chore(deps): update container image tccr.io/truecharts/adminer to latest (#12779)

**Description**

Update of the original @kqmaverick guide from @depasseg (see ->
https://github.com/truecharts/website/pull/286), so I'll have them both
review here since filing on the Website one gets overwritten by here

⚒️ Fixes  # <!--(issue)-->

**⚙️ Type of change**

- [ ] ⚙️ Feature/App addition
- [ ] 🪛 Bugfix
- [ ] ⚠️ Breaking change (fix or feature that would cause existing
functionality to not work as expected)
- [ ] 🔃 Refactor of current code

**🧪 How Has This Been Tested?**
<!--
Please describe the tests that you ran to verify your changes. Provide
instructions so we can reproduce. Please also list any relevant details
for your test configuration
-->

**📃 Notes:**
<!-- Please enter any other relevant information here -->

**✔️ Checklist:**

- [ ] ⚖️ My code follows the style guidelines of this project
- [ ] 👀 I have performed a self-review of my own code
- [ ] #️⃣ I have commented my code, particularly in hard-to-understand
areas
- [ ] 📄 I have made corresponding changes to the documentation
- [ ] ⚠️ My changes generate no new warnings
- [ ] 🧪 I have added tests to this description that prove my fix is
effective or that my feature works
- [ ] ⬆️ I increased versions for any altered app according to semantic
versioning

**➕ App addition**

If this PR is an app addition please make sure you have done the
following.

- [ ] 🪞 I have opened a PR on
[truecharts/containers](https://github.com/truecharts/containers) adding
the container to TrueCharts mirror repo.
- [ ] 🖼️ I have added an icon in the Chart's root directory called
`icon.png`

---

_Please don't blindly check all the boxes. Read them and only check
those that apply.
Those checkboxes are there for the reviewer to see what is this all
about and
the status of this PR with a quick glance._

---------

Signed-off-by: StevenMcElligott <89483932+StevenMcElligott@users.noreply.github.com>
Co-authored-by: kqmaverick <121722567+kqmaverick@users.noreply.github.com>

.all-contributorsrc

@@ -1955,6 +1955,33 @@
       "contributions": [
         "code"
       ]
+    },
+    {
+      "login": "blastik",
+      "name": "David CM",
+      "avatar_url": "https://avatars.githubusercontent.com/u/3662083?v=4",
+      "profile": "https://github.com/blastik",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "aamirazad",
+      "name": "Aamir Azad",
+      "avatar_url": "https://avatars.githubusercontent.com/u/82281117?v=4",
+      "profile": "http://tigertutoringtool.aamira.me",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "jordan-woyak",
+      "name": "Jordan Woyak",
+      "avatar_url": "https://avatars.githubusercontent.com/u/1768214?v=4",
+      "profile": "https://github.com/jordan-woyak",
+      "contributions": [
+        "code"
+      ]
     }
   ],
   "contributorsPerLine": 7,

.github/README.md

@@ -124,7 +124,7 @@ A lot of our work is based on the great effort of others. We would love to exten
 ## Contributors ✨
 
 <!-- ALL-CONTRIBUTORS-BADGE:START - Do not remove or modify this section -->
-[![All Contributors](https://img.shields.io/badge/all_contributors-209-orange.svg?style=for-the-badge)](#contributors)
+[![All Contributors](https://img.shields.io/badge/all_contributors-212-orange.svg?style=for-the-badge)](#contributors)
 <!-- ALL-CONTRIBUTORS-BADGE:END -->
 
 Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/docs/en/emoji-key)):
@@ -404,6 +404,11 @@ Thanks goes to these wonderful people ([emoji key](https://allcontributors.org/d
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/polarstack"><img src="https://avatars.githubusercontent.com/u/42521003?v=4?s=100" width="100px;" alt="polarstack"/><br /><sub><b>polarstack</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=polarstack" title="Code">💻</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/K1Hyve"><img src="https://avatars.githubusercontent.com/u/53298451?v=4?s=100" width="100px;" alt="Keyvan"/><br /><sub><b>Keyvan</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=K1Hyve" title="Code">💻</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/MickaelFontes"><img src="https://avatars.githubusercontent.com/u/81414455?v=4?s=100" width="100px;" alt="MickaelFontes"/><br /><sub><b>MickaelFontes</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=MickaelFontes" title="Code">💻</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/blastik"><img src="https://avatars.githubusercontent.com/u/3662083?v=4?s=100" width="100px;" alt="David CM"/><br /><sub><b>David CM</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=blastik" title="Code">💻</a></td>
+    </tr>
+    <tr>
+      <td align="center" valign="top" width="14.28%"><a href="http://tigertutoringtool.aamira.me"><img src="https://avatars.githubusercontent.com/u/82281117?v=4?s=100" width="100px;" alt="Aamir Azad"/><br /><sub><b>Aamir Azad</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=aamirazad" title="Documentation">📖</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/jordan-woyak"><img src="https://avatars.githubusercontent.com/u/1768214?v=4?s=100" width="100px;" alt="Jordan Woyak"/><br /><sub><b>Jordan Woyak</b></sub></a><br /><a href="https://github.com/truecharts/charts/commits?author=jordan-woyak" title="Code">💻</a></td>
     </tr>
   </tbody>
 </table>

.github/ct-install.yaml

@@ -28,6 +28,7 @@ excluded-charts:
   - charts/stable/heimdall
   - charts/stable/mc-router
   - charts/stable/multus
+  - charts/stable/local-ai
   - charts/stable/orbital-sync
   - charts/stable/plex-meta-manager
   - charts/stable/pod-gateway

.github/workflows/catalog-test.yaml

@@ -17,7 +17,7 @@ jobs:
     container:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         name: Checkout
         with:
           fetch-depth: 100

.github/workflows/charts-lint.yaml

@@ -22,13 +22,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout [master]
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 1
           ref: master
 
       - name: Checkout [commit]
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}

.github/workflows/charts-release.yaml

@@ -17,13 +17,13 @@ jobs:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
       - name: Checkout
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
 
       - name: Checkout Helm-Staging
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 1
           repository: truecharts/helm-staging
@@ -93,7 +93,7 @@ jobs:
           GPG_PASSPHRASE: "${{ secrets.GPG_PASSPHRASE }}"
 
       - name: Checkout
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 0
@@ -125,7 +125,7 @@ jobs:
           find . -name '*.sh' | xargs chmod +x
 
       - name: Checkout
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         if: |
           steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
         with:
@@ -240,7 +240,7 @@ jobs:
           git push
 
       - name: Checkout Catalog
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         if: |
           steps.collect-changes.outputs.changesDetectedAfterTag == 'true'
         with:

.github/workflows/charts-test.yaml

@@ -50,7 +50,7 @@ jobs:
       detected6: ${{ steps.list-changed.outputs.detected6 }}
     steps:
       - name: Checkout
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -115,7 +115,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -185,7 +185,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -247,7 +247,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -309,7 +309,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -371,7 +371,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}
@@ -432,7 +432,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 1
           ref: ${{ inputs.checkoutCommit }}

.github/workflows/daily.yaml

@@ -20,7 +20,7 @@ jobs:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
       - name: Checkout
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
@@ -55,7 +55,7 @@ jobs:
           done
 
       - name: Checkout
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           repository: truecharts/website
           path: website
@@ -248,7 +248,7 @@ jobs:
           helm repo update
 
       - name: Checkout
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1
@@ -257,7 +257,7 @@ jobs:
         run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
 
       - name: Checkout website
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 1
           repository: truecharts/website
@@ -377,7 +377,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
           fetch-depth: 1

.github/workflows/pr-validate.yaml

@@ -17,7 +17,7 @@ jobs:
       addedOrModifiedCharts: ${{ steps.collect-changes.outputs.addedOrModifiedCharts }}
     steps:
       - name: Checkout
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
 
       - name: Collect changes
         id: collect-changes
@@ -57,7 +57,7 @@ jobs:
       head-commit-message: ${{ steps.get_head_commit_message.outputs.headCommitMsg }}
     steps:
       - name: Get repo
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - name: verbose head git commit message

.github/workflows/prune.yaml

@@ -9,7 +9,7 @@ jobs:
     name: "prune old releases"
     steps:
       - name: Checkout
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           fetch-depth: 0
       - uses: actions/delete-package-versions@0d39a63126868f5eefaa47169615edd3c0f61e20 # v4

.github/workflows/renovate-bump.yaml

@@ -14,12 +14,12 @@ jobs:
     container:
       image: ghcr.io/truecharts/devcontainer:3.1.10@sha256:c239addf725eb5cedf79517f8089fdafdc32b5270d1893ee87ae6e511b9bcae3
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         name: Checkout
         with:
           fetch-depth: 0
           token: ${{ secrets.BOT_TOKEN }}
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         name: Checkout
         with:
           fetch-depth: 0

.github/workflows/renovate.yml

@@ -8,11 +8,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
         with:
           token: ${{ secrets.BOT_TOKEN }}
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@5e224f3a02c7ce9cadc83f82d65f1b6dd73876c1 # v39.0.3
+        uses: renovatebot/github-action@3cef36a9aba515d8726b491905b3bc766832e221 # v39.0.5
         with:
           configurationFile: .github/renovate-config.js
           token: ${{ secrets.BOT_TOKEN }}

.github/workflows/schedule-sync-labels.yaml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
         with:
           token: ${{ secrets.BOT_TOKEN }}
 

charts/dependency/clickhouse/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "23.7.5.30"
+appVersion: "23.8.2.7"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.4
+    version: 14.0.6
 deprecated: false
 description: ClickHouse is a column-oriented database management system (DBMS) for online analytical processing of queries (OLAP).
 home: https://truecharts.org/charts/dependency/clickhouse
@@ -22,7 +22,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/clickhouse
   - https://clickhouse.com/
 type: application
-version: 7.0.5
+version: 7.0.7
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/clickhouse/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/clickhouse
   pullPolicy: IfNotPresent
-  tag: v23.7.5.30@sha256:cdc9db0a9e09bc93e2011257a64058e3fb8136816ede056b7c833d49d5cf5463
+  tag: v23.8.2.7@sha256:59d8931ff246dfe2740cfb53ae5db62242b05b1bd9f8dffac3dbbb634109fe0a
 
 workload:
   main:

charts/dependency/kube-state-metrics/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "2.9.2"
+appVersion: "2.10.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.4
+    version: 14.0.6
 deprecated: false
 description: kube-state-metrics is a simple service that listens to the Kubernetes API server and generates metrics about the state of the objects.
 home: https://truecharts.org/charts/dependency/kube-state-metrics
@@ -21,7 +21,7 @@ name: kube-state-metrics
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/kube-state-metrics
 type: application
-version: 3.0.11
+version: 3.0.17
 annotations:
   truecharts.org/catagories: |
     - metrics

charts/dependency/kube-state-metrics/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/kube-state-metrics
   pullPolicy: IfNotPresent
-  tag: v2.9.2@sha256:3afe680fae090d3ffda0c969d914d4ddbbfd2da0be668c8a6f344b73e8c207a2
+  tag: v2.10.0@sha256:4df0da14f79e4308606b551f91bf6611b4207229344c3165684fbaccd6e2c475
 
 service:
   main:

charts/dependency/mariadb/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "11.0.3"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.4
+    version: 14.0.6
 deprecated: false
 description: Fast, reliable, scalable, and easy to use open-source relational database system.
 home: https://truecharts.org/charts/dependency/mariadb
@@ -25,7 +25,7 @@ sources:
   - https://github.com/prometheus/mysqld_exporter
   - https://mariadb.org
 type: application
-version: 9.0.12
+version: 9.0.20
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/mariadb/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/mariadb
   pullPolicy: IfNotPresent
-  tag: v11.0.3@sha256:d36a078df5c8d376c6e7734a9ecf6d23cf53c75efab5e324a809cb63095ec96d
+  tag: v11.0.3@sha256:8fc31764c9cbc950025f4fd12df80a9d9afd23544988a63288988d211e89744b
 
 workload:
   main:

charts/dependency/memcached/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "1.6.21"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.4
+    version: 14.0.6
 deprecated: false
 description: Memcached is a memory-backed database caching solution
 home: https://truecharts.org/charts/dependency/memcached
@@ -23,7 +23,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-memcached
   - http://memcached.org/
 type: application
-version: 8.0.13
+version: 8.0.21
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/memcached/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/memcached
   pullPolicy: IfNotPresent
-  tag: v1.6.21@sha256:96a2f5e7670e5d943d3cb6132c545b2540e70ceb020d8361f4a652baba601d98
+  tag: v1.6.21@sha256:4c093f754425d49af43bdf72651300a37a76308ff342bd5836d38c2714f060b9
 
 service:
   main:

charts/dependency/mongodb/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "6.0.9"
+appVersion: "6.0.10"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.4
+    version: 14.0.6
 deprecated: false
 description: Fast, reliable, scalable, and easy to use open-source no-sql database system.
 home: https://truecharts.org/charts/dependency/mongodb
@@ -23,7 +23,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-mongodb
   - https://www.mongodb.com
 type: application
-version: 8.0.8
+version: 8.0.16
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/mongodb/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/mongodb
   pullPolicy: IfNotPresent
-  tag: v6.0.9@sha256:db39e4adcaba5ccbaf71aa86be05448c8ceeb39972e1aaf65c21d9d8e9150f85
+  tag: v6.0.10@sha256:ae08c7ae9b5a573d480d5108823bfe36cb6806b4a5755eb1e90bb00d7a4aa1bf
 
 workload:
   main:

charts/dependency/node-exporter/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "1.6.1"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.4
+    version: 14.0.6
 deprecated: false
 description: Prometheus exporter for hardware and OS metrics exposed by UNIX kernels, with pluggable metric collectors.
 home: https://truecharts.org/charts/dependency/node-exporter
@@ -21,7 +21,7 @@ name: node-exporter
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/node-exporter
 type: application
-version: 3.0.11
+version: 3.0.19
 annotations:
   truecharts.org/catagories: |
     - metrics

charts/dependency/node-exporter/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/node-exporter
   pullPolicy: IfNotPresent
-  tag: v1.6.1@sha256:821f4fe64d266694147d126b852d7b703ca11af1b3b6fa54b39e037edc48eacf
+  tag: v1.6.1@sha256:932954e9fabea922ac0a443b174a6a7de41451304b97cf0bcad7f70d6d44c807
 
 service:
   main:

charts/dependency/redis/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "7.2.0"
+appVersion: "7.2.1"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.4
+    version: 14.0.6
 deprecated: false
 description: Open source, advanced key-value store.
 home: https://truecharts.org/charts/dependency/redis
@@ -23,7 +23,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-redis
   - http://redis.io/
 type: application
-version: 8.0.14
+version: 8.0.23
 annotations:
   truecharts.org/catagories: |
     - database

charts/dependency/redis/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/redis
   pullPolicy: IfNotPresent
-  tag: v7.2.0@sha256:8f325f124522bcf1b958ffafcc373f44c873590ad7d875a0703d9ac08146a4f3
+  tag: v7.2.1@sha256:367fe40481435c422d6876053917e22069089d0c93ef0246298880526b748c04
 
 workload:
   main:

charts/dependency/solr/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "9.3.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.4
+    version: 14.0.6
 deprecated: false
 description: Apache Solr
 home: https://truecharts.org/charts/dependency/solr
@@ -22,7 +22,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/dependency/solr
   - https://github.com/apache/solr
 type: application
-version: 6.0.13
+version: 6.0.21
 annotations:
   truecharts.org/catagories: |
     - search

charts/dependency/solr/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/solr
   pullPolicy: IfNotPresent
-  tag: v9.3.0@sha256:ad9e7025cec8c1d42f462b7d9e4f042f67c24791e1b1a1ad1e0cc451e062defd
+  tag: v9.3.0@sha256:c7339d241f5c4f674a775ef8f2501b49d757bb969754cde24bf2b9109ce29b19
 
 workload:
   main:

charts/enterprise/blocky/Chart.yaml

@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: "0.21.0"
+appVersion: "0.22.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
@@ -25,7 +25,7 @@ sources:
   - https://0xerr0r.github.io/blocky/
   - https://github.com/0xERR0R/blocky
   - https://github.com/Mozart409/blocky-frontend
-version: 8.0.0
+version: 8.0.1
 annotations:
   truecharts.org/catagories: |
     - network

charts/enterprise/blocky/docs/setup-guide.md

@@ -1,18 +1,35 @@
 # Blocky Setup Guide
 
-This will guide you through the basic setup of Blocky which is the preferred DNS solution for TrueCharts. This guide will cover basic setup options which will get you up and running and is not all inclusive.
+This will guide you through the basic setup of Blocky which is the preferred DNS solution for TrueCharts. This guide will cover basic setup options which will get you up and running and is not all inclusive.  Configuring your devices to use Blocky is out of scope of this guide.
 
 ## Upstream DNS
 
-Blocky has multiple DNS entries configured by default these can be overridden to your personal preferences or left as default.
+Blocky has the following DNS entries configured by default.  They can be overridden to your personal preferences or left as default. Here are some common ones:
 
-Blocky supports 3 methods for upstream DNS.
+- 1.1.1.1
+- 1.0.0.1
+- 8.8.8.8
+- 8.8.4.4
+- 9.9.9.9
+- 149.112.112.112
+- 208.67.222.222
+- 208.67.220.220
+- 8.26.56.26
+- 8.20.247.20
+- 185.228.168.9
+- 185.228.169.9
+- 76.76.19.19
+- 76.223.122.150
+- 76.76.2.0
+- 76.76.10.0
+
+Blocky supports 3 methods for upstream DNS.  You can use any combination of the below.
 
 - UDP - Basic DNS
 - DoT - DNS over TLS
 - DoH - DNS over HTTPS
 
-While UDP provides no security for DNS both DoT and DoH will encrypt DNS request. DoH has the added benefit of privacy since DNS traffic will appear as HTTPS traffic.
+While UDP provides no security for DNS both DoT and DoH will encrypt DNS request. DoH has the added benefit of privacy since DNS traffic will appear as HTTPS traffic.  
 
 ### UDP DNS Setup
 
@@ -37,9 +54,9 @@ While UDP provides no security for DNS both DoT and DoH will encrypt DNS request
 
 ## Bootstrap DNS
 
-For DNS providers that do not use an IP address for DoT or DoH a bootstrap DNS provider
- is needed to resolve the DoT or DoH address. This provider can be any UDP upstream DNS.
- In the below example I am using Google DNS.
+If you entered a non-IP address (meaning you used a domain name) for DoT or DoH, then you need to ensure that a bootstrap DNS provider
+is configured to resolve the DoT or DoH address. This provider can be any UDP upstream DNS.
+In the below example I am using Google DNS.
 
 ![blocky-bootstrap-google](./img/blocky-bootstrap-google.png)
 
@@ -59,10 +76,17 @@ certain blocklists if you find legitimate traffic being blocked.
 
 1. Pick a Group Name for your blocklists.
 2. Add List entries for each blocklist by URL.
-  ![blocky-blacklist](./img/blocky-blacklist.png)
+   ![blocky-blacklist](./img/blocky-blacklist.png)
 3. Add a Clients Group Block and set Client Group Name to `default`
 4. Under Groups Entry enter the Group name you used above.
-  ![blocky-blacklist-group](./img/blocky-blacklist-group.png)
+   ![blocky-blacklist-group](./img/blocky-blacklist-group.png)
+
+## Networking
+
+If you want to use Blocky on your local network to take advantage of the filtering above, or the k8s-gateway below, you 
+need to setup a static ip address and leave the default setting DNS TCP Service and DNS UDP Service as LoadBalancer.
+
+You need to configure the devices on your network to use the static IP address configured above.  This can be done per device or by changing the DHCP or DNS settings on your router.
 
 ## k8s-Gateway Configuration
 
@@ -75,4 +99,3 @@ is to add your root domain in the Domain name block.
 ## Prometheus/Grafana
 
 TBD
-

charts/enterprise/blocky/values.yaml

@@ -1,6 +1,6 @@
 image:
   repository: tccr.io/truecharts/blocky
-  tag: v0.21.0@sha256:ed72f8a64307b7b734174589ac631726dd642cc8202c3bdf2eeb1de4adedbe0a
+  tag: v0.22.0@sha256:385055de8ad0b9074d2057d054768d649b8289c5dd566367e0b6289ba5d661a4
   pullPolicy: IfNotPresent
 
 k8sgatewayImage:

charts/enterprise/grafana/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "10.1.0"
+appVersion: "10.1.2"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.6
 deprecated: false
 description: Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, Elasticsearch, OpenTSDB, Prometheus and InfluxDB.
 home: https://truecharts.org/charts/enterprise/grafana
@@ -24,7 +24,7 @@ sources:
   - https://github.com/bitnami/bitnami-docker-grafana
   - https://grafana.com/
 type: application
-version: 9.0.10
+version: 9.0.18
 annotations:
   truecharts.org/catagories: |
     - metrics

charts/enterprise/grafana/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/grafana
   pullPolicy: IfNotPresent
-  tag: v10.1.0@sha256:ec891ddc5fb9e8918a15980777b75fa2bec346a531f3a2cbaa2e516d55c1ad31
+  tag: v10.1.2@sha256:32fd9faad9b33eb189d403277720417fb83ccd90c65c004417e8baaa817db306
 manifestManager:
   enabled: true
 securityContext:

charts/enterprise/traefik/Chart.yaml

@@ -23,7 +23,7 @@ sources:
   - https://github.com/traefik/traefik-helm-chart
   - https://traefik.io/
 type: application
-version: 21.0.3
+version: 21.0.4
 annotations:
   truecharts.org/catagories: |
     - network

charts/enterprise/vaultwarden/Chart.yaml

@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: "1.29.1"
+appVersion: "1.29.2"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
@@ -25,7 +25,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/enterprise/vaultwarden
   - https://github.com/dani-garcia/vaultwarden
 type: application
-version: 22.0.0
+version: 23.0.1
 annotations:
   truecharts.org/catagories: |
     - security

charts/enterprise/vaultwarden/questions.yaml

@@ -200,14 +200,21 @@ questions:
                       schema:
                         type: string
                         default: ""
-                    - variable: ssl
+                    - variable: security
                       label: "Enable SSL connection"
                       schema:
-                        type: boolean
-                        default: true
+                        type: string
+                        default: "starttls"
+                        enum:
+                          - value: "starttls"
+                            description: "STARTTLS (587)"
+                          - value: "force_tls"
+                            description: "FORCE_TLS (465)"
+                          - value: "off"
+                            description: "OFF (25)"
                     - variable: port
                       label: "SMTP port"
-                      description: "Usually: 25 without SSL, 587 with SSL"
+                      description: "Usually: 587 with STARTTLS, 465 with FORCE_TLS, and 25 without SSL"
                       schema:
                         type: int
                         default: 587

charts/enterprise/vaultwarden/templates/_configmap.tpl

@@ -47,7 +47,7 @@ data:
   SMTP_FROM_NAME: {{ .Values.vaultwarden.smtp.fromName | quote }}
   {{- end }}
   {{- if .Values.vaultwarden.smtp.ssl }}
-  SMTP_SSL: {{ .Values.vaultwarden.smtp.ssl | quote }}
+  SMTP_SECURITY: {{ .Values.vaultwarden.smtp.security | quote }}
   {{- end }}
   {{- if .Values.vaultwarden.smtp.port }}
   SMTP_PORT: {{ .Values.vaultwarden.smtp.port | quote }}

charts/enterprise/vaultwarden/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/vaultwarden
   pullPolicy: IfNotPresent
-  tag: v1.29.1@sha256:5a670aee4b1a57a5a414607f9222f558ab365625f64ff78885f7776971c95b54
+  tag: v1.29.2@sha256:f5761cdd99e267221623b7a91d123153885afd0980b31c863de039245b73aad3
 manifestManager:
   enabled: true
 service:
@@ -95,8 +95,8 @@ vaultwarden:
     ## SMTP sender name, defaults to 'Bitwarden_RS'.
     # fromName: ""
     ## Enable SSL connection.
-    # ssl: true
-    ## SMTP port. Defaults to 25 without SSL, 587 with SSL.
+    # security: starttls
+    ## SMTP port. Defaults to 587 with STARTTLS, 465 with FORCE_TLS, and 25 without SSL.
     # port: 587
     ## SMTP Authentication Mechanisms. Comma-separated options: 'Plain', 'Login' and 'Xoauth2'. Defaults to 'Plain'.
     # authMechanism: Plain

charts/incubator/eco/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "latest"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.3
 deprecated: false
 description: A custom SteamCMD chart that runs ECO.
 home: https://truecharts.org/charts/incubator/eco
@@ -21,7 +21,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/eco
   - https://github.com/ich777/docker-steamcmd-server/tree/eco
 type: application
-version: 3.0.0
+version: 3.1.1
 annotations:
   truecharts.org/catagories: |
     - games

charts/incubator/eco/questions.yaml

@@ -11,46 +11,143 @@ questions:
 # Include{podSpec}
 # Include{containerMain}
 
-                                - variable: env
-                                  label: Image Environment
-                                  schema:
-                                    additional_attrs: true
-                                    type: dict
-                                    attrs:
-                                      - variable: USERNAME
-                                        label: "UserName"
-                                        description: "Your Steam username  (optionally leave it blank)."
-                                        schema:
-                                          type: string
-                                          default: ""
-                                      - variable: PASSWRD
-                                        label: "Password"
-                                        description: "Your Steam password (optionally leave it blank)"
-                                        schema:
-                                          type: string
-                                          private: true
-                                          default: ""
-                                      - variable: GAME_ID
-                                        label: "Game ID"
-                                        description: "The ID of the container to download at start up."
-                                        schema:
-                                          type: string
-                                          default: ""
-                                      - variable: GAME_PARAMS
-                                        label: "Game Params"
-                                        description: "Enter your start up commands for the server."
-                                        schema:
-                                          type: string
-                                          default: ""
-                                      - variable: VALIDATE
-                                        label: "Validate"
-                                        description: "Set the Variable to true if you want to validate the installation otherwise leave it blank."
-                                        schema:
-                                          type: boolean
-                                          default: true
-
 # Include{containerBasic}
 # Include{containerAdvanced}
+
+  - variable: eco
+    group: App Configuration
+    label: Eco
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: game
+          label: Game Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: id
+                label: Game Id
+                description: The ID of the container to download at start up.
+                schema:
+                  type: string
+                  required: true
+                  default: "739590"
+              - variable: user
+                label: Steam User
+                description: Leave blank for anonymous login.
+                schema:
+                  type: string
+                  default: ""
+              - variable: password
+                label: Steam Password
+                description: Leave blank for anonymous login.
+                schema:
+                  type: string
+                  default: ""
+              - variable: validate
+                label: Validate
+                description: Validates the game data.
+                schema:
+                  type: boolean
+                  default: true
+              - variable: params
+                label: Game Params
+                schema:
+                  type: list
+                  default: []
+                  required: true
+                  items:
+                    - variable: param
+                      label: Param
+                      schema:
+                        type: string
+                        required: true
+                        default: ""
+        - variable: network
+          label: Network Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: PublicServer
+                label: Public Server
+                description: Defines if other players can see server.
+                schema:
+                  type: boolean
+                  default: false
+              - variable: Playtime
+                label: Play time
+                schema:
+                  type: string
+                  default: ""
+              - variable: DiscordAddress
+                label: Discord Address
+                description: Invite link ID for a Discord server.
+                schema:
+                  type: string
+                  default: ""
+              - variable: Password
+                label: Password
+                description: Defines if a server's password.
+                schema:
+                  type: string
+                  default: ""
+              - variable: Description
+                label: Server Name
+                description: Defines the name of the server.
+                schema:
+                  type: string
+                  default: "Truecharts ECO Server"
+              - variable: DetailedDescription
+                label: Detailed Description
+                description: Defines the server's description.
+                schema:
+                  type: string
+                  default: "Vanilla ECO game"
+              - variable: ServerCategory
+                label: Server Category
+                description: Set the server Category.
+                schema:
+                  type: string
+                  default: "None"
+                  enum:
+                    - value: None
+                      description: None
+                    - value: Beginner
+                      description: Beginner
+                    - value: Established
+                      description: Established
+                    - value: BeginnerHard
+                      description: BeginnerHard
+                    - value: Strange
+                      description: Strange
+              - variable: RemoteAddress
+                label: Remote Address
+                description: Public/external IP-address or domain and port number needed to reach the server.
+                schema:
+                  type: string
+                  default: "localhost:3000/"
+              - variable: WebServerUrl
+                label: Web Server Url
+                description: Public/external web sever URL.
+                schema:
+                  type: string
+                  default: "localhost:3001"
+              - variable: Rate
+                label: Rate
+                description: The network rate used to communicate between server and client.
+                schema:
+                  type: int
+                  default: 20
+              - variable: MaxConnections
+                label: Max Connections
+                description: Maximum number of concurrent players (-1 no limits).
+                schema:
+                  type: int
+                  default: -1
+
 # Include{containerConfig}
 # Include{podOptions}
 # Include{serviceRoot}

charts/incubator/eco/templates/_configmap.tpl

@@ -0,0 +1,12 @@
+{{/* Define the configmap */}}
+{{- define "eco.configmaps" -}}
+
+{{- $network := .Values.eco.network -}}
+
+eco-network:
+  enabled: true
+  data:
+    Network.eco: |
+      {{ $network | toJson }}
+
+{{- end -}}

charts/incubator/eco/templates/common.yaml

@@ -1 +1,11 @@
-{{ include "tc.v1.common.loader.all" . }}
+{{/* Make sure all variables are set properly */}}
+{{- include "tc.v1.common.loader.init" . -}}
+
+{{/* Render configmaps for all pods */}}
+{{- $configmaps := include "eco.configmaps" . | fromYaml -}}
+{{- if $configmaps -}}
+  {{- $_ := mustMergeOverwrite .Values.configmap $configmaps -}}
+{{- end -}}
+
+{{/* Render the templates */}}
+{{- include "tc.v1.common.loader.apply" . -}}

charts/incubator/eco/values.yaml

@@ -14,17 +14,41 @@ service:
   main:
     ports:
       main:
+        protocol: tcp
         port: 3001
-        protocol: http
-        targetPort: 3001
   game:
     enabled: true
     ports:
       game:
         enabled: true
-        port: 3000
         protocol: udp
-        targetPort: 3000
+        port: 3000
+
+eco:
+  game:
+    id: 739590
+    user: ""
+    password: ""
+    validate: false
+    params: []
+  network:
+    PublicServer: true
+    Playtime: ""
+    DiscordAddress: ""
+    Password: ""
+    # server name
+    Description: "Truecharts ECO Server"
+    # server description
+    DetailedDescription: "Vanilla ECO game"
+    ServerCategory: "None"
+    RemoteAddress: "localhost:3000/"
+    IPAddress: "Any"
+    GameServerPort: "{{ .Values.service.game.ports.game.port }}"
+    WebServerPort: "{{ .Values.service.main.ports.main.port }}"
+    WebServerUrl: "localhost:3001"
+    Rate: 20
+    MaxConnections: -1
+    UPnPEnabled: false
 
 workload:
   main:
@@ -33,23 +57,22 @@ workload:
         main:
           probes:
             liveness:
-              path: "/"
-              type: http
-              port: "{{ .Values.service.main.ports.main.targetPort }}"
-            readiness:
-              path: "/"
-              type: http
-              port: "{{ .Values.service.main.ports.main.targetPort }}"
-            startup:
+              enabled: true
+              type: tcp
+            readiness:
+              enabled: true
+              type: tcp
+            startup:
+              enabled: true
               type: tcp
-              port: "{{ .Values.service.main.ports.main.targetPort }}"
           env:
-            USERNAME: ""
-            PASSWRD: ""
-            GAME_ID: "739590"
-            GAME_PARAMS: ""
-            VALIDATE: false
-            # DATA_PERM: "770"
+            STEAMCMD_DIR: "{{ .Values.persistence.steamcmd.mountPath }}"
+            SERVER_DIR: "{{ .Values.persistence.serverfiles.mountPath }}"
+            GAME_ID: "{{ .Values.eco.game.id }}"
+            USERNAME: "{{ .Values.eco.game.user }}"
+            PASSWRD: "{{ .Values.eco.game.password }}"
+            GAME_PARAMS: '{{ join " " .Values.eco.game.params }}'
+            VALIDATE: "{{ .Values.eco.game.validate }}"
 
 persistence:
   steamcmd:
@@ -58,6 +81,13 @@ persistence:
   serverfiles:
     enabled: true
     mountPath: /serverdata/serverfiles
+  network-config:
+    enabled: true
+    type: configmap
+    objectName: eco-network
+    mountPath: /serverdata/serverfiles/Configs/Network.eco
+    subPath: Network.eco
+    readOnly: true
 
 portal:
   open:

charts/incubator/firezone/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "0.7.30"
+appVersion: "0.7.35"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.1
+    version: 14.0.3
 deprecated: false
 description: WireGuard-based VPN server and egress firewall
 home: https://truecharts.org/charts/incubator/firezone
@@ -22,7 +22,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/firezone
   - https://github.com/firezone/firezone
 type: application
-version: 0.0.8
+version: 0.2.1
 annotations:
   truecharts.org/catagories: |
     - vpn

charts/incubator/firezone/questions.yaml

@@ -11,232 +11,229 @@ questions:
 # Include{podSpec}
 # Include{containerMain}
 
-                                - variable: env
-                                  label: Image Environment
-                                  schema:
-                                    additional_attrs: true
-                                    type: dict
-                                    attrs:
-                                      - variable: EXTERNAL_URL
-                                        label: External Url
-                                        description: Must be a valid and public FQDN for ACME SSL issuance to function. Include https://
-                                        schema:
-                                          type: string
-                                          required: true
-                                          default: ""
-                                      - variable: DEFAULT_ADMIN_EMAIL
-                                        label: Default Admin Email
-                                        description: Primary administrator email.
-                                        schema:
-                                          type: string
-                                          required: true
-                                          default: ""
-                                      - variable: DEFAULT_ADMIN_PASSWORD
-                                        label: Default Admin Password
-                                        description: Primary administrator password.
-                                        schema:
-                                          type: string
-                                          required: true
-                                          private: true
-                                          default: ""
-                                      - variable: RESET_ADMIN_ON_BOOT
-                                        label: Reset Admin On Boot
-                                        description: to create or reset the admin password every time FireZone starts.
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                      - variable: TELEMETRY_ENABLED
-                                        label: Telemetry Enabled
-                                        description: Enable or disable the FireZone telemetry collection.
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                      - variable: devices
-                                        label: Devices Settings
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                          show_subquestions_if: true
-                                          subquestions:
-                                            - variable: ALLOW_UNPRIVILEGED_DEVICE_MANAGEMENT
-                                              label: Allow Unprivileged Devices
-                                              description: Enable or disable management of devices on unprivileged accounts.
-                                              schema:
-                                                type: boolean
-                                                default: true
-                                            - variable: ALLOW_UNPRIVILEGED_DEVICE_CONFIGURATION
-                                              label: Allow Unprivileged Device Configuration
-                                              description: Enable or disable configuration of device network settings for unprivileged users.
-                                              schema:
-                                                type: boolean
-                                                default: true
-                                            - variable: VPN_SESSION_DURATION
-                                              label: VPN Session Duration
-                                              description: Optionally require users to periodically authenticate to the FireZone, Interval for WireGuard persistent keepalive.
-                                              schema:
-                                                type: int
-                                                default: 0
-                                            - variable: DEFAULT_CLIENT_PERSISTENT_KEEPALIVE
-                                              label: Default Client Persistent KeepAlive
-                                              description: send a keepalive packet every 25 seconds. Otherwise, keep it disabled with a 0 default value.
-                                              schema:
-                                                type: int
-                                                default: 25
-                                            - variable: DEFAULT_CLIENT_MTU
-                                              label: Default Client MTU
-                                              description: WireGuard interface MTU for devices.
-                                              schema:
-                                                type: int
-                                                default: 1280
-                                            - variable: DEFAULT_CLIENT_ENDPOINT
-                                              label: Default Client EndPoint
-                                              description: IPv4, IPv6 address, or FQDN that devices will be configured to connect to. Defaults to this server's FQDN.
-                                              schema:
-                                                type: string
-                                                default: ""
-                                            - variable: DEFAULT_CLIENT_DNS
-                                              label: Default Client DNS
-                                              description: Comma-separated list of DNS servers to use for devices.
-                                              schema:
-                                                type: string
-                                                default: "1.1.1.1,1.0.0.1"
-                                            - variable: DEFAULT_CLIENT_ALLOWED_IPS
-                                              label: Default Client Allowed IPs
-                                              description: AllowedIPs determines which destination IPs get routed through FireZone.
-                                              schema:
-                                                type: string
-                                                default: "0.0.0.0/0,::/0"
-                                            - variable: MAX_DEVICES_PER_USER
-                                              label: Max Devices Per User
-                                              description: Changes how many devices a user can have at a time.
-                                              schema:
-                                                type: int
-                                                default: 10
-                                      - variable: authorization
-                                        label: Authorization Settings
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                          show_subquestions_if: true
-                                          subquestions:
-                                            - variable: LOCAL_AUTH_ENABLED
-                                              label: Local Auth Enabled
-                                              description: Enable or disable the local authentication method for all users.
-                                              schema:
-                                                type: boolean
-                                                default: true
-                                            - variable: DISABLE_VPN_ON_OIDC_ERROR
-                                              label: Disable VPN On OIDC Error
-                                              description: Enable or disable auto disabling VPN connection on OIDC refresh error.
-                                              schema:
-                                                type: boolean
-                                                default: false
-                                      - variable: wireguard
-                                        label: Wireguard Settings
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                          show_subquestions_if: true
-                                          subquestions:
-                                            - variable: WIREGUARD_IPV4_ENABLED
-                                              label: WireGuard IPV4 Enabled
-                                              description: Enable or disable IPv4 support for WireGuard.
-                                              schema:
-                                                type: boolean
-                                                default: true
-                                            - variable: WIREGUARD_IPV6_ENABLED
-                                              label: WireGuard IPV6 Enabled
-                                              description: Enable or disable IPv6 support for WireGuard.
-                                              schema:
-                                                type: boolean
-                                                default: false
-                                      - variable: outbound
-                                        label: OutBound Email Settings
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                          show_subquestions_if: true
-                                          subquestions:
-                                            - variable: OUTBOUND_EMAIL_FROM
-                                              label: Outbound Email From
-                                              description: From address to use for sending outbound emails.
-                                              schema:
-                                                type: string
-                                                default: ""
-                                            - variable: OUTBOUND_EMAIL_ADAPTER
-                                              label: Outbound Email Adapter
-                                              description: Method to use for sending outbound email.
-                                              schema:
-                                                type: string
-                                                default: "Elixir.FzHttpWeb.Mailer.NoopAdapter"
-                                                enum:
-                                                  - value: "Elixir.FzHttpWeb.Mailer.AmazonSES"
-                                                    description: "AmazonSES"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.CustomerIO"
-                                                    description: CustomerIO"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Dyn"
-                                                    description: Dyn
-                                                  - value: "Elixir.FzHttpWeb.Mailer.ExAwsAmazonSES"
-                                                    description: ExAwsAmazonSES"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Gmail"
-                                                    description: Gmail"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.MailPace"
-                                                    description: MailPace"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Mailgun"
-                                                    description: Mailgun"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Mailjet"
-                                                    description: MailJet"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Mandrill"
-                                                    description: Mandrill"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Postmark"
-                                                    description: Postmark"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.ProtonBridge"
-                                                    description: ProtonBridge"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.SMTP"
-                                                    description: SMTP"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.SMTP2GO"
-                                                    description: SMTP2GO"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Sendgrid"
-                                                    description: SendGrid"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Sendinblue"
-                                                    description: "SendInBlue"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.Sendmail"
-                                                    description: "Sendmail"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.SocketLabs"
-                                                    description: "SocketLabs"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.SparkPost"
-                                                    description: "SparkPost"
-                                                  - value: "Elixir.FzHttpWeb.Mailer.NoopAdapter"
-                                                    description: "NoopAdapter"
-                                            - variable: OUTBOUND_EMAIL_ADAPTER_OPTS
-                                              label: Outbound Email Adapter OPTS
-                                              description: Adapter configuration, see https://github.com/swoosh/swoosh#adapters.
-                                              schema:
-                                                type: string
-                                                default: ""
-                                      - variable: connectivity
-                                        label: Connectivity Settings
-                                        schema:
-                                          type: boolean
-                                          default: false
-                                          show_subquestions_if: true
-                                          subquestions:
-                                            - variable: CONNECTIVITY_CHECKS_ENABLED
-                                              label: Connectivity Checks Enabled
-                                              description:     Enable / disable periodic checking for egress connectivity. Determines the instance's public IP to populate Endpoint fields.
-                                              schema:
-                                                type: boolean
-                                                default: true
-                                            - variable: CONNECTIVITY_CHECKS_INTERVAL
-                                              label: Connectivity Checks Interval
-                                              description: Periodicity in seconds to check for egress connectivity.
-                                              schema:
-                                                type: int
-                                                default: 43200
-
 # Include{containerBasic}
 # Include{containerAdvanced}
 
+  - variable: firezone
+    group: App Configuration
+    label: FireZone
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: web
+          label: Web Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: external_url
+                label: External Url
+                description: Must be a valid and public FQDN for ACME SSL issuance to function. Include https://
+                schema:
+                  type: string
+                  required: true
+                  default: ""
+              - variable: trusted_proxies
+                label: Trusted Proxies
+                description: List of trusted reverse proxies.
+                schema:
+                  type: list
+                  default: []
+                  items:
+                    - variable: proxy
+                      label: Proxy IP
+                      schema:
+                        type: string
+                        required: true
+                        default: ""
+              - variable: private_clients
+                label: Private Clients
+                description: List of trusted clients.
+                schema:
+                  type: list
+                  default: []
+                  items:
+                    - variable: client_ip
+                      label: Client IP
+                      schema:
+                        type: string
+                        required: true
+                        default: ""
+              - variable: secure_cookies
+                label: Secure Cookies
+                description: Enable or disable requiring secure cookies. Required for HTTPS.
+                schema:
+                  type: boolean
+                  default: true
+        - variable: admin
+          label: Admin Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: reset_admin_on_boot
+                label: Reset Admin On Boot
+                description: to create or reset the admin password every time Firezone starts. By default, the admin password is only set when Firezone is installed.
+                schema:
+                  type: boolean
+                  default: false
+              - variable: default_email
+                label: Default Email
+                description: Primary administrator email.
+                schema:
+                  type: string
+                  required: true
+                  default: ""
+              - variable: default_password
+                label: Default Password
+                description: Default password that will be used for creating or resetting the primary administrator account.
+                schema:
+                  type: string
+                  required: true
+                  private: true
+                  default: ""
+        - variable: devices
+          label: Devices Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: allow_unprivileged_device_management
+                label: Allow Unprivileged Device Management
+                description: Enable or disable management of devices on unprivileged accounts.
+                schema:
+                  type: boolean
+                  default: true
+              - variable: allow_unprivileged_device_config
+                label: Allow Unprivileged Device Configuration
+                description: Enable or disable configuration of device network settings for unprivileged users.
+                schema:
+                  type: boolean
+                  default: true
+              - variable: vpn_session_duration
+                label: VPN Session Duration
+                description: Optionally require users to periodically authenticate to the Firezone web UI in order to keep their VPN sessions active.
+                schema:
+                  type: int
+                  default: 0
+              - variable: client_persistent_keepalive
+                label: Client Persistent KeepAlive
+                description: If you experience NAT or firewall traversal problems, you can enable this to send a keepalive packet every 25 seconds, disabled by setting it to 0.
+                schema:
+                  type: int
+                  default: 0
+              - variable: default_client_mtu
+                label: Default Client MTU
+                description: WireGuard interface MTU for devices.
+                schema:
+                  type: int
+                  default: 1280
+              - variable: client_endpoint
+                label: Client Endpoint
+                description: IPv4, IPv6 address, or FQDN that devices will be configured to connect to.
+                schema:
+                  type: string
+                  default: ""
+              - variable: client_dns
+                label: Client DNS
+                description: List of DNS servers to use for devices.
+                schema:
+                  type: list
+                  empty: false
+                  required: true
+                  default:
+                    - 1.1.1.1
+                    - 1.0.0.1
+                  items:
+                    - variable: dns
+                      label: DNS
+                      schema:
+                        type: string
+                        required: true
+                        default: ""
+              - variable: client_allowed_ips
+                label: Client Allowed Ips
+                description: Configures the default AllowedIPs setting for devices.
+                schema:
+                  type: list
+                  empty: false
+                  default:
+                    - 0.0.0.0/0
+                  items:
+                    - variable: ip
+                      label: IP
+                      schema:
+                        type: string
+                        required: true
+                        default: ""
+              - variable: max_devices_per_user
+                label: Max Devices Per User
+                description: Changes how many devices a user can have at a time.
+                schema:
+                  type: int
+                  default: 10
+        - variable: authorization
+          label: Authorization Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: local_auth_enabled
+                label: Local Auth Enabled
+                description: Enable or disable the local authentication method for all users.
+                schema:
+                  type: boolean
+                  default: true
+              - variable: disable_vpn_on_oidc_error
+                label: Disable VPN On OIDC Error
+                description: Enable or disable auto disabling VPN connection on OIDC refresh error.
+                schema:
+                  type: boolean
+                  default: false
+        - variable: wireguard
+          label: Wireguard Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: ipv4_masquerade_enabled
+                label: IPv4 Masquerade Enabled
+                description: Enable or disable IPv4 masqeurading.
+                schema:
+                  type: boolean
+                  default: true
+        - variable: connectivity
+          label: Connectivity Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: checks_enabled
+                label: Checks Enabled
+                description: Enable / disable periodic checking for egress connectivity.
+                schema:
+                  type: boolean
+                  default: true
+              - variable: checks_interval
+                label: Checks Interval
+                description: Periodicity in seconds to check for egress connectivity.
+                schema:
+                  type: int
+                  default: 43200
+        - variable: other
+          label: Other Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: telemetry_enabled
+                label: Telemetry Enabled
+                description: Enable or disable the Firezone telemetry collection.
+                schema:
+                  type: boolean
+                  default: false
+
 # Include{containerConfig}
 # Include{podOptions}
 # Include{serviceRoot}

charts/incubator/firezone/templates/_secrets.tpl

@@ -1,12 +1,15 @@
 {{/* Define the secrets */}}
 {{- define "firezone.secrets" -}}
 {{- $secretName := (printf "%s-firezone-secrets" (include "tc.v1.common.lib.chart.names.fullname" $)) -}}
-{{- $keyGuardian := randAlphaNum 64 -}}
-{{- $keyDatabase := randAlphaNum 64 -}}
-{{- $keySecret := randAlphaNum 64 -}}
-{{- $keyLive := randAlphaNum 64 -}}
-{{- $keyCookieSigning := randAlphaNum 64 -}}
-{{- $keyCookieEncrypt := randAlphaNum 64 -}}
+
+# firezone requires all these keys to be in base 64 | b64enc format presented in the container, so this b64enc here is intentional
+# https://www.firezone.dev/docs/reference/env-vars#secrets-and-encryption
+{{- $keyGuardian := randAlphaNum 48 | b64enc -}}
+{{- $keyDatabase := randAlphaNum 32 | b64enc -}}
+{{- $keySecret := randAlphaNum 48 | b64enc -}}
+{{- $keyLive := randAlphaNum 24 | b64enc -}}
+{{- $keyCookieSigning := randAlphaNum 6 | b64enc -}}
+{{- $keyCookieEncrypt := randAlphaNum 6 | b64enc -}}
 {{- with (lookup "v1" "Secret" .Release.Namespace $secretName) -}}
   {{- $keyGuardian = index .data "GUARDIAN_SECRET_KEY" | b64dec -}}
   {{- $keyDatabase = index .data "DATABASE_ENCRYPTION_KEY" | b64dec -}}

charts/incubator/firezone/templates/common.yaml

@@ -4,7 +4,7 @@
 {{/* Render secrets for firezone */}}
 {{- $secrets := include "firezone.secrets" . | fromYaml -}}
 {{- if $secrets -}}
-  {{- $_ := set .Values.secret "secrets" $secrets -}}
+  {{- $_ := set .Values.secret "firezone-secrets" $secrets -}}
 {{- end -}}
 
 {{/* Render the templates */}}

charts/incubator/firezone/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/firezone
   pullPolicy: IfNotPresent
-  tag: v0.7.30@sha256:e22dc7a9be93a804bbe0e3d301c883625463a3649d856c8b41f80a2257214667
+  tag: v0.7.35@sha256:53c08baeb65dde8689ebb3bd1fc9fbb034970dfdc9bceb005c4ffa03fe2b3e93
 
 securityContext:
   container:
@@ -15,26 +15,66 @@ securityContext:
         - NET_ADMIN
         - SYS_MODULE
 
+service:
+  main:
+    ports:
+      main:
+        protocol: http
+        port: 13000
+  wireguard:
+    enabled: true
+    ports:
+      wireguard:
+        enabled: true
+        protocol: udp
+        port: 51820
+
+firezone:
+  web:
+    external_url: "https://example.com"
+    trusted_proxies: []
+    private_clients: []
+  admin:
+    reset_admin_on_boot: false
+    default_email: "admin@email.com"
+    default_password: "1234567890"
+  devices:
+    allow_unprivileged_device_management: true
+    allow_unprivileged_device_config: true
+    vpn_session_duration: 0
+    client_persistent_keepalive: 25
+    default_client_mtu: 1280
+    client_endpoint: ""
+    client_dns:
+      - 1.1.1.1
+      - 1.0.0.1
+    client_allowed_ips:
+      - 0.0.0.0/0
+    max_devices_per_user: 10
+  authorization:
+    local_auth_enabled: true
+    disable_vpn_on_oidc_error: false
+  wireguard:
+    ipv4_masquerade_enabled: true
+  connectivity:
+    checks_enabled: true
+    checks_interval: 43200
+  other:
+    telemetry_enabled: false
+
 workload:
   main:
     podSpec:
       containers:
         main:
-          probes:
-            liveness:
-              enabled: false
-            readiness:
-              enabled: false
-            startup:
-              enabled: false
           env:
             # web
             PHOENIX_HTTP_PORT: "{{ .Values.service.main.ports.main.port }}"
-            EXTERNAL_URL: "https://app.mydomain.com"
-            # PHOENIX_SECURE_COOKIES: true
+            EXTERNAL_URL: "{{ .Values.firezone.web.external_url }}"
+            PHOENIX_SECURE_COOKIES: "{{ .Values.firezone.web.secure_cookies }}"
             # PHOENIX_HTTP_PROTOCOL_OPTIONS: "{}"
-            # PHOENIX_EXTERNAL_TRUSTED_PROXIES: "[]"
-            # PHOENIX_PRIVATE_CLIENTS: "[]"
+            PHOENIX_EXTERNAL_TRUSTED_PROXIES: "{{ toJson .Values.firezone.web.trusted_proxies }}"
+            PHOENIX_PRIVATE_CLIENTS: "{{ toJson .Values.firezone.web.private_clients }}"
             # DB
             DATABASE_HOST:
               secretKeyRef:
@@ -51,49 +91,49 @@ workload:
             DATABASE_SSL_ENABLED: false
             # DATABASE_SSL_OPTS: "{}"
             # Admin
-            RESET_ADMIN_ON_BOOT: false
-            DEFAULT_ADMIN_EMAIL: "admin@email.com"
-            DEFAULT_ADMIN_PASSWORD: "1234567890"
+            RESET_ADMIN_ON_BOOT: "{{ .Values.firezone.admin.reset_admin_on_boot }}"
+            DEFAULT_ADMIN_EMAIL: "{{ .Values.firezone.admin.default_email }}"
+            DEFAULT_ADMIN_PASSWORD: "{{ .Values.firezone.admin.default_password }}"
             # Secrets and Encryption
             GUARDIAN_SECRET_KEY:
               secretKeyRef:
-                name: secrets
+                name: firezone-secrets
                 key: GUARDIAN_SECRET_KEY
             DATABASE_ENCRYPTION_KEY:
               secretKeyRef:
-                name: secrets
+                name: firezone-secrets
                 key: DATABASE_ENCRYPTION_KEY
             SECRET_KEY_BASE:
               secretKeyRef:
-                name: secrets
+                name: firezone-secrets
                 key: SECRET_KEY_BASE
             LIVE_VIEW_SIGNING_SALT:
               secretKeyRef:
-                name: secrets
+                name: firezone-secrets
                 key: LIVE_VIEW_SIGNING_SALT
             COOKIE_SIGNING_SALT:
               secretKeyRef:
-                name: secrets
+                name: firezone-secrets
                 key: COOKIE_SIGNING_SALT
             COOKIE_ENCRYPTION_SALT:
               secretKeyRef:
-                name: secrets
+                name: firezone-secrets
                 key: COOKIE_ENCRYPTION_SALT
             # Devices
-            ALLOW_UNPRIVILEGED_DEVICE_MANAGEMENT: true
-            ALLOW_UNPRIVILEGED_DEVICE_CONFIGURATION: true
-            VPN_SESSION_DURATION: 0
-            DEFAULT_CLIENT_PERSISTENT_KEEPALIVE: 25
-            DEFAULT_CLIENT_MTU: 1280
-            # DEFAULT_CLIENT_ENDPOINT: ""
-            DEFAULT_CLIENT_DNS: "1.1.1.1,1.0.0.1"
-            DEFAULT_CLIENT_ALLOWED_IPS: "0.0.0.0/0, ::/0"
+            ALLOW_UNPRIVILEGED_DEVICE_MANAGEMENT: "{{ .Values.firezone.devices.allow_unprivileged_device_management }}"
+            ALLOW_UNPRIVILEGED_DEVICE_CONFIGURATION: "{{ .Values.firezone.devices.allow_unprivileged_device_config }}"
+            VPN_SESSION_DURATION: "{{ .Values.firezone.devices.vpn_session_duration }}"
+            DEFAULT_CLIENT_PERSISTENT_KEEPALIVE: "{{ .Values.firezone.devices.client_persistent_keepalive }}"
+            DEFAULT_CLIENT_MTU: "{{ .Values.firezone.devices.default_client_mtu }}"
+            DEFAULT_CLIENT_ENDPOINT: "{{ .Values.firezone.devices.client_endpoint }}"
+            DEFAULT_CLIENT_DNS: '{{ join "," .Values.firezone.devices.client_dns }}'
+            DEFAULT_CLIENT_ALLOWED_IPS: '{{ join "," .Values.firezone.devices.client_allowed_ips }}'
             # Limits
-            MAX_DEVICES_PER_USER: 10
+            MAX_DEVICES_PER_USER: "{{ .Values.firezone.devices.max_devices_per_user }}"
             # Authorization
-            LOCAL_AUTH_ENABLED: true
-            DISABLE_VPN_ON_OIDC_ERROR: false
-            SAML_ENTITY_ID: "urn:firezone.dev:firezone-app"
+            LOCAL_AUTH_ENABLED: "{{ .Values.firezone.authorization.local_auth_enabled }}"
+            DISABLE_VPN_ON_OIDC_ERROR: "{{ .Values.firezone.authorization.disable_vpn_on_oidc_error }}"
+            # SAML_ENTITY_ID: "urn:firezone.dev:firezone-app"
             # SAML_KEYFILE_PATH: "/var/firezone/saml.key"
             # SAML_CERTFILE_PATH: "/var/firezone/saml.crt"
             # OPENID_CONNECT_PROVIDERS: "[]"
@@ -101,30 +141,18 @@ workload:
             # WireGuard
             WIREGUARD_PORT: "{{ .Values.service.wireguard.ports.wireguard.port }}"
             WIREGUARD_IPV4_ENABLED: true
+            WIREGUARD_IPV4_MASQUERADE: "{{ .Values.firezone.wireguard.ipv4_masquerade_enabled }}"
             WIREGUARD_IPV6_ENABLED: false
+            WIREGUARD_IPV6_MASQUERADE: false
             # Outbound Emails
-            OUTBOUND_EMAIL_FROM: ""
-            OUTBOUND_EMAIL_ADAPTER: "Elixir.FzHttpWeb.Mailer.NoopAdapter"
+            # OUTBOUND_EMAIL_FROM: ""
+            # OUTBOUND_EMAIL_ADAPTER: "Elixir.FzHttpWeb.Mailer.NoopAdapter"
             # OUTBOUND_EMAIL_ADAPTER_OPTS: "{}"
             # Connectivity Checks
-            CONNECTIVITY_CHECKS_ENABLED: true
-            CONNECTIVITY_CHECKS_INTERVAL: 43200
+            CONNECTIVITY_CHECKS_ENABLED: "{{ .Values.firezone.connectivity.checks_enabled }}"
+            CONNECTIVITY_CHECKS_INTERVAL: "{{ .Values.firezone.connectivity.checks_interval }}"
             # Telemetry
-            TELEMETRY_ENABLED: false
-
-service:
-  main:
-    ports:
-      main:
-        protocol: http
-        port: 13000
-  wireguard:
-    enabled: true
-    ports:
-      wireguard:
-        enabled: true
-        protocol: udp
-        port: 51820
+            TELEMETRY_ENABLED: "{{ .Values.firezone.other.telemetry_enabled }}"
 
 persistence:
   config:

charts/incubator/homebridge/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "2023"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
+    version: 14.0.1
 deprecated: false
 description: A lightweight NodeJS server that emulates the iOS HomeKit API
 home: https://truecharts.org/charts/incubator/homebridge
@@ -22,7 +22,7 @@ sources:
   - https://homebridge.io/
   - https://github.com/oznu/docker-homebridge
 type: application
-version: 3.1.0
+version: 4.0.0
 annotations:
   truecharts.org/catagories: |
     - media

charts/incubator/homebridge/questions.yaml

@@ -10,29 +10,26 @@ questions:
 # Include{replicas1}
 # Include{podSpec}
 # Include{containerMain}
+
+
 # Include{containerBasic}
 # Include{containerAdvanced}
 
 # Include{containerConfig}
+# Include{podOptions}
 # Include{serviceRoot}
-        - variable: main
-          label: Main Service
-          description: The Primary service on which the healthcheck runs, often the webUI
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
+# Include{serviceMain}
 # Include{serviceSelectorLoadBalancer}
 # Include{serviceSelectorExtras}
                     - variable: main
-                      label: Main Service Port Configuration
+                      label: "Main Service Port Configuration"
                       schema:
                         additional_attrs: true
                         type: dict
                         attrs:
                           - variable: port
-                            label: Port
-                            description: This port exposes the container port on the service
+                            label: "Port"
+                            description: "This port exposes the container port on the service"
                             schema:
                               type: int
                               default: 8581
@@ -52,7 +49,7 @@ questions:
 # Include{persistenceList}
 # Include{ingressRoot}
         - variable: main
-          label: Main Ingress
+          label: "Main Ingress"
           schema:
             additional_attrs: true
             type: dict
@@ -62,29 +59,29 @@ questions:
 # Include{ingressTraefik}
 # Include{ingressAdvanced}
 # Include{ingressList}
+# Include{securityContextRoot}
 
-# Include{podSecurityContextRoot}
-        - variable: runAsUser
-          label: runAsUser
-          description: The UserID of the user running the application
-          schema:
-            type: int
-            default: 0
-        - variable: runAsGroup
-          label: runAsGroup
-          description: The groupID this App of the user running the application
-          schema:
-            type: int
-            default: 0
+              - variable: runAsUser
+                label: "runAsUser"
+                description: "The UserID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
 # Include{securityContextContainer}
 # Include{securityContextAdvanced}
 # Include{securityContextPod}
-        - variable: fsGroup
-          label: fsGroup
-          description: The group that should own ALL storage.
-          schema:
-            type: int
-            default: 568
+              - variable: fsGroup
+                label: "fsGroup"
+                description: "The group that should own ALL storage."
+                schema:
+                  type: int
+                  default: 568
 
 # Include{resources}
 # Include{advanced}

charts/incubator/homebridge/templates/common.yaml

@@ -1 +1 @@
-{{ include "tc.common.loader.all" . }}
+{{ include "tc.v1.common.loader.all" . }}

charts/incubator/homebridge/values.yaml

@@ -4,22 +4,25 @@ image:
   tag: v2023-01@sha256:fa0512d8b38d20d4078b0f403c23c17716a045fcb4dc723b896461a766e22ee9
 
 securityContext:
-  readOnlyRootFilesystem: false
-  runAsNonRoot: false
+  container:
+    readOnlyRootFilesystem: false
+    runAsNonRoot: false
+    runAsUser: 0
+    runAsGroup: 0
 
-podSecurityContext:
-  runAsUser: 0
-  runAsGroup: 0
-
-env:
-  HOMEBRIDGE_CONFIG_UI: 1
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          env:
+            HOMEBRIDGE_CONFIG_UI: 1
 
 service:
   main:
     ports:
       main:
-        protocol: HTTP
-        targetPort: 8581
+        protocol: http
         port: 8581
 
 persistence:
@@ -28,4 +31,5 @@ persistence:
     mountPath: /homebridge
 
 portal:
-  enabled: true
+  open:
+    enabled: true

charts/incubator/icloudpd/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: "latest"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
+    version: 14.0.1
 deprecated: false
 description: iCloudPD, syncs photos from iDevices to a single directory on TrueNAS.
 home: https://truecharts.org/charts/incubator/icloudpd
@@ -23,7 +23,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/icloudpd
   - https://github.com/Womabre/-TrueNAS-docker-templates
 type: application
-version: 2.0.16
+version: 3.0.0
 annotations:
   truecharts.org/SCALE-support: "true"
   truecharts.org/catagories: |

charts/incubator/icloudpd/questions.yaml

@@ -212,6 +212,7 @@ questions:
               - value: Bark
                 description: Bark
 # Include{containerConfig}
+# Include{podOptions}
 # Include{serviceExpertRoot}
 # Include{serviceExpert}
 # Include{serviceList}

charts/incubator/icloudpd/templates/common.yaml

@@ -1,2 +1 @@
-{{/* Render the templates */}}
-{{ include "tc.common.loader.all" . }}
+{{ include "tc.v1.common.loader.all" . }}

charts/incubator/icloudpd/values.yaml

@@ -3,13 +3,12 @@ image:
   repository: tccr.io/truecharts/icloudpd
   tag: latest@sha256:ab4b90c22a3bf93d6045cd26733447b143a66d5c9100a91c9bbea27f0443a838
 
-podSecurityContext:
-  runAsGroup: 0
-  runAsUser: 0
-
 securityContext:
-  readOnlyRootFilesystem: false
-  runAsNonRoot: false
+  container:
+    readOnlyRootFilesystem: false
+    runAsNonRoot: false
+    runAsGroup: 0
+    runAsUser: 0
 
 icloudpd:
   apple_id: your@appleid.com
@@ -35,7 +34,7 @@ icloudpd:
   delete_accompanying: false
   delete_empty_directories: false
   command_line_options: ""
-  notification_title: iCloud PD
+  notification_title: "iCloud PD"
   # https://github.com/boredazfcuk/docker-icloudpd/blob/master/NOTIFICATIONS.md
   notification_type: ""
   # prowl_api_key: ""
@@ -70,47 +69,51 @@ icloudpd:
   # bark_device_key: ""
   # bark_server: ""
 
-env:
-  user: apps
-  group: apps
-  user_id: "{{ .Values.security.PUID }}"
-  group_id: "{{ .Values.podSecurityContext.fsGroup }}"
-  download_path: /home/{{ .Values.env.user }}/iCloud
-  jpeg_path: /home/{{ .Values.env.user }}/iCloud
-  # User Defined
-  apple_id: "{{ .Values.icloudpd.apple_id }}"
-  synchronisation_interval: "{{ .Values.icloudpd.synchronisation_interval }}"
-  synchronisation_delay: "{{ .Values.icloudpd.synchronisation_delay }}"
-  notification_days: "{{ .Values.icloudpd.notification_days }}"
-  authentication_type: "{{ .Values.icloudpd.authentication_type }}"
-  skip_check: '{{ ternary "True" "False" .Values.icloudpd.skip_check }}'
-  download_notifications: '{{ ternary "True" "False" .Values.icloudpd.download_notifications }}'
-  delete_notifications: '{{ ternary "True" "False" .Values.icloudpd.delete_notifications }}'
-  delete_accompanying: '{{ ternary "True" "False" .Values.icloudpd.delete_accompanying }}'
-  delete_empty_directories: '{{ ternary "True" "False" .Values.icloudpd.delete_empty_directories }}'
-  set_exif_datetime: '{{ ternary "True" "False" .Values.icloudpd.set_exif_datetime }}'
-  auto_delete: '{{ ternary "True" "False" .Values.icloudpd.auto_delete }}'
-  photo_size: "{{ .Values.icloudpd.photo_size }}"
-  skip_live_photos: '{{ ternary "True" "False" .Values.icloudpd.skip_live_photos }}'
-  live_photo_size: "{{ .Values.icloudpd.live_photo_size }}"
-  skip_videos: '{{ ternary "True" "False" .Values.icloudpd.skip_videos }}'
-  recent_only: '{{ ternary "" .Values.icloudpd.recent_only (eq 0 (int .Values.icloudpd.recent_only)) }}'
-  until_found: '{{ ternary "" .Values.icloudpd.until_found (eq 0 (int .Values.icloudpd.until_found)) }}'
-  photo_album: "{{ .Values.icloudpd.photo_album }}"
-  convert_heic_to_jpeg: '{{ ternary "True" "False" .Values.icloudpd.convert_heic_to_jpeg }}'
-  jpeg_quality: "{{ .Values.icloudpd.jpeg_quality }}"
-  icloud_china: '{{ ternary "True" "" .Values.icloudpd.icloud_china }}'
-  command_line_options: "{{ .Values.icloudpd.command_line_options }}"
-  notification_title: "{{ .Values.icloudpd.notification_title }}"
-  notification_type: "{{ .Values.icloudpd.notification_type }}"
-
-probes:
-  liveness:
-    enabled: false
-  readiness:
-    enabled: false
-  startup:
-    enabled: false
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          env:
+            user: apps
+            group: apps
+            user_id: "{{ .Values.securityContext.container.runAsUser }}"
+            group_id: "{{ .Values.securityContext.container.runAsGroup }}"
+            download_path: /home/{{ .Values.workload.main.podSpec.containers.main.env.user }}/iCloud
+            jpeg_path: /home/{{ .Values.workload.main.podSpec.containers.main.env.user }}/iCloud
+            # User Defined
+            apple_id: "{{ .Values.icloudpd.apple_id }}"
+            synchronisation_interval: "{{ .Values.icloudpd.synchronisation_interval }}"
+            synchronisation_delay: "{{ .Values.icloudpd.synchronisation_delay }}"
+            notification_days: "{{ .Values.icloudpd.notification_days }}"
+            authentication_type: "{{ .Values.icloudpd.authentication_type }}"
+            skip_check: '{{ ternary "True" "False" .Values.icloudpd.skip_check }}'
+            download_notifications: '{{ ternary "True" "False" .Values.icloudpd.download_notifications }}'
+            delete_notifications: '{{ ternary "True" "False" .Values.icloudpd.delete_notifications }}'
+            delete_accompanying: '{{ ternary "True" "False" .Values.icloudpd.delete_accompanying }}'
+            delete_empty_directories: '{{ ternary "True" "False" .Values.icloudpd.delete_empty_directories }}'
+            set_exif_datetime: '{{ ternary "True" "False" .Values.icloudpd.set_exif_datetime }}'
+            auto_delete: '{{ ternary "True" "False" .Values.icloudpd.auto_delete }}'
+            photo_size: "{{ .Values.icloudpd.photo_size }}"
+            skip_live_photos: '{{ ternary "True" "False" .Values.icloudpd.skip_live_photos }}'
+            live_photo_size: "{{ .Values.icloudpd.live_photo_size }}"
+            skip_videos: '{{ ternary "True" "False" .Values.icloudpd.skip_videos }}'
+            recent_only: '{{ ternary "" .Values.icloudpd.recent_only (eq 0 (int .Values.icloudpd.recent_only)) }}'
+            until_found: '{{ ternary "" .Values.icloudpd.until_found (eq 0 (int .Values.icloudpd.until_found)) }}'
+            photo_album: "{{ .Values.icloudpd.photo_album }}"
+            convert_heic_to_jpeg: '{{ ternary "True" "False" .Values.icloudpd.convert_heic_to_jpeg }}'
+            jpeg_quality: "{{ .Values.icloudpd.jpeg_quality }}"
+            icloud_china: '{{ ternary "True" "" .Values.icloudpd.icloud_china }}'
+            command_line_options: "{{ .Values.icloudpd.command_line_options }}"
+            notification_title: "{{ .Values.icloudpd.notification_title }}"
+            notification_type: "{{ .Values.icloudpd.notification_type }}"
+          probes:
+            liveness:
+              enabled: false
+            readiness:
+              enabled: false
+            startup:
+              enabled: false
 
 service:
   main:
@@ -128,4 +131,5 @@ persistence:
     mountPath: /home/apps/iCloud
 
 portal:
-  enabled: false
+  open:
+    enabled: false

charts/incubator/jenkins/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "2.392.0"
+appVersion: "2.422.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 11.1.2
+    version: 14.0.1
 deprecated: false
 description: The gold standard in devops tools for running CI/CD pipelines.
 home: https://truecharts.org/charts/incubator/jenkins
@@ -19,8 +19,9 @@ maintainers:
 name: jenkins
 sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/jenkins
+  - https://github.com/jenkinsci/docker
 type: application
-version: 3.0.15
+version: 4.0.0
 annotations:
   truecharts.org/catagories: |
     - productivity

charts/incubator/jenkins/questions.yaml

@@ -146,19 +146,18 @@ questions:
 # Include{ingressAdvanced}
 # Include{ingressList}
 # Include{securityContextRoot}
-
-        - variable: runAsUser
-          label: runAsUser
-          description: The UserID of the user running the application
-          schema:
-            type: int
-            default: 1000
-        - variable: runAsGroup
-          label: runAsGroup
-          description: The groupID this App of the user running the application
-          schema:
-            type: int
-            default: 1000
+              - variable: runAsUser
+                label: "runAsUser"
+                description: "The UserID of the user running the application"
+                schema:
+                  type: int
+                  default: 1000
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID of the user running the application"
+                schema:
+                  type: int
+                  default: 1000
 # Include{securityContextContainer}
 # Include{securityContextAdvanced}
 # Include{securityContextPod}
@@ -168,7 +167,6 @@ questions:
           schema:
             type: int
             default: 1000
-
 # Include{resources}
 # Include{advanced}
 # Include{addons}

charts/incubator/jenkins/templates/NOTES.txt

@@ -0,0 +1 @@
+{{- include "tc.v1.common.lib.chart.notes" $ -}}

charts/incubator/jenkins/templates/_secret.tpl

@@ -1,15 +1,7 @@
 {{/* Define the secret */}}
 {{- define "jenkins.secret" -}}
-
-{{- $secretName := printf "%s-secret" (include "tc.common.names.fullname" .) -}}
----
-apiVersion: v1
-kind: Secret
-metadata:
-  name: {{ $secretName }}
-  labels:
-    {{- include "tc.common.labels" . | nindent 4 }}
-stringData:
+enabled: true
+data:
   JAVA_OPTS: {{ join " " (include "java.opts" . | fromYaml).opts | quote }}
   JENKINS_OPTS: {{ join " " (include "jenkins.opts" . | fromYaml).opts | quote }}
   JENKINS_JAVA_OPTS: {{ join " " (include "jenkins.java.opts" . | fromYaml).opts | quote }}

charts/incubator/jenkins/templates/common.yaml

@@ -1,8 +1,11 @@
 {{/* Make sure all variables are set properly */}}
-{{- include "tc.common.loader.init" . }}
+{{- include "tc.v1.common.loader.init" . }}
 
-{{/* Render secret */}}
-{{- include "jenkins.secret" . }}
+{{/* Render secrets for jenkins */}}
+{{- $secret := include "jenkins.secret" . | fromYaml -}}
+{{- if $secret -}}
+  {{- $_ := set .Values.secret "jenkins-secret" $secret -}}
+{{- end -}}
 
 {{/* Render the templates */}}
-{{ include "tc.common.loader.apply" . }}
+{{ include "tc.v1.common.loader.apply" . }}

charts/incubator/jenkins/values.yaml

@@ -1,12 +1,14 @@
 image:
   repository: tccr.io/truecharts/jenkins
   pullPolicy: IfNotPresent
-  tag: 2.392.0@sha256:362ac8a36b4a1d603a0bce6e5c35097b33d6aae0544ba1cef8f300d2788dd09b
+  tag: 2.422.0@sha256:c046d180b498bbeab33fbcd0900ef14bcd4272fc85350f5cbdfa19b5ac45e283
 
-podSecurityContext:
-  runAsGroup: 1000
-  runAsUser: 1000
-  fsGroup: 1000
+security:
+  container:
+    runAsGroup: 1000
+    runAsUser: 1000
+  pod:
+    fsGroup: 1000
 
 # securityContext:
 #   readOnlyRootFilesystem: false
@@ -18,26 +20,29 @@ jenkins:
   plugins_force_upgrade: false
   upgrade_if_no_marker: false
 
-envFrom:
-  - secretRef:
-      name: '{{ include "tc.common.names.fullname" . }}-secret'
-
-probes:
-  liveness:
-    type: HTTP
-    path: /login
-  readiness:
-    type: HTTP
-    path: /login
-  startup:
-    type: HTTP
-    path: /login
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          probes:
+            liveness:
+              type: http
+              path: /login
+            readiness:
+              type: http
+              path: /login
+            startup:
+              type: tcp
+          envFrom:
+            - secretRef:
+                name: 'jenkins-secret'
 
 service:
   main:
     ports:
       main:
-        protocol: HTTP
+        protocol: http
         port: 10280
   agent:
     enabled: true
@@ -52,4 +57,5 @@ persistence:
     mountPath: /var/jenkins_home
 
 portal:
-  enabled: true
+  open:
+    enabled: true

charts/incubator/local-ai/ci/base-values.yaml

@@ -1 +0,0 @@
-imageSelector: image

charts/incubator/local-ai/ci/cublas-cuda11-ffmpeg-values.yaml

@@ -1 +0,0 @@
-imageSelector: cublasCuda11FfmpegImage

charts/incubator/local-ai/ci/cublas-cuda11-values.yaml

@@ -1 +0,0 @@
-imageSelector: cublasCuda11Image

charts/incubator/local-ai/ci/cublas-cuda12-ffmpeg-values.yaml

@@ -1 +0,0 @@
-imageSelector: cublasCuda12FfmpegImage

charts/incubator/local-ai/ci/cublas-cuda12-values.yaml

@@ -1 +0,0 @@
-imageSelector: cublasCuda12Image

charts/incubator/local-ai/ci/ffmpeg-values.yaml

@@ -1 +0,0 @@
-imageSelector: ffmpegImage

charts/incubator/notifiarr/Chart.yaml

@@ -1,9 +1,9 @@
 apiVersion: v2
-appVersion: "latest"
+appVersion: "0.6.0"
 dependencies:
   - name: common
     repository: https://library-charts.truecharts.org
-    version: 14.0.2
+    version: 14.0.6
 deprecated: false
 description: "This is the unified client for Notifiarr.com. The client enables content requests from Media Bot in your Discord Server and also provides reports for Plex usage and system health among many other features."
 home: https://truecharts.org/charts/incubator/notifiarr
@@ -23,7 +23,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/notifiarr
   - https://github.com/Notifiarr/notifiarr
 type: application
-version: 0.0.2
+version: 0.0.5
 annotations:
   truecharts.org/catagories: |
     - MediaApp-Other

charts/incubator/notifiarr/questions.yaml

@@ -10,58 +10,57 @@ questions:
 # Include{replicas1}
 # Include{podSpec}
 # Include{containerMain}
-                                - variable: notifiarr
-                                  group: App Configuration
-                                  label: Image Environment
-                                  schema:
-                                    additional_attrs: true
-                                    type: dict
-                                    attrs:
-                                      - variable: apikey
-                                        label: Notifiarr All API Key
-                                        description: Notifiarr All Integrations API key from https://notifiarr.com
-                                        schema:
-                                          type: string
-                                          default: ""
-                                          required: true
-                                      - variable: upstreams
-                                        label: Upstreams
-                                        description: Controls which IP is written to the web server log file (requestor or x-forwarded-for header). Also allows the x-webauth-user header for proxy authentication. Separate with spaces. The default kubernetes network is pre-filled.
-                                        schema:
-                                          type: list
-                                          default:
-                                            - 172.16.0.0/16
-                                          items:
-                                            - variable: upstreamEntry
-                                              label: Upstream
-                                              description: Upstream IP or CIDR
-                                              schema:
-                                                type: string
-                                                default: ""
-                                                required: true
-                                      - variable: credentials
-                                        label: Web UI Credentials
-                                        schema:
-                                          additional_attrs: true
-                                          type: dict
-                                          attrs:
-                                            - variable: username
-                                              label: Web UI Username
-                                              description: Default username is admin. Change it here.
-                                              schema:
-                                                type: string
-                                                default: ""
-                                                required: true
-                                            - variable: password
-                                              label: Web UI Password
-                                              description: Set a first time login password (minimum 9 characters) & change the password from the Web UI to encrypt it. If you don't set this you will need to check the logs on first start to find the generated password.
-                                              schema:
-                                                type: string
-                                                default: ""
-                                                required: true
-
 # Include{containerBasic}
 # Include{containerAdvanced}
+  - variable: notifiarr
+    group: App Configuration
+    label: Image Environment
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: apikey
+          label: Notifiarr All API Key
+          description: Notifiarr All Integrations API key from https://notifiarr.com
+          schema:
+            type: string
+            default: ""
+            required: true
+        - variable: upstreams
+          label: Upstreams
+          description: Controls which IP is written to the web server log file (requestor or x-forwarded-for header). Also allows the x-webauth-user header for proxy authentication. Separate with spaces. The default kubernetes network is pre-filled.
+          schema:
+            type: list
+            default:
+              - 172.16.0.0/16
+            items:
+              - variable: upstreamEntry
+                label: Upstream
+                description: Upstream IP or CIDR
+                schema:
+                  type: string
+                  default: ""
+                  required: true
+        - variable: credentials
+          label: Web UI Credentials
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: username
+                label: Web UI Username
+                description: Default username is admin. Change it here.
+                schema:
+                  type: string
+                  default: ""
+                  required: true
+              - variable: password
+                label: Web UI Password
+                description: Set a first time login password (minimum 9 characters) & change the password from the Web UI to encrypt it. If you don't set this you will need to check the logs on first start to find the generated password.
+                schema:
+                  type: string
+                  default: ""
+                  required: true
 # Include{containerConfig}
 # Include{podOptions}
 # Include{serviceRoot}

charts/incubator/notifiarr/values.yaml

@@ -1,7 +1,7 @@
 image:
   repository: tccr.io/truecharts/notifiarr
   pullPolicy: IfNotPresent
-  tag: latest@sha256:913c71f5e325dd9af53c9e96f3d5d7d1b2d058a41f8253489320a4c69fbb0a44
+  tag: v0.6.0@sha256:200107f99dd63811270da14db2228471381e7531c64dd9c6162afeabb08b7576
 
 notifiarr:
   apikey: "test"

charts/incubator/odoo/Chart.yaml

@@ -26,7 +26,7 @@ sources:
   - https://github.com/truecharts/charts/tree/master/charts/incubator/odoo
   - https://github.com/odoo/docker
 type: application
-version: 14.0.0
+version: 14.0.1
 annotations:
   truecharts.org/catagories: |
     - media

charts/incubator/odoo/questions.yaml

@@ -34,18 +34,6 @@ questions:
                   required: true
                   private: true
                   default: ""
-        - variable: db
-          label: DB Configuration
-          schema:
-            additional_attrs: true
-            type: dict
-            attrs:
-              - variable: filter
-                label: DB Filter
-                schema:
-                  type: string
-                  required: true
-                  default: "^mycompany.*$"
         - variable: smtp
           label: SMTP Configuration
           schema:
@@ -108,9 +96,9 @@ questions:
                               type: int
                               default: 8069
                               required: true
-        - variable: odoo
-          label: "Odoo Service"
-          description: "Odoo Services"
+        - variable: xmlrpcs
+          label: "XMLR PCS Service"
+          description: "XMLR PCS Service"
           schema:
             additional_attrs: true
             type: dict
@@ -130,6 +118,15 @@ questions:
                               type: int
                               default: 8071
                               required: true
+        - variable: longpolling
+          label: "Long Polling Service"
+          description: "Long Polling Service"
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{serviceSelectorLoadBalancer}
+# Include{serviceSelectorExtras}
                     - variable: longpolling
                       label: "Long Polling Service Port Configuration"
                       schema:
@@ -183,13 +180,13 @@ questions:
                 description: "The UserID of the user running the application"
                 schema:
                   type: int
-                  default: 0
+                  default: 568
               - variable: runAsGroup
                 label: "runAsGroup"
                 description: "The groupID this App of the user running the application"
                 schema:
                   type: int
-                  default: 0
+                  default: 568
 # Include{securityContextContainer}
 # Include{securityContextAdvanced}
 # Include{securityContextPod}

charts/incubator/odoo/templates/_configmap.tpl

@@ -3,56 +3,50 @@
 {{- $fullname := (include "tc.v1.common.lib.chart.names.fullname" $) -}}
 
 {{- $admin := .Values.odoo.admin -}}
-{{- $db := .Values.odoo.db -}}
 {{- $smtp := .Values.odoo.smtp -}}
 
 {{- $pgdb := .Values.cnpg.main.database -}}
 {{- $pguser := .Values.cnpg.main.user -}}
 {{- $pgpassword := .Values.cnpg.main.creds.password | trimAll "\"" -}}
-{{- $pghost := .Values.cnpg.main.creds.host | trimAll "\"" -}}
+{{- $pghost := .Values.cnpg.main.creds.host -}}
 
 odoo-config:
   enabled: true
   data:
     odoo.conf: |
-      [options]
-      addons_path = {{ .Values.persistence.addons.mountPath }}
-      data_dir = {{ .Values.persistence.odoo.mountPath }}
-      admin_passwd = {{ $admin.passwd }}
-      longpolling_port = {{ .Values.service.odoo.ports.longpolling.port }}
-      xmlrpc = True
-      xmlrpc_interface =
-      xmlrpc_port = {{ .Values.service.main.ports.main.port }}
-      xmlrpcs = True
-      xmlrpcs_interface =
-      xmlrpcs_port = {{ .Values.service.odoo.ports.xmlrpcs.port }}
-      db_host = {{ $pghost }}
-      db_port = 5432
-      db_user = {{ $pguser }}
-      db_password = {{ $pgpassword }}
-      dbfilter = {{ $db.dbfilter }}
-      csv_internal_sep = ,
-      db_maxconn = 64
-      debug_mode = False
-      limit_memory_hard = 2684354560
-      limit_memory_soft = 2147483648
-      limit_request = 8192
-      limit_time_cpu = 60
-      limit_time_real = 120
-      list_db = True
-      log_db = False
-      log_handler = [':INFO']
-      log_level = info
-      logfile = None
-      max_cron_threads = 2
-      osv_memory_age_limit = 1.0
-      osv_memory_count_limit = False
-      smtp_server = {{ $smtp.server }}
-      smtp_port = {{ $smtp.port }}
-      smtp_user = {{ $smtp.user }}
-      smtp_password = {{ $smtp.password }}
-      smtp_ssl = {{ $smtp.ssl }}
-      email_from = {{ $smtp.from }}
-      workers = 0
+     [options]
+       addons_path = {{ .Values.persistence.addons.mountPath }}
+       data_dir = {{ .Values.persistence.odoo.mountPath }}
+       admin_passwd = {{ $admin.passwd }}
+       longpolling_port = {{ .Values.service.longpolling.ports.longpolling.port }}
+       xmlrpc = True
+       xmlrpc_interface =
+       xmlrpc_port = {{ .Values.service.main.ports.main.port }}
+       xmlrpcs = True
+       xmlrpcs_interface =
+       xmlrpcs_port = {{ .Values.service.xmlrpcs.ports.xmlrpcs.port }}
+       csv_internal_sep = ,
+       db_maxconn = 64
+       debug_mode = False
+       limit_memory_hard = 2684354560
+       limit_memory_soft = 2147483648
+       limit_request = 8192
+       limit_time_cpu = 60
+       limit_time_real = 120
+       list_db = True
+       log_db = False
+       log_handler = [':INFO']
+       log_level = info
+       logfile = None
+       max_cron_threads = 2
+       osv_memory_age_limit = 1.0
+       osv_memory_count_limit = False
+       smtp_server = {{ $smtp.server }}
+       smtp_port = {{ $smtp.port }}
+       smtp_user = {{ $smtp.user }}
+       smtp_password = {{ $smtp.password }}
+       smtp_ssl = {{ $smtp.ssl }}
+       email_from = {{ $smtp.from }}
+       workers = 0
 
 {{- end -}}

charts/incubator/odoo/values.yaml

@@ -1,35 +1,29 @@
 image:
   repository: tccr.io/truecharts/odoo
   pullPolicy: IfNotPresent
-  tag: v16.0.0@sha256:c1936984eeb8f504f5ebe74cf972319d6cd619ecbdf09249179ecdee2feeecf3
-
-# test for root
-securityContext:
-  container:
-    runAsNonRoot: false
-    readOnlyRootFilesystem: false
-    runAsUser: 0
-    runAsGroup: 0
+  tag: v16.0.0@sha256:9a0e0d913dc6c4ed5904ae233dc2de7fa1a00f10eb5a66f21e1f695c62933a1d
 
 service:
   main:
     ports:
       main:
         port: 8069
-  odoo:
+  xmlrpcs:
     enabled: true
     ports:
       xmlrpcs:
         enabled: true
         port: 8071
+  longpolling:
+    enabled: true
+    ports:
       longpolling:
         enabled: true
         port: 8072
+
 odoo:
   admin:
     passwd: admin
-  db:
-    filter: ^mycompany.*$
   smtp:
     server: ""
     port: 587
@@ -38,6 +32,23 @@ odoo:
     ssl: "False"
     from: ""
 
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          env:
+            USER: "{{ .Values.cnpg.main.user }}"
+            PORT: 5432
+            PASSWORD:
+              secretKeyRef:
+                name: cnpg-main-user
+                key: password
+            HOST:
+              secretKeyRef:
+                name: cnpg-main-urls
+                key: host
+
 persistence:
   odoo:
     enabled: true
@@ -54,7 +65,6 @@ persistence:
         main:
           mountPath: /etc/odoo/odoo.conf
           subPath: odoo.conf
-          readOnly: true
 
 # Enabled postgres
 cnpg:

charts/incubator/plex-playlist-sync/Chart.yaml

@@ -0,0 +1,36 @@
+apiVersion: v2
+appVersion: "latest"
+dependencies:
+  - name: common
+    repository: https://library-charts.truecharts.org
+    version: 14.0.1
+deprecated: false
+description: Sync your Spotify and Deezer playlists to your Plex server.
+home: https://truecharts.org/charts/incubator/plex-playlist-sync
+icon: https://truecharts.org/img/hotlink-ok/chart-icons/plex-playlist-sync.png
+keywords:
+  - plex-playlist-sync
+  - Spotify
+  - Deezer
+  - Tools-Utilities
+  - MediaApp-Other
+  - MediaApp-Video
+  - MediaServer-Video
+kubeVersion: ">=1.16.0-0"
+maintainers:
+  - email: info@truecharts.org
+    name: TrueCharts
+    url: https://truecharts.org
+name: plex-playlist-sync
+sources:
+  - https://github.com/truecharts/charts/tree/master/charts/incubator/plex-playlist-sync
+  - https://github.com/rnagabhyrava/plex-playlist-sync
+type: application
+version: 0.0.1
+annotations:
+  truecharts.org/catagories: |
+    - Tools-Utilities
+    - MediaApp-Other
+    - MediaApp-Video
+    - MediaServer-Video
+  truecharts.org/SCALE-support: "true"

charts/incubator/plex-playlist-sync/docs/installation_notes.md

@@ -0,0 +1,26 @@
+# Installation Notes
+
+## Plex Required Parameters
+- Set the Plex Configuration's `Url` with the address of your Plex server, such as `http://IP:PORT`. If you're using TrueNAS Scale and your application's name is `plex`, then this value should work `http://plex.ix-plex.svc.cluster.local:32400`.
+
+- Set the Plex Configuration's `Token` with your Plex Token value. To get this, you'll need to log into Plex as the server owner and browse to am item in your library. Then select the "View as XML" hyperlink. This should open up a new tab showing XML data and the URL will end with `...Plex-Token=`. Your token value is after the `=`, so **only** copy that value.
+
+
+![xml_info_token.png](imgs/xml_info_token.png)
+
+## Spotify Required Parameters
+_Note: These configuration settings are only if you are using Spotify. If you're intending to use Spotify, then the Spotify Configuration settings are all required._
+
+Your Spotify Client Id and Client Secret can be obtained by becoming a [Spotify Developer](https://developer.spotify.com/dashboard/login).
+
+Your Spotify User Id - can be found on [Spotify's account page](https://www.spotify.com/us/account/overview/).
+
+## Deezer Required Parameters
+_Note: These configuration settings are only if you are using Deezer. If you're intending on using Deezer instead, either the `User Id` option or the `Playlist Id` option is required._
+### Option 1 - Sync all user playlists
+
+Your Deezer User Id can be obtained by logging in and clicking on your profile. The Id will be in the URL and is a numerical value. Ex: `/profile/#`
+
+### Option 2 - Sync specific playlists
+
+The Deezer Playlist Id can be obtained by navigating to the playlists that you want to sync. They Id will be in the URL and is a numerical value. Ex: `/playlist/#`

charts/incubator/plex-playlist-sync/questions.yaml

@@ -0,0 +1,180 @@
+# Include{groups}
+portals: {}
+questions:
+# Include{global}
+# Include{workload}
+# Include{workloadDeployment}
+
+# Include{replicas1}
+# Include{podSpec}
+# Include{containerMain}
+
+# Include{containerBasic}
+# Include{containerAdvanced}
+
+  - variable: pps
+    group: App Configuration
+    label: Plex Playlist Sync
+    schema:
+      additional_attrs: true
+      type: dict
+      attrs:
+        - variable: plex
+          label: Plex Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: url
+                label: Url
+                description: The default assumes that your Plex chart is named plex.
+                schema:
+                  type: string
+                  required: true
+                  default: "http://plex.ix-plex.svc.cluster.local:32400"
+              - variable: token
+                label: Token
+                description: Browse to a library item and click View as XML to get this token.
+                schema:
+                  type: string
+                  required: true
+                  private: true
+                  default: ""
+        - variable: spotify
+          label: Spotify Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: user_id
+                label: User Id
+                description: Also known as your Spotify username.
+                schema:
+                  type: string
+                  default: ""
+              - variable: client_id
+                label: Client Id
+                description: You need to create a developer account to get this.
+                schema:
+                  type: string
+                  private: true
+                  default: ""
+              - variable: client_secret
+                label: Client Secret
+                description: You need to create a developer account to get this.
+                schema:
+                  type: string
+                  private: true
+                  default: ""
+        - variable: deezer
+          label: Deezer Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: user_id
+                label: User Id
+                description: This is a numerical value that you can get from the profile page.
+                schema:
+                  type: string
+                  default: ""
+              - variable: playlist_id
+                label: Playlist Id
+                description: This is a list of numerical values that you can get from the playlist page.
+                schema:
+                  type: list
+                  default: []
+                  items:
+                    - variable: id
+                      label: Id
+                      schema:
+                        type: string
+                        required: true
+                        default: ""
+        - variable: other
+          label: Other Configuration
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+              - variable: write_missing_as_csv
+                label: Write Missing Tracks to CSV
+                description: Write missing tracks from each playlist to a CSV file.
+                schema:
+                  type: boolean
+                  default: false
+              - variable: append_service_suffix
+                label: Append Service Suffix
+                description: Appends the service name (Deezer/Spotify) to the playlist name.
+                schema:
+                  type: boolean
+                  default: true
+              - variable: add_playlist_poster
+                label: Include Playlist Poster
+                description: Include the poster for each playlist.
+                schema:
+                  type: boolean
+                  default: true
+              - variable: add_playlist_description
+                label: Include Playlist Description
+                description: Include the description for each playlist.
+                schema:
+                  type: boolean
+                  default: true
+              - variable: append_instead_of_sync
+                label: Append Tracks Instead of Sync
+                description: Sync all tracks or append tracks only to a playlist.
+                schema:
+                  type: boolean
+                  default: false
+              - variable: seconds_to_wait
+                label: Seconds to Wait
+                description: The amount of time to wait before running this script.
+                schema:
+                  type: int
+                  default: 84000
+
+# Include{podOptions}
+# Include{serviceExpertRoot}
+# Include{serviceExpert}
+# Include{serviceList}
+# Include{persistenceRoot}
+        - variable: data
+          label: "data Storage"
+          schema:
+            additional_attrs: true
+            type: dict
+            attrs:
+# Include{persistenceBasic}
+# Include{persistenceList}
+# Include{securityContextRoot}
+
+              - variable: runAsUser
+                label: "runAsUser"
+                description: "The UserID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
+              - variable: runAsGroup
+                label: "runAsGroup"
+                description: "The groupID of the user running the application"
+                schema:
+                  type: int
+                  default: 0
+# Include{securityContextContainer}
+# Include{securityContextAdvanced}
+# Include{securityContextPod}
+              - variable: fsGroup
+                label: "fsGroup"
+                description: "The group that should own ALL storage."
+                schema:
+                  type: int
+                  default: 568
+
+# Include{resources}
+# Include{advanced}
+# Include{addons}
+# Include{codeserver}
+# Include{netshoot}
+# Include{vpn}
+# Include{documentation}

charts/incubator/plex-playlist-sync/templates/NOTES.txt

@@ -0,0 +1 @@
+{{- include "tc.v1.common.lib.chart.notes" $ -}}

charts/incubator/plex-playlist-sync/templates/common.yaml

@@ -0,0 +1,2 @@
+{{/* Render the templates */}}
+{{ include "tc.v1.common.loader.all" . }}

charts/incubator/plex-playlist-sync/values.yaml

@@ -0,0 +1,74 @@
+image:
+  pullPolicy: IfNotPresent
+  repository: tccr.io/truecharts/plex-playlist-sync
+  tag: latest@sha256:82e3431659be3ac051715e1e63e79780cb0b8ff105bd6cc427f4e21cd4b2b58d
+
+securityContext:
+  container:
+    readOnlyRootFilesystem: false
+    runAsNonRoot: false
+    runAsGroup: 0
+    runAsUser: 0
+
+service:
+  main:
+    enabled: false
+    ports:
+      main:
+        enabled: false
+
+pps:
+  plex:
+    url: "http://localhost:32400"
+    token: "plextoken123"
+  spotify:
+    user_id: ""
+    client_id: ""
+    client_secret: ""
+  deezer:
+    user_id: ""
+    playlist_id: []
+  other:
+    write_missing_as_csv: false
+    append_service_suffix: true
+    add_playlist_poster: true
+    add_playlist_description: true
+    append_instead_of_sync: false
+    seconds_to_wait: 84000
+
+workload:
+  main:
+    podSpec:
+      containers:
+        main:
+          probes:
+            liveness:
+              enabled: false
+            readiness:
+              enabled: false
+            startup:
+              enabled: false
+          env:
+            PLEX_URL: "{{ .Values.pps.plex.url }}"
+            PLEX_TOKEN: "{{ .Values.pps.plex.token }}"
+            SPOTIFY_USER_ID: "{{ .Values.pps.spotify.user_id }}"
+            SPOTIFY_CLIENT_ID: "{{ .Values.pps.spotify.client_id }}"
+            SPOTIFY_CLIENT_SECRET: "{{ .Values.pps.spotify.client_secret }}"
+            DEEZER_USER_ID: "{{ .Values.pps.deezer.user_id }}"
+            DEEZER_PLAYLIST_ID: '{{ join " " .Values.pps.deezer.playlist_id }}'
+            WRITE_MISSING_AS_CSV: "{{ .Values.pps.other.write_missing_as_csv }}"
+            APPEND_SERVICE_SUFFIX: "{{ .Values.pps.other.append_service_suffix }}"
+            ADD_PLAYLIST_POSTER: "{{ .Values.pps.other.add_playlist_poster }}"
+            ADD_PLAYLIST_DESCRIPTION: "{{ .Values.pps.other.add_playlist_description }}"
+            APPEND_INSTEAD_OF_SYNC: "{{ .Values.pps.other.append_instead_of_sync }}"
+            SECONDS_TO_WAIT: "{{ .Values.pps.other.seconds_to_wait }}"
+
+persistence:
+  data:
+    enabled: true
+    mountPath: /data
+
+portal:
+  open:
+    enabled: false
+

charts/incubator/postgresql/Chart.yaml

@@ -6,7 +6,7 @@ dependencies:
     version: 14.0.1
 deprecated: false
 description: PostgresSQL
-home: https://truecharts.org/charts/stable/postgresql
+home: https://truecharts.org/charts/incubator/postgresql
 icon: https://truecharts.org/img/hotlink-ok/chart-icons/postgresql.png
 keywords:
   - postgres
@@ -20,7 +20,7 @@ maintainers:
     url: https://truecharts.org
 name: postgresql
 sources:
-  - https://github.com/truecharts/charts/tree/master/charts/stable/postgresql
+  - https://github.com/truecharts/charts/tree/master/charts/incubator/postgresql
   - https://www.postgresql.org/
 type: application
 version: 14.0.0

charts/incubator/postgresql/README.md

@@ -0,0 +1,27 @@
+# README
+
+## General Info
+
+TrueCharts can be installed as both *normal* Helm Charts or as Apps on TrueNAS SCALE.
+However only installations using the TrueNAS SCALE Apps system are supported.
+
+For more information about this App, please check the docs on the TrueCharts [website](https://truecharts.org/charts/incubator/)
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/truecharts/charts/issues/new/choose)**
+
+
+## Support
+
+- Please check our [quick-start guides for TrueNAS SCALE](https://truecharts.org/manual/SCALE/guides/scale-intro).
+- See the [Website](https://truecharts.org)
+- Check our [Discord](https://discord.gg/tVsPTHWTtr)
+- Open a [issue](https://github.com/truecharts/charts/issues/new/choose)
+
+---
+
+## Sponsor TrueCharts
+
+TrueCharts can only exist due to the incredible effort of our staff.
+Please consider making a [donation](https://truecharts.org/sponsor) or contributing back to the project any way you can!
+
+*All Rights Reserved - The TrueCharts Project*

charts/incubator/postgresql/templates/NOTES.txt

@@ -0,0 +1 @@
+{{- include "tc.v1.common.lib.chart.notes" $ -}}

charts/incubator/qbitrr/.helmignore

@@ -0,0 +1,30 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
+# OWNERS file for Kubernetes
+OWNERS
+# helm-docs templates
+*.gotmpl
+# docs folder
+/docs
+# icon
+icon.png