}
+  {{- $validTypes := list "HTTP01" "cloudflare" "route53" "digitalocean" "akamai" "rfc2136" "acmedns" -}}
   {{- if not (mustHas .type $validTypes) -}}
     {{- fail (printf "Expected ACME type to be one of [%s], but got [%s]" (join ", " $validTypes) .type) -}}
   {{- end -}}
   {{- $issuerSecretName := printf "%s-clusterissuer-secret" .name }}
+  {{- $acmednsDict := dict -}}
+  {{- if and (eq .type "acmedns") (not .acmednsConfigJson) }}
+    {{- range .acmednsConfig }}
+      {{/* Transform to a dict with domain as a key, also remove domain from the dict */}}
+      {{- $_ := set $acmednsDict .domain (omit . "domain") -}}
+    {{- end }}
+  {{- end -}}
 ---
 apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
@@ -76,6 +92,12 @@ spec:
           tsigSecretSecretRef:
             name: {{ $issuerSecretName }}
             key: rfctsigSecret
+      {{- else if eq .type "acmedns" }}
+        acmeDNS:
+          host: {{ .acmednsHost }}
+          accountSecretRef:
+            name: {{ $issuerSecretName }}
+            key: acmednsJson
       {{- end -}}
     {{- end }}
 ---
@@ -93,6 +115,11 @@ stringData:
   akclientSecret: {{ .akclientSecret | default "" }}
   akaccessToken: {{ .akaccessToken | default "" }}
   doaccessToken: {{ .doaccessToken | default "" }}
-  rfctsigSecret: {{ .rfctsigSecret | default "" }}
-{{- end }}
+  rfctsigSecret: {{ $rfctsigSecret }}
+{{- if .acmednsConfigJson }}
+  acmednsJson: {{ .acmednsConfigJson }}
+{{- else if $acmednsDict }}
+  acmednsJson: {{ toJson $acmednsDict }}
+{{- end -}}
+  {{- end -}}
 {{- end -}}

charts/enterprise/clusterissuer/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: tccr.io/truecharts/scratch
-  tag: latest@sha256:1a9a10a0a5f5cb5fe4b30ac6d9c56ff87ad47f3f3490bafb6938fc155230131b
+  tag: latest@sha256:3bf74a004e49495307bf61ade401ccde159ce5f3930992ec42e747877df5d558
   pullPolicy: IfNotPresent
 manifestManager:
   enabled: true
@@ -59,7 +59,7 @@ clusterIssuer:
 #     # Used primarily for the SCALE GUI
 #     customServer: 'https://acme-staging-v02.api.letsencrypt.org/directory'
 #     email: ""
-#     # Options: HTTP01, cloudflare, route53
+#     # Options: HTTP01, cloudflare, route53, akamai, digitalocean, rfc2136, acmedns
 #     type: ""
 #     # for cloudflare
 #     cfapikey: ""
@@ -82,3 +82,15 @@ clusterIssuer:
 #     tsigKeyName: ""
 #     tsigAlgorithm: ""
 #     rfctsigSecret: ""
+#     # for acmedns
+#     name: sd
+#     acmednsHost: asdf
+#     # Pick one of the bellow acmednsConfig
+#     acmednsConfigJson:
+#     acmednsConfig:
+#       - domain: ""
+#         username: ""
+#         password: ""
+#         fulldomain: ""
+#         subdomain: ""
+#         allowFrom: []

charts/enterprise/grafana/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "10.1.1"
+appVersion: "10.1.4"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.9
 deprecated: false
 description: Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, Elasticsearch, OpenTSDB, Prometheus and InfluxDB.
 home: https://truecharts.org/charts/enterprise/grafana
@@ -24,7 +24,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-grafana
   - https://grafana.com/
 type: application
-version: 9.0.11
+version: 9.0.26
 annotations:
   truecharts.org/catagories: |
     - metrics

charts/enterprise/grafana/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/grafana
   pullPolicy: IfNotPresent
-  tag: v10.1.1@sha256:2d274c7e2ea23f214f27ed907d816e9bad56c48cd03d1f34d650f43e184565d2
+  tag: v10.1.4@sha256:5f1b6a54159762bbe2912502f36088914bc389d0769bfe3cea89ae2d99a11a39
 manifestManager:
   enabled: true
 securityContext:

charts/enterprise/metallb-config/Chart.yaml

@@ -10,7 +10,7 @@ keywords:
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.9
 kubeVersion: ">=1.16.0-0"
 maintainers:
   - email: info@truecharts.org
@@ -22,7 +22,7 @@ sources:
   - https://github.com/metallb/metallb
   - https://metallb.universe.tf
 type: application
-version: 3.0.0
+version: 3.0.3
 annotations:
   truecharts.org/catagories: |
     - core

charts/enterprise/metallb-config/docs/setup-guide.md

@@ -4,7 +4,7 @@ The guide walks through a basic configuration of MetalLB for a single address po
 
 :::warning
 
-With MetalLB installed, apps will not be reachable using the integrated loadbalancer. You cannot combine two different loadbalancers in TrueNAS SCALE.
+With MetalLB installed, apps will not be reachable using the integrated LoadBalancer. You cannot combine two different LoadBalancers in TrueNAS SCALE.
 
 :::
 
@@ -14,6 +14,12 @@ With MetalLB installed, apps will not be reachable using the integrated loadbala
 
 ![metallb-addtrains](img/metallb_guide_trains.png)
 
+:::caution
+
+Our customized version of MetalLB is only intended for use with other TrueCharts applications. Other catalogs will likely not support our MetalLB application. MetalLB could technically work with TrueNAS catalog apps if they used the LoadBalancer service, but they don't as they use NodePort instead. These atypical configurations aren't officially supported nor encouraged by TrueCharts.
+
+:::
+
 ## 1. Install MetalLB Operator from Operators Train
 
 ![metallb-apps](img/metallb_guide_apps.png)
@@ -21,7 +27,7 @@ With MetalLB installed, apps will not be reachable using the integrated loadbala
 Install `metallb` from `operators` train first. There is no config, so just hit save.
 
 If you encounter an error upon install, run the following command as root from system settings -> shell and attempt the install again:
-```k3s kubectl delete  --grace-period 30 --v=4 -k https://github.com/truecharts/manifests/delete```
+`k3s kubectl delete --grace-period 30 --v=4 -k https://github.com/truecharts/manifests/delete`
 
 If you previously had `metallb` installed and encounter an error, delete the old version, then run the above command before proceeding to install the `metallb` operator.
 
@@ -57,21 +63,21 @@ Once installed, `metallb-config` will always show as Stopped.
 
 ![metallb-specifyIP](img/metallb_guide_specifyIP.png)
 
-With MetalLB installed, its is recommended (but optional) to specify IP addresses for your apps.
+With MetalLB installed, it's recommended (but optional) to specify IP addresses for your apps.
 
 For each app, under **Networking and Services**, select `LoadBalancer` Service Type for the Main Service.
 
 In the **LoadBalancer IP** field, specify an IP address that is within the MetalLB address pool that you configured. Apply the same IP address to the **LoadBalancer IP** field on other services within the app.
 
-## 4. Disable SCALE's Default Loadbalancer
+## 4. Disable SCALE's Default LoadBalancer
 
-With MetalLB installed and configured, you must now disable SCALE's default loadbalancer.
+With MetalLB installed and configured, you must now disable SCALE's default LoadBalancer.
 
 In the SCALE UI, under **Apps** > **Settings** > **Advanced Settings**
 
 ![metallb-disable](img/metallb_guide_disableLB.png)
 
-Uncheck `Enable Integrated Loadbalancer`.
+Uncheck `Enable Integrated LoadBalancer`.
 
 **This will trigger a restart of Kubernetes and all apps**. After roughly 5-10 minutes, your apps will redeploy using the MetalLB-assigned IP addresses.
 

charts/enterprise/metallb-config/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: tccr.io/truecharts/scratch
-  tag: latest@sha256:1a9a10a0a5f5cb5fe4b30ac6d9c56ff87ad47f3f3490bafb6938fc155230131b
+  tag: latest@sha256:3bf74a004e49495307bf61ade401ccde159ce5f3930992ec42e747877df5d558
   pullPolicy: IfNotPresent
 manifestManager:
   enabled: false
@@ -26,7 +26,7 @@ service:
       main:
         enabled: false
         port: 9999
-        
+
 operator:
   verify:
     enabled: true

charts/enterprise/prometheus/Chart.yaml

@@ -1,17 +1,17 @@
 apiVersion: v2
-appVersion: "2.46.0"
+appVersion: "2.47.1"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.9
   - condition: exporters.enabled,exporters.node-exporter.enabled
     name: node-exporter
     repository: https://deps.truecharts.org
-    version: 2.0.7
+    version: 3.0.25
   - condition: exporters.enabled,exporters.kube-state-metrics.enabled
     name: kube-state-metrics
     repository: https://deps.truecharts.org
-    version: 2.0.6
+    version: 3.0.23
 deprecated: false
 description: kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/prometheus.png
@@ -29,7 +29,7 @@ sources:
   - https://github.com/prometheus-community/helm-charts
   - https://github.com/prometheus-operator/kube-prometheus
 type: application
-version: 12.1.2
+version: 13.0.7
 annotations:
   truecharts.org/catagories: |
     - metrics

charts/enterprise/prometheus/values.yaml

@@ -1,16 +1,15 @@
 image:
   repository: tccr.io/truecharts/prometheus
-  tag: v2.46.0@sha256:0b0dc821c06967e8562bf32ebd9055eef7f1ddd8851187acbf8871d8bd9c72a3
+  tag: v2.47.1@sha256:82f231253e159e8d5504f2c1a67fa5b82eb005d7902ffd4d0ed32546b30c3d72
 
 thanosImage:
   repository: tccr.io/truecharts/thanos
-  tag: 0.31.0@sha256:28282d3e63f84cdeeb05e965b173b610d5597997acc7ce75d5849207b0f97b28
+  tag: v0.32.4@sha256:48af596fa350c6889e102249523fd4da6ab926ba6fcfbe0b1dcac1c5e8a2bec0
 
 alertmanagerImage:
   repository: tccr.io/truecharts/alertmanager
-  tag: 0.25.0@sha256:6b534671b83aa7fbd91d1b10bf0f1b29b948e4b300f8359a86043d0deba07207
-manifestManager:
-  enabled: true
+  tag: v0.26.0@sha256:75279c577a514e90854126ba950cf7afaeac43eda85405fba394658b17ca0a6f
+
 global:
   labels: {}
 workload:

charts/enterprise/traefik/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "2.10.4"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.9
 deprecated: false
 description: Traefik is a flexible reverse proxy and Ingress Provider.
 home: https://truecharts.org/charts/enterprise/traefik
@@ -23,7 +23,7 @@ sources:
   - https://github.com/traefik/traefik-helm-chart
   - https://traefik.io/
 type: application
-version: 21.0.4
+version: 21.0.7
 annotations:
   truecharts.org/catagories: |
     - network

charts/enterprise/traefik/docs/Authelia-LLDAP-forwardauth.md

@@ -1,3 +1,3 @@
 # Authelia + LLDAP + Traefik ForwardAuth Setup guide
 
-Please refer to the full [Authelia + LLDAP + Traefik ForwardAuth Setup guide](https://truecharts.org/charts/enterprise/authelia/Setup-Guide) for a quick guide should take you through the steps necessary to setup `Authelia` as your `forwardAuth` for `Traefik`. 
+Please refer to the full [Authelia + LLDAP + Traefik ForwardAuth Setup guide](https://truecharts.org/charts/enterprise/authelia/Setup-Guide) for a quick guide should take you through the steps necessary to setup `Authelia` as your `forwardAuth` for `Traefik`.

charts/enterprise/vaultwarden/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "1.29.1"
+appVersion: "1.29.2"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.9
 deprecated: false
 description: Unofficial Bitwarden compatible server written in Rust
 home: https://truecharts.org/charts/enterprise/vaultwarden
@@ -25,7 +25,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/enterprise/vaultwarden
   - https://github.com/dani-garcia/vaultwarden
 type: application
-version: 22.0.0
+version: 23.0.2
 annotations:
   truecharts.org/catagories: |
     - security

charts/enterprise/vaultwarden/questions.yaml

@@ -200,14 +200,21 @@ questions:
                       schema:
                         type: string
                         default: ""
-                    - variable: ssl
+                    - variable: security
                       label: "Enable SSL connection"
                       schema:
-                        type: boolean
-                        default: true
+                        type: string
+                        default: "starttls"
+                        enum:
+                          - value: "starttls"
+                            description: "STARTTLS (587)"
+                          - value: "force_tls"
+                            description: "FORCE_TLS (465)"
+                          - value: "off"
+                            description: "OFF (25)"
                     - variable: port
                       label: "SMTP port"
-                      description: "Usually: 25 without SSL, 587 with SSL"
+                      description: "Usually: 587 with STARTTLS, 465 with FORCE_TLS, and 25 without SSL"
                       schema:
                         type: int
                         default: 587

charts/enterprise/vaultwarden/templates/_configmap.tpl

@@ -47,7 +47,7 @@ data:
   SMTP_FROM_NAME: {{ .Values.vaultwarden.smtp.fromName | quote }}
   {{- end }}
   {{- if .Values.vaultwarden.smtp.ssl }}
-  SMTP_SSL: {{ .Values.vaultwarden.smtp.ssl | quote }}
+  SMTP_SECURITY: {{ .Values.vaultwarden.smtp.security | quote }}
   {{- end }}
   {{- if .Values.vaultwarden.smtp.port }}
   SMTP_PORT: {{ .Values.vaultwarden.smtp.port | quote }}

charts/enterprise/vaultwarden/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/vaultwarden
   pullPolicy: IfNotPresent
-  tag: v1.29.1@sha256:5a670aee4b1a57a5a414607f9222f558ab365625f64ff78885f7776971c95b54
+  tag: v1.29.2@sha256:f5761cdd99e267221623b7a91d123153885afd0980b31c863de039245b73aad3
 manifestManager:
   enabled: true
 service:
@@ -95,8 +95,8 @@ vaultwarden:
     ## SMTP sender name, defaults to 'Bitwarden_RS'.
     # fromName: ""
     ## Enable SSL connection.
-    # ssl: true
-    ## SMTP port. Defaults to 25 without SSL, 587 with SSL.
+    # security: starttls
+    ## SMTP port. Defaults to 587 with STARTTLS, 465 with FORCE_TLS, and 25 without SSL.
     # port: 587
     ## SMTP Authentication Mechanisms. Comma-separated options: 'Plain', 'Login' and 'Xoauth2'. Defaults to 'Plain'.
     # authMechanism: Plain
@@ -126,7 +126,7 @@ vaultwarden:
   push:
     enabled: false
     # installationId:
-    # installationKey: 
+    # installationKey:
 
   ## Logging options. https://github.com/dani-garcia/bitwarden_rs/wiki/Logging
   log:

charts/incubator/arksurvivalevolved/templates/common.yaml

@@ -1,16 +0,0 @@
-{{/* Make sure all variables are set properly */}}
-{{- include "tc.common.loader.init" . }}
-
-{{- if ne (int .Values.service.udp2.ports.udp2.port) (add1 (int .Values.service.main.ports.main.port)) -}}
-  {{- fail (printf "In the service udp2, the port for udp2 must be greater by 1 than the main service's port. You have to set it to <%s>." (add1 .Values.service.main.ports.main.port)) }}
-{{- end -}}
-
-{{- if and (ge (int .Values.service.udpsteam.ports.udpsteam.port) 27020) (le (int .Values.service.udpsteam.ports.udpsteam.port) 27050) -}}
-  {{- fail "UDP Steam Service port cannot be between 27020 and 27050." -}}
-{{- end }}
-
-{{/* Render secret */}}
-{{- include "ark.secret" . }}
-
-{{/* Render the templates */}}
-{{ include "tc.common.loader.apply" . }}

charts/incubator/arksurvivalevolved/values.yaml

@@ -1,83 +0,0 @@
-image:
-  pullPolicy: IfNotPresent
-  repository: tccr.io/truecharts/arksurvivalevolved
-  tag: latest@sha256:6c3c2c8ce43c350b88e93943eb99265499680011f2eb5b912652e226a19bd47c
-
-podSecurityContext:
-  runAsGroup: 0
-  runAsUser: 0
-
-securityContext:
-  readOnlyRootFilesystem: false
-  runAsNonRoot: false
-
-ark:
-  srv_admin_pass: ""
-  srv_password: ""
-  username: ""
-  password: ""
-  game_id: "376030"
-  rcon_enabled: true
-  game_params: []
-  game_params_extra: []
-  easy_game_extra_params:
-    server: true
-    log: true
-    crossplay: true
-  map: TheIsland
-  # Used only for SCALE GUI
-  custom_map: ""
-  server_name: ""
-  validate: false
-
-envFrom:
-  - secretRef:
-      name: '{{ include "tc.common.names.fullname" . }}-secret'
-
-probes:
-  liveness:
-    port: "{{ .Values.service.rcontcp.ports.rcontcp.port }}"
-  readiness:
-    port: "{{ .Values.service.rcontcp.ports.rcontcp.port }}"
-  startup:
-    port: "{{ .Values.service.rcontcp.ports.rcontcp.port }}"
-
-service:
-  main:
-    ports:
-      main:
-        port: 7777
-        protocol: UDP
-  udp2:
-    enabled: true
-    ports:
-      udp2:
-        enabled: true
-        # This should always be main +1
-        port: 7778
-        protocol: UDP
-  udpsteam:
-    enabled: true
-    ports:
-      udpsteam:
-        enabled: true
-        port: 27015
-        protocol: UDP
-  rcontcp:
-    enabled: true
-    ports:
-      rcontcp:
-        enabled: true
-        port: 27020
-        protocol: TCP
-
-persistence:
-  serverfiles:
-    enabled: true
-    mountPath: /serverdata/serverfiles
-  steamcmd:
-    enabled: true
-    mountPath: /serverdata/steamcmd
-
-portal:
-  enabled: true

charts/incubator/automatic-ripping-machine/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "2.6.60"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.9
 deprecated: false
 description: Automatic Ripping Machine (ARM) Scripts.
 home: https://truecharts.org/charts/incubator/automatic-ripping-machine
@@ -21,7 +21,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/automatic-ripping-machine
   - https://github.com/automatic-ripping-machine/automatic-ripping-machine
 type: application
-version: 0.0.1
+version: 0.0.2
 annotations:
   truecharts.org/catagories: |
     - media

charts/incubator/backuppc/Chart.yaml

@@ -1,16 +1,11 @@
-annotations:
-  truecharts.org/SCALE-support: "true"
-  truecharts.org/catagories: |
-    - Backup
-    - Network-Web
 apiVersion: v2
-appVersion: "latest"
+appVersion: "6.0.2"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
+    version: 14.0.9
 deprecated: false
-description: BackupPC is a high-performance, enterprise-grade system for backing up Linux, Windows and macOS PCs and laptops to a server's disk.
+description: A high-performance, enterprise-grade system for backing up Linux, Windows and macOS PCs and laptops to a server's disk.
 home: https://truecharts.org/charts/incubator/backuppc
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/backuppc.png
 keywords:
@@ -25,6 +20,12 @@ maintainers:
 name: backuppc
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/backuppc
+  - https://github.com/tiredofit/docker-backuppc
   - https://backuppc.github.io/backuppc/index.html
 type: application
-version: 2.0.16
+version: 3.0.1
+annotations:
+  truecharts.org/catagories: |
+    - Backup
+    - Network-Web
+  truecharts.org/SCALE-support: "true"

charts/incubator/backuppc/questions.yaml

@@ -10,9 +10,84 @@ questions:
 # Include{replicas1}
 # Include{podSpec}
 # Include{containerMain}
+
 # Include{containerBasic}
 # Include{containerAdvanced}
 
+  - variable: backuppc
+    group: App Configuration
+    label: Backup PC
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: smtp
+          label: SMTP Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: auto_from
+                label: Auto From
+                description: Add setting to support sending through Gmail SMTP.
+                schema:
+                  type: boolean
+                  default: false
+              - variable: host
+                label: SMTP Host
+                schema:
+                  type: string
+                  default: ""
+              - variable: port
+                label: SMTP Port
+                schema:
+                  type: int
+                  default: 25
+              - variable: domain
+                label: HELO Domain
+                schema:
+                  type: string
+                  default: ""
+              - variable: maildomain
+                label: Mail Domain From.
+                schema:
+                  type: string
+                  default: ""
+              - variable: auth
+                label: SMTP Authentication
+                schema:
+                  type: string
+                  default: "NONE"
+              - variable: user
+                label: SMTP Username
+                schema:
+                  type: string
+                  default: ""
+              - variable: pass
+                label: SMTP Password
+                schema:
+                  type: string
+                  private: true
+                  default: ""
+              - variable: tls
+                label: TLS
+                description: Use TLS.
+                schema:
+                  type: boolean
+                  default: false
+              - variable: starttls
+                label: StartTLS
+                description:     Start TLS from within session.
+                schema:
+                  type: boolean
+                  default: false
+              - variable: tlscertcheck
+                label: TLS Cert Check
+                description: Check remote certificate.
+                schema:
+                  type: boolean
+                  default: false
+
 # Include{containerConfig}
 # Include{serviceRoot}
         - variable: main
@@ -41,33 +116,33 @@ questions:
 # Include{serviceExpert}
 # Include{serviceList}
 # Include{persistenceRoot}
-        - variable: backuplocation
-          label: "backuplocation Storage"
-          description: "Backup Location"
+        - variable: config
+          label: "App Config Storage"
+          description: "Stores the Application Configuration."
           schema:
             additional_attrs: true
             type: dict
             attrs:
 # Include{persistenceBasic}
-        - variable: configurationfiles
-          label: "configurationfiles Storage"
-          description: "Configuration Files"
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
-# Include{persistenceBasic}
-        - variable: homedirectory
-          label: "homedirectory Storage"
-          description: "Home Directory for Backuppc (SSH Keys)"
+        - variable: ssh
+          label: "App SSH Storage"
+          description: "Stores the Application SSH."
           schema:
             additional_attrs: true
             type: dict
             attrs:
 # Include{persistenceBasic}
         - variable: logs
-          label: "logs Storage"
-          description: "Logs"
+          label: "App Logs Storage"
+          description: "Stores the Application Logs."
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{persistenceBasic}
+        - variable: data
+          label: "App Data Storage"
+          description: "Stores the Application Data."
           schema:
             additional_attrs: true
             type: dict
@@ -96,7 +171,7 @@ questions:
                   default: 0
               - variable: runAsGroup
                 label: "runAsGroup"
-                description: "The groupID of the user running the application"
+                description: "The groupID this App of the user running the application"
                 schema:
                   type: int
                   default: 0

charts/incubator/backuppc/templates/common.yaml

@@ -1,2 +1 @@
-{{/* Render the templates */}}
-{{ include "tc.common.loader.all" . }}
+{{ include "tc.v1.common.loader.all" . }}

charts/incubator/backuppc/values.yaml

@@ -1,34 +1,76 @@
-env: {}
 image:
   pullPolicy: IfNotPresent
   repository: tccr.io/truecharts/backuppc
-  tag: latest@sha256:299db42e6562324141408027763266510dfec1d81a6af2e0aa6368bca498872d
-persistence:
-  backuplocation:
-    enabled: true
-    mountPath: /var/lib/backuppc
-  configurationfiles:
-    enabled: true
-    mountPath: /etc/backuppc
-  homedirectory:
-    enabled: true
-    mountPath: /home/backuppc
-  logs:
-    enabled: true
-    mountPath: /www/logs
-podSecurityContext:
-  runAsGroup: 0
-  runAsUser: 0
+  tag: v6.0.2@sha256:80fe126415f0b530dd7d2645da23c8409f62f184a018c52a3ec1d8c5237d30ff
+
 securityContext:
-  readOnlyRootFilesystem: false
-  runAsNonRoot: false
+  container:
+    runAsNonRoot: false
+    readOnlyRootFilesystem: false
+    runAsUser: 0
+    runAsGroup: 0
+
 service:
   main:
     ports:
       main:
-        port: 8000
-        protocol: TCP
+        protocol: http
         targetPort: 80
+        port: 8000
+
+backuppc:
+  smtp:
+    auto_from: false
+    host: postfix-relay
+    port: 25
+    domain: docker
+    maildomain: local
+    auth: none
+    user: ""
+    pass: ""
+    tls: false
+    starttls: false
+    tlscertcheck: false
+
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          env:
+            USER_BACKUPPC: "{{ .Values.securityContext.container.PUID }}"
+            GROUP_BACKUPPC: "{{ .Values.securityContext.pod.fsGroup }}"
+            CONFIG_PATH: "{{ .Values.persistence.config.mountPath }}"
+            LOG_PATH: "{{ .Values.persistence.logs.mountPath }}"
+            SSH_KEYS_PATH: "{{ .Values.persistence.ssh.mountPath }}"
+            DATA_PATH: "{{ .Values.persistence.data.mountPath }}"
+            # SMTP
+            SMTP_AUTO_FROM: "{{ .Values.backuppc.smtp.auto_from }}"
+            SMTP_HOST: "{{ .Values.backuppc.smtp.host }}"
+            SMTP_PORT: "{{ .Values.backuppc.smtp.port }}"
+            SMTP_DOMAIN: "{{ .Values.backuppc.smtp.domain }}"
+            SMTP_MAILDOMAIN: "{{ .Values.backuppc.smtp.maildomain }}"
+            SMTP_AUTHENTICATION: "{{ .Values.backuppc.smtp.auth }}"
+            SMTP_USER: "{{ .Values.backuppc.smtp.user }}"
+            SMTP_PASS: "{{ .Values.backuppc.smtp.pass }}"
+            SMTP_TLS: "{{ .Values.backuppc.smtp.tls }}"
+            SMTP_STARTTLS: "{{ .Values.backuppc.smtp.starttls }}"
+            SMTP_TLSCERTCHECK: "{{ .Values.backuppc.smtp.tlscertcheck }}"
+
+persistence:
+  config:
+    enabled: true
+    mountPath: /config
+  ssh:
+    enabled: true
+    mountPath: /.ssh
+  logs:
+    enabled: true
+    mountPath: /logs
+  data:
+    enabled: true
+    mountPath: /data
 
 portal:
-  enabled: true
+  open:
+    enabled: true

charts/incubator/ctfd/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "3.5.3"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.9
   - condition: mariadb.enabled
     name: mariadb
     repository: https://deps.truecharts.org/
@@ -29,7 +29,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/ctfd
   - https://github.com/CTFd/CTFd
 type: application
-version: 0.0.1
+version: 0.0.2
 annotations:
   truecharts.org/catagories: |
     - learning

charts/incubator/docassemble/Chart.yaml

@@ -0,0 +1,28 @@
+apiVersion: v2
+appVersion: "latest"
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 14.0.9
+deprecated: false
+description: A free, open-source expert system for guided interviews and document assembly.
+home: https://truecharts.org/charts/incubator/docassemble
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/docassemble.png
+keywords:
+  - docassemble
+  - documentation
+kubeVersion: ">=1.16.0-0"
+maintainers:
+  - email: info@truecharts.org
+    name: TrueCharts
+    url: https://truecharts.org
+name: docassemble
+sources:
+  - https://github.com/truecharts/charts/tree/master/charts/incubator/docassemble
+  - https://github.com/jhpyle/docassemble
+type: application
+version: 0.0.3
+annotations:
+  truecharts.org/catagories: |
+    - documentation
+  truecharts.org/SCALE-support: "true"

charts/incubator/docassemble/questions.yaml

@@ -10,45 +10,33 @@ questions:
 # Include{replicas1}
 # Include{podSpec}
 # Include{containerMain}
+
 # Include{containerBasic}
 # Include{containerAdvanced}
 
-  - variable: env
-    group: "App Configuration"
-    label: "Image Environment"
+  - variable: docassemble
+    group: App Configuration
+    label: Docassemble
     schema:
       additional_attrs: true
       type: dict
       attrs:
-        - variable: WINEPREFIX
-          label: "WINEPREFIX"
+        - variable: hostname
+          label: HostName
           schema:
             type: string
-            default: "/root/server"
-        - variable: WINEARCH
-          label: "WINEARCH"
+            required: true
+            default: "http://localhost:10685"
+        - variable: behind_loadbalancer
+          label: Behind LoadBalancer
           schema:
-            type: string
-            default: "win64"
-        - variable: WINEDEBUG
-          label: "WINEDEBUG"
-          schema:
-            type: string
-            default: "-all"
-        - variable: APT_KEY_DONT_WARN_ON_DANGEROUS_USAGE
-          label: "APT_KEY_DONT_WARN_ON_DANGEROUS_USAGE"
-          schema:
-            type: string
-            default: "1"
+            type: boolean
+            default: false
+
 # Include{containerConfig}
+# Include{podOptions}
 # Include{serviceRoot}
-        - variable: main
-          label: "Main Service"
-          description: "The Primary service on which the healthcheck runs, often the webUI"
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
+# Include{serviceMain}
 # Include{serviceSelectorLoadBalancer}
 # Include{serviceSelectorExtras}
                     - variable: main
@@ -62,35 +50,47 @@ questions:
                             description: "This port exposes the container port on the service"
                             schema:
                               type: int
-                              default: 27017
+                              default: 10685
                               required: true
 # Include{serviceExpertRoot}
 # Include{serviceExpert}
 # Include{serviceList}
 # Include{persistenceRoot}
-        - variable: steamcmd
-          label: "steamcmd Storage"
+        - variable: config
+          label: "App Config Storage"
+          description: "Stores the Application Configuration."
           schema:
             additional_attrs: true
             type: dict
             attrs:
 # Include{persistenceBasic}
-        - variable: serverfiles
-          label: "serverfiles Storage"
+        - variable: webapp
+          label: "App Web App Storage"
+          description: "Stores the Application Web App."
           schema:
             additional_attrs: true
             type: dict
             attrs:
 # Include{persistenceBasic}
-        - variable: savegame
-          label: "savegame Storage"
+        - variable: log
+          label: "App Log Storage"
+          description: "Stores the Application Log."
           schema:
             additional_attrs: true
             type: dict
             attrs:
 # Include{persistenceBasic}
-        - variable: serverconfig
-          label: "serverconfig Storage"
+        - variable: backup
+          label: "App Backup Storage"
+          description: "Stores the Application Backup."
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{persistenceBasic}
+        - variable: files
+          label: "App Files Storage"
+          description: "Stores the Application Files."
           schema:
             additional_attrs: true
             type: dict
@@ -116,13 +116,13 @@ questions:
                 description: "The UserID of the user running the application"
                 schema:
                   type: int
-                  default: 0
+                  default: 568
               - variable: runAsGroup
                 label: "runAsGroup"
                 description: "The groupID of the user running the application"
                 schema:
                   type: int
-                  default: 0
+                  default: 568
 # Include{securityContextContainer}
 # Include{securityContextAdvanced}
 # Include{securityContextPod}

charts/incubator/docassemble/values.yaml

@@ -0,0 +1,79 @@
+image:
+  repository: tccr.io/truecharts/docassemble
+  pullPolicy: IfNotPresent
+  tag: latest@sha256:665fbaf35a7548e0418947a8d1e193416fffd0a8a738cb2603310137a6fd16d1
+
+service:
+  main:
+    ports:
+      main:
+        protocol: http
+        port: 10685
+  rcon:
+    enabled: true
+    ports:
+      rcon:
+        enabled: true
+        port: 25575
+
+docassemble:
+  hostname: docassemble.example.com
+  behind_loadbalancer: false
+
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          probes:
+            liveness:
+              path: "/health_check"
+              type: http
+            readiness:
+              path: "/health_check"
+              type: http
+            startup:
+              path: "/health_check"
+              type: http
+          env:
+            DBNAME: "{{ .Values.cnpg.main.database  }}"
+            DBUSER: "{{ .Values.cnpg.main.user }}"
+            DBPASSWORD:
+              secretKeyRef:
+                name: cnpg-main-user
+                key: password
+            DBHOST:
+              secretKeyRef:
+                name: cnpg-main-urls
+                key: host
+            PORT: "{{ .Values.service.main.ports.main.port }}"
+            BEHINDHTTPSLOADBALANCER: "{{ .Values.docassemble.behind_loadbalancer }}"
+            DAHOSTNAME: "{{ .Values.docassemble.hostname }}"
+
+persistence:
+  config:
+    enabled: true
+    mountPath: "/usr/share/docassemble/config"
+  webapp:
+    enabled: true
+    mountPath: "/usr/share/docassemble/webapp"
+  log:
+    enabled: true
+    mountPath: "/usr/share/docassemble/log"
+  backup:
+    enabled: true
+    mountPath: "/usr/share/docassemble/backup"
+  files:
+    enabled: true
+    mountPath: "/usr/share/docassemble/files"
+
+# Enabled postgres
+cnpg:
+  main:
+    enabled: true
+    user: docassemble
+    database: docassemble
+
+portal:
+  open:
+    enabled: true

charts/incubator/eco/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "latest"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.3
+    version: 14.0.9
 deprecated: false
 description: A custom SteamCMD chart that runs ECO.
 home: https://truecharts.org/charts/incubator/eco
@@ -21,7 +21,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/eco
   - https://github.com/ich777/docker-steamcmd-server/tree/eco
 type: application
-version: 3.1.0
+version: 3.1.2
 annotations:
   truecharts.org/catagories: |
     - games

charts/incubator/eco/values.yaml

@@ -14,7 +14,7 @@ service:
   main:
     ports:
       main:
-        protocol: http
+        protocol: tcp
         port: 3001
   game:
     enabled: true
@@ -57,16 +57,14 @@ workload:
         main:
           probes:
             liveness:
-              path: "/"
-              type: http
-              port: "{{ .Values.service.main.ports.main.port }}"
-            readiness:
-              path: "/"
-              type: http
-              port: "{{ .Values.service.main.ports.main.port }}"
-            startup:
+              enabled: true
+              type: tcp
+            readiness:
+              enabled: true
+              type: tcp
+            startup:
+              enabled: true
               type: tcp
-              port: "{{ .Values.service.main.ports.main.port }}"
           env:
             STEAMCMD_DIR: "{{ .Values.persistence.steamcmd.mountPath }}"
             SERVER_DIR: "{{ .Values.persistence.serverfiles.mountPath }}"
@@ -87,12 +85,9 @@ persistence:
     enabled: true
     type: configmap
     objectName: eco-network
-    targetSelector:
-      main:
-        main:
-          mountPath: /serverdata/serverfiles/Configs/Network.eco
-          subPath: Network.eco
-          readOnly: true
+    mountPath: /serverdata/serverfiles/Configs/Network.eco
+    subPath: Network.eco
+    readOnly: true
 
 portal:
   open:

charts/incubator/factorio/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "stable"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.3
+    version: 14.0.9
 deprecated: false
 description: A game in which you build and maintain factories.
 home: https://truecharts.org/charts/incubator/factorio
@@ -21,7 +21,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/factorio
   - https://github.com/factoriotools/factorio-docker
 type: application
-version: 4.1.0
+version: 4.1.1
 annotations:
   truecharts.org/catagories: |
     - GameServers

charts/incubator/filestash/Chart.yaml

@@ -1,17 +1,11 @@
-annotations:
-  truecharts.org/SCALE-support: "true"
-  truecharts.org/catagories: |
-    - Cloud
-    - Productivity
-    - Network-Web
 apiVersion: v2
 appVersion: "latest"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
+    version: 14.0.9
 deprecated: false
-description: A modern web client for SFTP, S3, FTP, WebDAV, Git, Minio, LDAP, CalDAV, CardDAV, Mysql, Backblaze, ...
+description: A Dropbox-like file manager that let you manage your data anywhere it is located.
 home: https://truecharts.org/charts/incubator/filestash
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/filestash.png
 keywords:
@@ -27,6 +21,11 @@ maintainers:
 name: filestash
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/filestash
+  - https://github.com/mickael-kerjean/filestash
   - https://www.filestash.app/
 type: application
-version: 2.0.17
+version: 3.0.0
+annotations:
+  truecharts.org/catagories: |
+    - Cloud
+  truecharts.org/SCALE-support: "true"

charts/incubator/filestash/questions.yaml

@@ -10,29 +10,59 @@ questions:
 # Include{replicas1}
 # Include{podSpec}
 # Include{containerMain}
+
+                                - variable: env
+                                  label: Image Environment
+                                  schema:
+                                    additional_attrs: true
+                                    type: dict
+                                    attrs:
+                                      - variable: APPLICATION_URL
+                                        label: Application Url
+                                        description: "Configure it either as http://ip:port or as https://mydomain.tld."
+                                        schema:
+                                          type: string
+                                          required: true
+                                          default: "http://localhost:8334"
+                                      - variable: GDRIVE_CLIENT_ID
+                                        label: Google Drive Client ID
+                                        schema:
+                                          type: string
+                                          default: ""
+                                      - variable: GDRIVE_CLIENT_SECRET
+                                        label: Google Drive Client Secret
+                                        schema:
+                                          type: string
+                                          private: true
+                                          default: ""
+                                      - variable: DROPBOX_CLIENT_ID
+                                        label: DropBox Client ID
+                                        schema:
+                                          type: string
+                                          default: ""
+                                      - variable: ONLYOFFICE_URL
+                                        label: Only Office Url
+                                        schema:
+                                          type: string
+                                          default: ""
+
 # Include{containerBasic}
 # Include{containerAdvanced}
-
 # Include{containerConfig}
+# Include{podOptions}
 # Include{serviceRoot}
-        - variable: main
-          label: "Main Service"
-          description: "The Primary service on which the healthcheck runs, often the webUI"
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
+# Include{serviceMain}
 # Include{serviceSelectorLoadBalancer}
 # Include{serviceSelectorExtras}
                     - variable: main
-                      label: "Main Service Port Configuration"
+                      label: Main Service Port Configuration
                       schema:
                         additional_attrs: true
                         type: dict
                         attrs:
                           - variable: port
-                            label: "Port"
-                            description: "This port exposes the container port on the service"
+                            label: Port
+                            description: This port exposes the container port on the service
                             schema:
                               type: int
                               default: 8334
@@ -41,9 +71,9 @@ questions:
 # Include{serviceExpert}
 # Include{serviceList}
 # Include{persistenceRoot}
-        - variable: appdata
-          label: "appdata Storage"
-          description: "Container Path appdatastate"
+        - variable: data
+          label: App Data Storage
+          description: Stores the Application Data.
           schema:
             additional_attrs: true
             type: dict
@@ -52,7 +82,7 @@ questions:
 # Include{persistenceList}
 # Include{ingressRoot}
         - variable: main
-          label: "Main Ingress"
+          label: Main Ingress
           schema:
             additional_attrs: true
             type: dict
@@ -65,14 +95,14 @@ questions:
 # Include{securityContextRoot}
 
               - variable: runAsUser
-                label: "runAsUser"
-                description: "The UserID of the user running the application"
+                label: runAsUser
+                description: The UserID of the user running the application
                 schema:
                   type: int
                   default: 0
               - variable: runAsGroup
-                label: "runAsGroup"
-                description: "The groupID of the user running the application"
+                label: runAsGroup
+                description: The groupID this App of the user running the application
                 schema:
                   type: int
                   default: 0
@@ -80,8 +110,8 @@ questions:
 # Include{securityContextAdvanced}
 # Include{securityContextPod}
               - variable: fsGroup
-                label: "fsGroup"
-                description: "The group that should own ALL storage."
+                label: fsGroup
+                description: The group that should own ALL storage.
                 schema:
                   type: int
                   default: 568

charts/incubator/filestash/templates/common.yaml

@@ -1,2 +1 @@
-{{/* Render the templates */}}
-{{ include "tc.common.loader.all" . }}
+{{ include "tc.v1.common.loader.all" . }}

charts/incubator/filestash/values.yaml

@@ -1,25 +1,40 @@
-env: {}
 image:
   pullPolicy: IfNotPresent
   repository: tccr.io/truecharts/filestash
-  tag: latest@sha256:a541026ec3eaaa67cc568b4fffd006460965eb6a408a512d841d1c06213ea9eb
-persistence:
-  appdata:
-    enabled: true
-    mountPath: /app/data/state/
-podSecurityContext:
-  runAsGroup: 0
-  runAsUser: 0
+  tag: latest@sha256:fdf1d947d1aeb0dcd2532dbbb4af1b8bae06e077e7fb9ce66b0a7d59ba18bd1e
+
 securityContext:
-  readOnlyRootFilesystem: false
-  runAsNonRoot: false
+  container:
+    runAsNonRoot: false
+    readOnlyRootFilesystem: false
+    runAsUser: 0
+    runAsGroup: 0
+
 service:
   main:
     ports:
       main:
-        port: 8334
-        protocol: TCP
+        protocol: http
         targetPort: 8334
+        port: 8334
+
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          env:
+            APPLICATION_URL: "http://localhost:8334"
+            GDRIVE_CLIENT_ID: ""
+            GDRIVE_CLIENT_SECRET: ""
+            DROPBOX_CLIENT_ID: ""
+            ONLYOFFICE_URL: ""
+
+persistence:
+  data:
+    enabled: true
+    mountPath: /app/data/state
 
 portal:
-  enabled: true
+  open:
+    enabled: true

charts/incubator/filezilla/values.yaml

@@ -16,7 +16,6 @@ workload:
         main:
           securityContext:
 
-
 service:
   main:
     ports:

charts/incubator/firezone/questions.yaml

@@ -1,339 +0,0 @@
-# Include{groups}
-portals:
-  open:
-# Include{portalLink}
-questions:
-# Include{global}
-# Include{workload}
-# Include{workloadDeployment}
-
-# Include{replicas1}
-# Include{podSpec}
-# Include{containerMain}
-
-                                - variable: env
-                                  label: Image Environment
-                                  schema:
-                                    additional_attrs: true
-                                    type: dict
-                                    attrs:
-                                      - variable: EXTERNAL_URL
-                                        label: External Url
-                                        description: Must be a valid and public FQDN for ACME SSL issuance to function. Include https://
-                                        schema:
-                                          type: string
-                                          required: true
-                                          default: ""
-                                      - variable: DEFAULT_ADMIN_EMAIL
-                                        label: Default Admin Email
-                                        description: Primary administrator email.
-                                        schema:
-                                          type: string
-                                          required: true
-                                          default: ""
-                                      - variable: DEFAULT_ADMIN_PASSWORD
-                                        label: Default Admin Password
-                                        description: Primary administrator password.
-                                        schema:
-                                          type: string
-                                          required: true
-                                          private: true
-                                          default: ""
-                                      - variable: RESET_ADMIN_ON_BOOT
-                                        label: Reset Admin On Boot
-                                        description: to create or reset the admin password every time FireZone starts.
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                      - variable: TELEMETRY_ENABLED
-                                        label: Telemetry Enabled
-                                        description: Enable or disable the FireZone telemetry collection.
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                      - variable: devices
-                                        label: Devices Settings
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                          show_subquestions_if: true
-                                          subquestions:
-                                            - variable: ALLOW_UNPRIVILEGED_DEVICE_MANAGEMENT
-                                              label: Allow Unprivileged Devices
-                                              description: Enable or disable management of devices on unprivileged accounts.
-                                              schema:
-                                                type: boolean
-                                                default: true
-                                            - variable: ALLOW_UNPRIVILEGED_DEVICE_CONFIGURATION
-                                              label: Allow Unprivileged Device Configuration
-                                              description: Enable or disable configuration of device network settings for unprivileged users.
-                                              schema:
-                                                type: boolean
-                                                default: true
-                                            - variable: VPN_SESSION_DURATION
-                                              label: VPN Session Duration
-                                              description: Optionally require users to periodically authenticate to the FireZone, Interval for WireGuard persistent keepalive.
-                                              schema:
-                                                type: int
-                                                default: 0
-                                            - variable: DEFAULT_CLIENT_PERSISTENT_KEEPALIVE
-                                              label: Default Client Persistent KeepAlive
-                                              description: send a keepalive packet every 25 seconds. Otherwise, keep it disabled with a 0 default value.
-                                              schema:
-                                                type: int
-                                                default: 25
-                                            - variable: DEFAULT_CLIENT_MTU
-                                              label: Default Client MTU
-                                              description: WireGuard interface MTU for devices.
-                                              schema:
-                                                type: int
-                                                default: 1280
-                                            - variable: DEFAULT_CLIENT_ENDPOINT
-                                              label: Default Client EndPoint
-                                              description: IPv4, IPv6 address, or FQDN that devices will be configured to connect to. Defaults to this server's FQDN.
-                                              schema:
-                                                type: string
-                                                default: ""
-                                            - variable: DEFAULT_CLIENT_DNS
-                                              label: Default Client DNS
-                                              description: Comma-separated list of DNS servers to use for devices.
-                                              schema:
-                                                type: string
-                                                default: "1.1.1.1,1.0.0.1"
-                                            - variable: DEFAULT_CLIENT_ALLOWED_IPS
-                                              label: Default Client Allowed IPs
-                                              description: AllowedIPs determines which destination IPs get routed through FireZone.
-                                              schema:
-                                                type: string
-                                                default: "0.0.0.0/0,::/0"
-                                            - variable: MAX_DEVICES_PER_USER
-                                              label: Max Devices Per User
-                                              description: Changes how many devices a user can have at a time.
-                                              schema:
-                                                type: int
-                                                default: 10
-                                      - variable: authorization
-                                        label: Authorization Settings
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                          show_subquestions_if: true
-                                          subquestions:
-                                            - variable: LOCAL_AUTH_ENABLED
-                                              label: Local Auth Enabled
-                                              description: Enable or disable the local authentication method for all users.
-                                              schema:
-                                                type: boolean
-                                                default: true
-                                            - variable: DISABLE_VPN_ON_OIDC_ERROR
-                                              label: Disable VPN On OIDC Error
-                                              description: Enable or disable auto disabling VPN connection on OIDC refresh error.
-                                              schema:
-                                                type: boolean
-                                                default: false
-                                      - variable: wireguard
-                                        label: Wireguard Settings
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                          show_subquestions_if: true
-                                          subquestions:
-                                            - variable: WIREGUARD_IPV4_ENABLED
-                                              label: WireGuard IPV4 Enabled
-                                              description: Enable or disable IPv4 support for WireGuard.
-                                              schema:
-                                                type: boolean
-                                                default: true
-                                            - variable: WIREGUARD_IPV6_ENABLED
-                                              label: WireGuard IPV6 Enabled
-                                              description: Enable or disable IPv6 support for WireGuard.
-                                              schema:
-                                                type: boolean
-                                                default: false
-                                      - variable: outbound
-                                        label: OutBound Email Settings
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                          show_subquestions_if: true
-                                          subquestions:
-                                            - variable: OUTBOUND_EMAIL_FROM
-                                              label: Outbound Email From
-                                              description: From address to use for sending outbound emails.
-                                              schema:
-                                                type: string
-                                                default: ""
-                                            - variable: OUTBOUND_EMAIL_ADAPTER
-                                              label: Outbound Email Adapter
-                                              description: Method to use for sending outbound email.
-                                              schema:
-                                                type: string
-                                                default: "Elixir.FzHttpWeb.Mailer.NoopAdapter"
-                                                enum:
-                                                  - value: "Elixir.FzHttpWeb.Mailer.AmazonSES"
-                                                    description: "AmazonSES"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.CustomerIO"
-                                                    description: CustomerIO"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Dyn"
-                                                    description: Dyn
-                                                  - value: "Elixir.FzHttpWeb.Mailer.ExAwsAmazonSES"
-                                                    description: ExAwsAmazonSES"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Gmail"
-                                                    description: Gmail"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.MailPace"
-                                                    description: MailPace"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Mailgun"
-                                                    description: Mailgun"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Mailjet"
-                                                    description: MailJet"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Mandrill"
-                                                    description: Mandrill"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Postmark"
-                                                    description: Postmark"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.ProtonBridge"
-                                                    description: ProtonBridge"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.SMTP"
-                                                    description: SMTP"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.SMTP2GO"
-                                                    description: SMTP2GO"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Sendgrid"
-                                                    description: SendGrid"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Sendinblue"
-                                                    description: "SendInBlue"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Sendmail"
-                                                    description: "Sendmail"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.SocketLabs"
-                                                    description: "SocketLabs"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.SparkPost"
-                                                    description: "SparkPost"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.NoopAdapter"
-                                                    description: "NoopAdapter"
-                                            - variable: OUTBOUND_EMAIL_ADAPTER_OPTS
-                                              label: Outbound Email Adapter OPTS
-                                              description: Adapter configuration, see https://github.com/swoosh/swoosh#adapters.
-                                              schema:
-                                                type: string
-                                                default: ""
-                                      - variable: connectivity
-                                        label: Connectivity Settings
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                          show_subquestions_if: true
-                                          subquestions:
-                                            - variable: CONNECTIVITY_CHECKS_ENABLED
-                                              label: Connectivity Checks Enabled
-                                              description:     Enable / disable periodic checking for egress connectivity. Determines the instance's public IP to populate Endpoint fields.
-                                              schema:
-                                                type: boolean
-                                                default: true
-                                            - variable: CONNECTIVITY_CHECKS_INTERVAL
-                                              label: Connectivity Checks Interval
-                                              description: Periodicity in seconds to check for egress connectivity.
-                                              schema:
-                                                type: int
-                                                default: 43200
-
-# Include{containerBasic}
-# Include{containerAdvanced}
-
-# Include{containerConfig}
-# Include{podOptions}
-# Include{serviceRoot}
-        - variable: main
-          label: Main Service
-          description: The Primary service on which the healthcheck runs, often the webUI
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
-# Include{serviceSelectorLoadBalancer}
-# Include{serviceSelectorExtras}
-                    - variable: main
-                      label: Main Service Port Configuration
-                      schema:
-                        additional_attrs: true
-                        type: dict
-                        attrs:
-                          - variable: port
-                            label: Port
-                            description: This port exposes the container port on the service
-                            schema:
-                              type: int
-                              default: 13000
-                              required: true
-        - variable: wireguard
-          label: Wireguard Service
-          description: The Wireguard service
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
-# Include{serviceSelectorLoadBalancer}
-# Include{serviceSelectorExtras}
-                    - variable: wireguard
-                      label: Wireguard Service Port Configuration
-                      schema:
-                        additional_attrs: true
-                        type: dict
-                        attrs:
-                          - variable: port
-                            label: Port
-                            description: This port exposes the container port on the service
-                            schema:
-                              type: int
-                              default: 51820
-                              required: true
-# Include{serviceExpertRoot}
-# Include{serviceExpert}
-# Include{serviceList}
-# Include{persistenceRoot}
-        - variable: config
-          label: App Config Storage
-          description: Stores the Application Config.
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
-# Include{persistenceBasic}
-# Include{persistenceList}
-# Include{ingressRoot}
-        - variable: main
-          label: Main Ingress
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
-# Include{ingressDefault}
-# Include{ingressTLS}
-# Include{ingressTraefik}
-# Include{ingressList}
-# Include{securityContextRoot}
-              - variable: runAsUser
-                label: runAsUser
-                description: The UserID of the user running the application
-                schema:
-                  type: int
-                  default: 0
-              - variable: runAsGroup
-                label: runAsGroup
-                description: The groupID of the user running the application
-                schema:
-                  type: int
-                  default: 0
-# Include{securityContextContainer}
-# Include{securityContextAdvanced}
-# Include{securityContextPod}
-              - variable: fsGroup
-                label: fsGroup
-                description: The group that should own ALL storage.
-                schema:
-                  type: int
-                  default: 568
-# Include{resources}
-# Include{advanced}
-# Include{addons}
-# Include{codeserver}
-# Include{netshoot}
-# Include{vpn}
-# Include{documentation}

charts/incubator/firezone/values.yaml

@@ -1,142 +0,0 @@
-image:
-  repository: tccr.io/truecharts/firezone
-  pullPolicy: IfNotPresent
-  tag: v0.7.30@sha256:e22dc7a9be93a804bbe0e3d301c883625463a3649d856c8b41f80a2257214667
-
-securityContext:
-  container:
-    readOnlyRootFilesystem: false
-    runAsNonRoot: false
-    PUID: 0
-    runAsUser: 0
-    runAsGroup: 0
-    capabilities:
-      add:
-        - NET_ADMIN
-        - SYS_MODULE
-
-workload:
-  main:
-    podSpec:
-      containers:
-        main:
-          probes:
-            liveness:
-              enabled: false
-            readiness:
-              enabled: false
-            startup:
-              enabled: false
-          env:
-            # web
-            PHOENIX_HTTP_PORT: "{{ .Values.service.main.ports.main.port }}"
-            EXTERNAL_URL: "https://app.mydomain.com"
-            # PHOENIX_SECURE_COOKIES: true
-            # PHOENIX_HTTP_PROTOCOL_OPTIONS: "{}"
-            # PHOENIX_EXTERNAL_TRUSTED_PROXIES: "[]"
-            # PHOENIX_PRIVATE_CLIENTS: "[]"
-            # DB
-            DATABASE_HOST:
-              secretKeyRef:
-                name: cnpg-main-urls
-                key: host
-            DATABASE_PORT: 5432
-            DATABASE_NAME: "{{ .Values.cnpg.main.database }}"
-            DATABASE_USER: "{{ .Values.cnpg.main.user }}"
-            DATABASE_PASSWORD:
-              secretKeyRef:
-                name: cnpg-main-user
-                key: password
-            # DATABASE_POOL_SIZE
-            DATABASE_SSL_ENABLED: false
-            # DATABASE_SSL_OPTS: "{}"
-            # Admin
-            RESET_ADMIN_ON_BOOT: false
-            DEFAULT_ADMIN_EMAIL: "admin@email.com"
-            DEFAULT_ADMIN_PASSWORD: "1234567890"
-            # Secrets and Encryption
-            GUARDIAN_SECRET_KEY:
-              secretKeyRef:
-                name: secrets
-                key: GUARDIAN_SECRET_KEY
-            DATABASE_ENCRYPTION_KEY:
-              secretKeyRef:
-                name: secrets
-                key: DATABASE_ENCRYPTION_KEY
-            SECRET_KEY_BASE:
-              secretKeyRef:
-                name: secrets
-                key: SECRET_KEY_BASE
-            LIVE_VIEW_SIGNING_SALT:
-              secretKeyRef:
-                name: secrets
-                key: LIVE_VIEW_SIGNING_SALT
-            COOKIE_SIGNING_SALT:
-              secretKeyRef:
-                name: secrets
-                key: COOKIE_SIGNING_SALT
-            COOKIE_ENCRYPTION_SALT:
-              secretKeyRef:
-                name: secrets
-                key: COOKIE_ENCRYPTION_SALT
-            # Devices
-            ALLOW_UNPRIVILEGED_DEVICE_MANAGEMENT: true
-            ALLOW_UNPRIVILEGED_DEVICE_CONFIGURATION: true
-            VPN_SESSION_DURATION: 0
-            DEFAULT_CLIENT_PERSISTENT_KEEPALIVE: 25
-            DEFAULT_CLIENT_MTU: 1280
-            # DEFAULT_CLIENT_ENDPOINT: ""
-            DEFAULT_CLIENT_DNS: "1.1.1.1,1.0.0.1"
-            DEFAULT_CLIENT_ALLOWED_IPS: "0.0.0.0/0, ::/0"
-            # Limits
-            MAX_DEVICES_PER_USER: 10
-            # Authorization
-            LOCAL_AUTH_ENABLED: true
-            DISABLE_VPN_ON_OIDC_ERROR: false
-            SAML_ENTITY_ID: "urn:firezone.dev:firezone-app"
-            # SAML_KEYFILE_PATH: "/var/firezone/saml.key"
-            # SAML_CERTFILE_PATH: "/var/firezone/saml.crt"
-            # OPENID_CONNECT_PROVIDERS: "[]"
-            # SAML_IDENTITY_PROVIDERS: "[]"
-            # WireGuard
-            WIREGUARD_PORT: "{{ .Values.service.wireguard.ports.wireguard.port }}"
-            WIREGUARD_IPV4_ENABLED: true
-            WIREGUARD_IPV6_ENABLED: false
-            # Outbound Emails
-            OUTBOUND_EMAIL_FROM: ""
-            OUTBOUND_EMAIL_ADAPTER: "Elixir.FzHttpWeb.Mailer.NoopAdapter"
-            # OUTBOUND_EMAIL_ADAPTER_OPTS: "{}"
-            # Connectivity Checks
-            CONNECTIVITY_CHECKS_ENABLED: true
-            CONNECTIVITY_CHECKS_INTERVAL: 43200
-            # Telemetry
-            TELEMETRY_ENABLED: false
-
-service:
-  main:
-    ports:
-      main:
-        protocol: http
-        port: 13000
-  wireguard:
-    enabled: true
-    ports:
-      wireguard:
-        enabled: true
-        protocol: udp
-        port: 51820
-
-persistence:
-  config:
-    enabled: true
-    mountPath: "/var/firezone"
-
-cnpg:
-  main:
-    enabled: true
-    user: firezone
-    database: firezone
-
-portal:
-  open:
-    enabled: true

charts/incubator/funkwhale/Chart.yaml

@@ -8,7 +8,7 @@ appVersion: "1.2.10"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 13.2.1
+    version: 13.2.2
 deprecated: false
 description: Funkwhale is designed to make it easy to listen to music you like, and to discover new artists.
 home: https://truecharts.org/charts/incubator/funkwhale
@@ -27,4 +27,4 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/funkwhale
   - https://funkwhale.audio/
 type: application
-version: 3.0.1
+version: 3.0.2

charts/incubator/homebridge/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "2023"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.9
 deprecated: false
 description: A lightweight NodeJS server that emulates the iOS HomeKit API
 home: https://truecharts.org/charts/incubator/homebridge
@@ -22,7 +22,7 @@ sources:
   - https://homebridge.io/
   - https://github.com/oznu/docker-homebridge
 type: application
-version: 4.0.0
+version: 4.0.1
 annotations:
   truecharts.org/catagories: |
     - media

charts/incubator/icloudpd/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "latest"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
+    version: 14.0.9
 deprecated: false
 description: iCloudPD, syncs photos from iDevices to a single directory on TrueNAS.
 home: https://truecharts.org/charts/incubator/icloudpd
@@ -23,7 +23,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/icloudpd
   - https://github.com/Womabre/-TrueNAS-docker-templates
 type: application
-version: 2.0.16
+version: 3.0.1
 annotations:
   truecharts.org/SCALE-support: "true"
   truecharts.org/catagories: |

charts/incubator/icloudpd/questions.yaml

@@ -212,6 +212,7 @@ questions:
               - value: Bark
                 description: Bark
 # Include{containerConfig}
+# Include{podOptions}
 # Include{serviceExpertRoot}
 # Include{serviceExpert}
 # Include{serviceList}

charts/incubator/icloudpd/templates/common.yaml

@@ -1,2 +1 @@
-{{/* Render the templates */}}
-{{ include "tc.common.loader.all" . }}
+{{ include "tc.v1.common.loader.all" . }}

charts/incubator/icloudpd/values.yaml

@@ -3,13 +3,12 @@ image:
   repository: tccr.io/truecharts/icloudpd
   tag: latest@sha256:ab4b90c22a3bf93d6045cd26733447b143a66d5c9100a91c9bbea27f0443a838
 
-podSecurityContext:
-  runAsGroup: 0
-  runAsUser: 0
-
 securityContext:
-  readOnlyRootFilesystem: false
-  runAsNonRoot: false
+  container:
+    readOnlyRootFilesystem: false
+    runAsNonRoot: false
+    runAsGroup: 0
+    runAsUser: 0
 
 icloudpd:
   apple_id: your@appleid.com
@@ -35,7 +34,7 @@ icloudpd:
   delete_accompanying: false
   delete_empty_directories: false
   command_line_options: ""
-  notification_title: iCloud PD
+  notification_title: "iCloud PD"
   # https://github.com/boredazfcuk/docker-icloudpd/blob/master/NOTIFICATIONS.md
   notification_type: ""
   # prowl_api_key: ""
@@ -70,47 +69,51 @@ icloudpd:
   # bark_device_key: ""
   # bark_server: ""
 
-env:
-  user: apps
-  group: apps
-  user_id: "{{ .Values.security.PUID }}"
-  group_id: "{{ .Values.podSecurityContext.fsGroup }}"
-  download_path: /home/{{ .Values.env.user }}/iCloud
-  jpeg_path: /home/{{ .Values.env.user }}/iCloud
-  # User Defined
-  apple_id: "{{ .Values.icloudpd.apple_id }}"
-  synchronisation_interval: "{{ .Values.icloudpd.synchronisation_interval }}"
-  synchronisation_delay: "{{ .Values.icloudpd.synchronisation_delay }}"
-  notification_days: "{{ .Values.icloudpd.notification_days }}"
-  authentication_type: "{{ .Values.icloudpd.authentication_type }}"
-  skip_check: '{{ ternary "True" "False" .Values.icloudpd.skip_check }}'
-  download_notifications: '{{ ternary "True" "False" .Values.icloudpd.download_notifications }}'
-  delete_notifications: '{{ ternary "True" "False" .Values.icloudpd.delete_notifications }}'
-  delete_accompanying: '{{ ternary "True" "False" .Values.icloudpd.delete_accompanying }}'
-  delete_empty_directories: '{{ ternary "True" "False" .Values.icloudpd.delete_empty_directories }}'
-  set_exif_datetime: '{{ ternary "True" "False" .Values.icloudpd.set_exif_datetime }}'
-  auto_delete: '{{ ternary "True" "False" .Values.icloudpd.auto_delete }}'
-  photo_size: "{{ .Values.icloudpd.photo_size }}"
-  skip_live_photos: '{{ ternary "True" "False" .Values.icloudpd.skip_live_photos }}'
-  live_photo_size: "{{ .Values.icloudpd.live_photo_size }}"
-  skip_videos: '{{ ternary "True" "False" .Values.icloudpd.skip_videos }}'
-  recent_only: '{{ ternary "" .Values.icloudpd.recent_only (eq 0 (int .Values.icloudpd.recent_only)) }}'
-  until_found: '{{ ternary "" .Values.icloudpd.until_found (eq 0 (int .Values.icloudpd.until_found)) }}'
-  photo_album: "{{ .Values.icloudpd.photo_album }}"
-  convert_heic_to_jpeg: '{{ ternary "True" "False" .Values.icloudpd.convert_heic_to_jpeg }}'
-  jpeg_quality: "{{ .Values.icloudpd.jpeg_quality }}"
-  icloud_china: '{{ ternary "True" "" .Values.icloudpd.icloud_china }}'
-  command_line_options: "{{ .Values.icloudpd.command_line_options }}"
-  notification_title: "{{ .Values.icloudpd.notification_title }}"
-  notification_type: "{{ .Values.icloudpd.notification_type }}"
-
-probes:
-  liveness:
-    enabled: false
-  readiness:
-    enabled: false
-  startup:
-    enabled: false
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          env:
+            user: apps
+            group: apps
+            user_id: "{{ .Values.securityContext.container.runAsUser }}"
+            group_id: "{{ .Values.securityContext.container.runAsGroup }}"
+            download_path: /home/{{ .Values.workload.main.podSpec.containers.main.env.user }}/iCloud
+            jpeg_path: /home/{{ .Values.workload.main.podSpec.containers.main.env.user }}/iCloud
+            # User Defined
+            apple_id: "{{ .Values.icloudpd.apple_id }}"
+            synchronisation_interval: "{{ .Values.icloudpd.synchronisation_interval }}"
+            synchronisation_delay: "{{ .Values.icloudpd.synchronisation_delay }}"
+            notification_days: "{{ .Values.icloudpd.notification_days }}"
+            authentication_type: "{{ .Values.icloudpd.authentication_type }}"
+            skip_check: '{{ ternary "True" "False" .Values.icloudpd.skip_check }}'
+            download_notifications: '{{ ternary "True" "False" .Values.icloudpd.download_notifications }}'
+            delete_notifications: '{{ ternary "True" "False" .Values.icloudpd.delete_notifications }}'
+            delete_accompanying: '{{ ternary "True" "False" .Values.icloudpd.delete_accompanying }}'
+            delete_empty_directories: '{{ ternary "True" "False" .Values.icloudpd.delete_empty_directories }}'
+            set_exif_datetime: '{{ ternary "True" "False" .Values.icloudpd.set_exif_datetime }}'
+            auto_delete: '{{ ternary "True" "False" .Values.icloudpd.auto_delete }}'
+            photo_size: "{{ .Values.icloudpd.photo_size }}"
+            skip_live_photos: '{{ ternary "True" "False" .Values.icloudpd.skip_live_photos }}'
+            live_photo_size: "{{ .Values.icloudpd.live_photo_size }}"
+            skip_videos: '{{ ternary "True" "False" .Values.icloudpd.skip_videos }}'
+            recent_only: '{{ ternary "" .Values.icloudpd.recent_only (eq 0 (int .Values.icloudpd.recent_only)) }}'
+            until_found: '{{ ternary "" .Values.icloudpd.until_found (eq 0 (int .Values.icloudpd.until_found)) }}'
+            photo_album: "{{ .Values.icloudpd.photo_album }}"
+            convert_heic_to_jpeg: '{{ ternary "True" "False" .Values.icloudpd.convert_heic_to_jpeg }}'
+            jpeg_quality: "{{ .Values.icloudpd.jpeg_quality }}"
+            icloud_china: '{{ ternary "True" "" .Values.icloudpd.icloud_china }}'
+            command_line_options: "{{ .Values.icloudpd.command_line_options }}"
+            notification_title: "{{ .Values.icloudpd.notification_title }}"
+            notification_type: "{{ .Values.icloudpd.notification_type }}"
+          probes:
+            liveness:
+              enabled: false
+            readiness:
+              enabled: false
+            startup:
+              enabled: false
 
 service:
   main:
@@ -128,4 +131,5 @@ persistence:
     mountPath: /home/apps/iCloud
 
 portal:
-  enabled: false
+  open:
+    enabled: false

charts/incubator/jenkins/templates/common.yaml

@@ -1,8 +0,0 @@
-{{/* Make sure all variables are set properly */}}
-{{- include "tc.common.loader.init" . }}
-
-{{/* Render secret */}}
-{{- include "jenkins.secret" . }}
-
-{{/* Render the templates */}}
-{{ include "tc.common.loader.apply" . }}

charts/incubator/jenkins/values.yaml

@@ -1,55 +0,0 @@
-image:
-  repository: tccr.io/truecharts/jenkins
-  pullPolicy: IfNotPresent
-  tag: 2.392.0@sha256:362ac8a36b4a1d603a0bce6e5c35097b33d6aae0544ba1cef8f300d2788dd09b
-
-podSecurityContext:
-  runAsGroup: 1000
-  runAsUser: 1000
-  fsGroup: 1000
-
-# securityContext:
-#   readOnlyRootFilesystem: false
-
-jenkins:
-  java_opts: []
-  jenkins_opts: []
-  jenkins_java_opts: []
-  plugins_force_upgrade: false
-  upgrade_if_no_marker: false
-
-envFrom:
-  - secretRef:
-      name: '{{ include "tc.common.names.fullname" . }}-secret'
-
-probes:
-  liveness:
-    type: HTTP
-    path: /login
-  readiness:
-    type: HTTP
-    path: /login
-  startup:
-    type: HTTP
-    path: /login
-
-service:
-  main:
-    ports:
-      main:
-        protocol: HTTP
-        port: 10280
-  agent:
-    enabled: true
-    ports:
-      agent:
-        enabled: true
-        port: 50000
-
-persistence:
-  data:
-    enabled: true
-    mountPath: /var/jenkins_home
-
-portal:
-  enabled: true

charts/incubator/kaizoku/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "1.6.1"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.3
+    version: 14.0.9
   - condition: redis.enabled
     name: redis
     repository: https://deps.truecharts.org
@@ -24,7 +24,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/kaizoku
   - https://github.com/oae/kaizoku
 type: application
-version: 0.1.0
+version: 0.1.1
 annotations:
   truecharts.org/catagories: |
     - media

charts/incubator/kimai/Chart.yaml

@@ -1,13 +1,13 @@
 apiVersion: v2
-appVersion: "1.20"
+appVersion: "2.0.35"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
+    version: 14.0.9
   - condition: mariadb.enabled
     name: mariadb
     repository: https://deps.truecharts.org/
-    version: 5.0.35
+    version: 9.0.26
 description: Kimai is a free, open source and online time-tracking software designed for small businesses and freelancers.
 home: https://truecharts.org/charts/incubator/kimai
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/kimai.png
@@ -25,7 +25,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/kimai
   - https://github.com/kevinpapst/kimai2
   - https://github.com/tobybatch/kimai2
-version: 7.0.0
+version: 8.0.2
 annotations:
   truecharts.org/catagories: |
     - productivity

charts/incubator/kimai/questions.yaml

@@ -6,48 +6,57 @@ questions:
 # Include{global}
 # Include{workload}
 # Include{workloadDeployment}
-
 # Include{replicas1}
 # Include{podSpec}
 # Include{containerMain}
-                                - variable: env
-                                  group: "App Configuration"
-                                  label: "Image Environment"
-                                  schema:
-                                    additional_attrs: true
-                                    type: dict
-                                    attrs:
-                                      - variable: ADMINMAIL
-                                        label: "Admin E-mail"
-                                        schema:
-                                          type: string
-                                          default: ""
-                                          required: true
-                                      - variable: ADMINPASS
-                                        label: "Admin Password"
-                                        schema:
-                                          type: string
-                                          default: ""
-                                          required: true
-                                          private: true
-                                      - variable: trust_hosts
-                                        label: "TRUSTED_HOSTS"
-                                        description: "Comma separated list of trusted hosts."
-                                        schema:
-                                          type: string
-                                          default: "YOUR.FQDN or YOUR.NAS.IP"
 # Include{containerBasic}
 # Include{containerAdvanced}
 # Include{containerConfig}
-# Include{podOptions}
-# Include{serviceRoot}
-        - variable: main
-          label: "Main Service"
-          description: "The Primary service on which the healthcheck runs, often the webUI"
+  - variable: kimai
+    group: App Configuration
+    label: Kimai
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: credentials
+          group: App Configuration
+          label: Admin Credentials
           schema:
             additional_attrs: true
             type: dict
             attrs:
+              - variable: adminMail
+                label: Admin e-mail address
+                description: Email address of the admin account.
+                schema:
+                  type: string
+                  default: ""
+                  required: true
+              - variable: adminPass
+                label: Admin password
+                description: Password for the admin account.
+                schema:
+                  type: string
+                  default: ""
+                  required: true
+                  private: true
+        - variable: trusted_hosts
+          label: Trusted Hosts
+          description: Comma separated list of trusted hosts. Sets the environment variable TRUSTED_HOSTS.
+          schema:
+            type: list
+            default: []
+            items:
+              - variable: hostEntry
+                label: Trusted Host
+                schema:
+                  type: string
+                  default: ""
+                  required: true
+# Include{podOptions}
+# Include{serviceRoot}
+# Include{serviceMain}
 # Include{serviceSelectorLoadBalancer}
 # Include{serviceSelectorExtras}
                     - variable: main
@@ -103,13 +112,13 @@ questions:
                 description: "The UserID of the user running the application"
                 schema:
                   type: int
-                  default: 33
+                  default: 0
               - variable: runAsGroup
                 label: "runAsGroup"
                 description: "The groupID of the user running the application"
                 schema:
                   type: int
-                  default: 33
+                  default: 0
 # Include{securityContextContainer}
 # Include{securityContextAdvanced}
 # Include{securityContextPod}
@@ -118,7 +127,7 @@ questions:
                 description: "The group that should own ALL storage."
                 schema:
                   type: int
-                  default: 568
+                  default: 33
 
 # Include{resources}
 # Include{advanced}

charts/incubator/kimai/templates/NOTES.txt

@@ -0,0 +1 @@
+{{- include "tc.v1.common.lib.chart.notes" $ -}}

charts/incubator/kimai/templates/_configmap.tpl

@@ -0,0 +1,23 @@
+{{/* Define the configmap */}}
+{{- define "kimai.configmap" -}}
+
+{{- $trusted_hosts := .Values.kimai.trusted_hosts -}}
+
+{{- if not (mustHas "localhost" $trusted_hosts) -}}
+  {{- $trusted_hosts = mustAppend $trusted_hosts "localhost" -}}
+{{- end }}
+kimai-config:
+  enabled: true
+  data:
+    APP_ENV: prod
+    DB_TYPE: mysql
+    DB_PORT: "3306"
+    DB_USER: {{ .Values.mariadb.mariadbDatabase }}
+    DB_BASE: {{ .Values.mariadb.mariadbUsername }}
+    {{/* Admin credentials */}}
+    ADMINMAIL: {{ .Values.kimai.credentials.adminMail }}
+    ADMINPASS: {{ .Values.kimai.credentials.adminPass }}
+    {{/* Trusted Hosts */}}
+    TRUSTED_HOSTS: {{ join "," $trusted_hosts }}
+    memory_limit: 256M
+{{- end -}}

charts/incubator/kimai/templates/_secrets.tpl

@@ -1,20 +1,14 @@
 {{/* Define the secrets */}}
-{{- define "kimai.secrets" -}}
----
+{{- define "kimai.secret" -}}
+{{- $secretName := (printf "%s-kimai-secret" (include "tc.v1.common.lib.chart.names.fullname" $)) -}}
 
-apiVersion: v1
-kind: Secret
-type: Opaque
-metadata:
-  name: kimai-secrets
-{{- $kimaiprevious := lookup "v1" "Secret" .Release.Namespace "kimai-secrets" }}
-{{- $app_secret := "" }}
-data:
-  {{- if $kimaiprevious}}
-  APP_SECRET: {{ index $kimaiprevious.data "APP_SECRET" }}
-  {{- else }}
-  {{- $app_secret := randAlphaNum 32 }}
-  APP_SECRET: {{ $app_secret | b64enc }}
-  {{- end }}
+{{- $app_secret := randAlphaNum 32 -}}
+{{- with (lookup "v1" "Secret" .Release.Namespace $secretName) -}}
+  {{- $app_secret = index .data "APP_SECRET" | b64dec -}}
+{{- end }}
 
+kimai-secret:
+  enabled: true
+  data:
+    APP_SECRET: {{ $app_secret }}
 {{- end -}}

charts/incubator/kimai/templates/common.yaml

@@ -1,8 +1,18 @@
 {{/* Make sure all variables are set properly */}}
-{{- include "tc.common.loader.init" . }}
+{{- include "tc.v1.common.loader.init" . }}
+
+{{- $secret := include "kimai.secret" . | fromYaml -}}
+{{- if $secret -}}
+  {{ $secret := (mustMergeOverwrite .Values.secret $secret) }}
+  {{- $_ := set .Values "secret" $secret -}}
+{{- end -}}
+
+{{- $config := include "kimai.configmap" . | fromYaml -}}
+{{- if $config -}}
+  {{ $config := (mustMergeOverwrite .Values.configmap $config) }}
+  {{- $_ := set .Values "configmap" $config -}}
+{{- end -}}
 
-{{/* Render secrets for kimai */}}
-{{- include "kimai.secrets" . }}
 
 {{/* Render the templates */}}
-{{ include "tc.common.loader.apply" . }}
+{{ include "tc.v1.common.loader.apply" . }}