buildpath: add memory limits for mongo, update

gitea: remove stale "redis" reference, update to "valkey"
gitea: add resource limits
2026-06-27 11:42:38 +00:00 · 2026-06-27 12:39:22 +02:00 · 2026-06-27 12:20:07 +02:00 · 2026-06-27 12:09:03 +02:00 · 2026-06-24 09:57:34 +02:00 · 2026-06-24 09:57:28 +02:00
11 changed files with 72 additions and 36 deletions
@@ -1,6 +1,6 @@
 services:
  esphome:
-    image: ghcr.io/esphome/esphome:2026.5.3
+    image: ghcr.io/esphome/esphome:2026.6.2
    ports:
      - "6052"
    networks:
@@ -1,6 +1,6 @@
 services:
  stalwart:
-    image: stalwartlabs/stalwart:v0.16.9
+    image: stalwartlabs/stalwart:v0.16.10
    container_name: stalwart
    networks:
      - default
@@ -1,7 +1,7 @@
 services:
  grampsweb:
    container_name: grampsweb
-    image: ghcr.io/gramps-project/grampsweb:26.6.1
+    image: ghcr.io/gramps-project/grampsweb:26.6.2
    restart: always
    networks:
      - default
@@ -31,7 +31,7 @@ services:

  grampsweb_celery:
    container_name: grampsweb_celery
-    image: ghcr.io/gramps-project/grampsweb:26.6.1
+    image: ghcr.io/gramps-project/grampsweb:26.6.2
    restart: always
    environment:
      - GRAMPSWEB_TREE="Gramps Web"  # will create a new tree if not exists
@@ -1,7 +1,7 @@
 services:
  jackett:
    container_name: jackett
-    image: ghcr.io/hotio/jackett:release-v0.24.2075
+    image: ghcr.io/hotio/jackett:release-v0.24.2110
    ports:
      - "9117"
    networks:
@@ -1,6 +1,6 @@
 services:
  jellyfin:
-    image: jellyfin/jellyfin:2026061506
+    image: jellyfin/jellyfin:2026062206
    container_name: jellyfin
    networks:
      - default
@@ -1,7 +1,7 @@
 services:
  radarr:
    container_name: radarr
-    image: ghcr.io/hotio/radarr:release-6.1.1.10360
+    image: ghcr.io/hotio/radarr:release-6.2.1.10461
    ports:
      - "7878"
    networks:
@@ -1,6 +1,6 @@
 services:
  radicale:
-    image: tomsquest/docker-radicale:3.7.3.0
+    image: tomsquest/docker-radicale:3.7.5.0
    container_name: radicale
    ports:
      - 5232
@@ -9,7 +9,7 @@ services:

  web_recipes:
    restart: always
-    image: vabene1111/recipes:2.6.9
+    image: vabene1111/recipes:2.6.11
    networks:
      - default
      - proxy
@@ -4,13 +4,20 @@ services:
    image: mongo:8.2.11
    restart: always
    user: root:root
+    command: mongod --wiredTigerCacheSizeGB 2
+    deploy:
+      resources:
+        limits:
+          memory: 6G
+        reservations:
+          memory: 3G
    volumes:
      - bpmongo_data:/data/db:Z
      - bpmongo_config:/data/configdb:Z
    env_file: .env

  match_collector:
-    image: git.vhaudiquet.fr/vhaudiquet/lolstats-match_collector:f2827f85eb71942bbe905b5d83fefaddc3df8e7d
+    image: git.vhaudiquet.fr/vhaudiquet/lolstats-match_collector:d878af6d1a5cb633175515259e27a12c76c4609b
    build: ./match_collector
    volumes:
      - bpcdragon_cache:/cdragon
@@ -23,7 +30,7 @@ services:
    env_file: .env

  frontend:
-    image: git.vhaudiquet.fr/vhaudiquet/lolstats-frontend:f2827f85eb71942bbe905b5d83fefaddc3df8e7d
+    image: git.vhaudiquet.fr/vhaudiquet/lolstats-frontend:d878af6d1a5cb633175515259e27a12c76c4609b
    build: ./frontend
    restart: always
    volumes:
@@ -10,20 +10,39 @@ ingress:
 # Disable HA, we are on a 1-node cluster
 redis-cluster:
    enabled: false
-redis:
+# Valkey cluster is the new default in chart 12.x - must be explicitly disabled
+valkey-cluster:
+    enabled: false
+# Use standalone Valkey (replaces 'redis' in chart 12.x)
+valkey:
    enabled: true
+    master:
+        resources:
+            requests:
+                cpu: 100m
+                memory: 128Mi
+            limits:
+                cpu: 500m
+                memory: 256Mi
 postgresql:
    enabled: true
    global:
        postgresql:
            auth:
-                postgressPassword: ENC[AES256_GCM,data:iS1hZgegYcjUYA==,iv:sQopZNgQvktuVPTcSHGIXe8Vcx0QRrkOBmvCU+lXeYo=,tag:EzQXgSj6Mw8Sj342P6qoKQ==,type:str]
-                password: ENC[AES256_GCM,data:D9ajgAcbx6XJwQ==,iv:JXipoz3yEj85jvyfgTkt8UmACO1R94vrpTCUdQPhS/s=,tag:nJrhXFdtdlrE7CrgrsFHUQ==,type:str]
+                postgressPassword: ENC[AES256_GCM,data:5SoftEfh4w8hmA==,iv:QbbOmVM3Jp3gxAxL1OvnB6WKFX+OTHFENz1roMnPqyc=,tag:Gtn7H7d3O7Hweg5q6P6xUg==,type:str]
+                password: ENC[AES256_GCM,data:0BMgFdvPvhB9oQ==,iv:Z0mkQBfhpc7y1nSLY6MOucxwuKZ8TfOk6NlQE9RwVQw=,tag:yGDAOH6TCJDCfhxNlC/eCg==,type:str]
                database: gitea
-                username: ENC[AES256_GCM,data:ynRejXA=,iv:XxPBPLUywl4rDKo6RMJT1rOzAeK9lkUsYT5DlL+vqyY=,tag:lJFJGebHtj7nC+PFL1f6jw==,type:str]
+                username: ENC[AES256_GCM,data:F7+91aE=,iv:tEGgJ6GoXVkNoD6D4ZnyClrOQLGlqzFIUqqwDrVjd9U=,tag:H1+f/EKf/KptooRf8g0qcQ==,type:str]
    volumePermissions:
        enabled: true
    primary:
+        resources:
+            requests:
+                cpu: 250m
+                memory: 256Mi
+            limits:
+                cpu: 1000m
+                memory: 1Gi
        livenessProbe:
            enabled: true
            initialDelaySeconds: 30
@@ -56,8 +75,8 @@ gitea:
    oauth:
        - name: Authentik
          provider: openidConnect
-          key: ENC[AES256_GCM,data:aU+rNnGTT4pji75ZJtBDmAkE0bX1alWTzUG0+DywCjQ66nSCqCa8DQ==,iv:DUxx8EFFBgnIivyf9CPpFx3sDeiu2NkIFDcoj6lVDeo=,tag:Zm6rEsXaCBuFmChgzdb2zA==,type:str]
-          secret: ENC[AES256_GCM,data:mkh0p931YVQ/kqpHdeZHEndQpxNYk+t4LqTkZFLyEFVOuy5ZdxyT/PbhiW4Uw2L9XGO6JyAaJaO89K77HdEjpLU9TntkuU4ETBW3V3vzM+42EysMqmeud8hQSUdtGa4UsRd3dDb354CM7S7i7Gr22CT5/a8ujO9HIXDTuf+UXkU=,iv:QnPOyVft4vvtaOrrhoXQXXXbH1DbdSA0mAu2IextLxs=,tag:0dxGssjnv4DoXylPZsvYrw==,type:str]
+          key: ENC[AES256_GCM,data:oq+UsuiNEGWphxXbwtbBs3d27bB2cVPoR617TWhcPOk67D7XWUPkmg==,iv:hODOA45FFex/b5ghHScnDoc5osu1d8bzD969oFVH3wE=,tag:67TMl55I6zgJWNGMqco6fg==,type:str]
+          secret: ENC[AES256_GCM,data:o9BZSzy61ouycNgtgRg/Jn8Wz+hLBBqgX46iHbaYtPbUVPVFc9tpdCsTdHCpfSGfiS1B8kWcoSzIDIAIIofRSCS/QqEQeuTwsyakkXhgn/LtLn+TH7bdLLS8qqusy5MZ9U18IJ/UBPGZ5+16Y/glbhpfHu9NNv0AI07nPciTq1w=,iv:7dn7eW2oEK/EU4xIETwVSekZUmktrs7U9KTJC486nHs=,tag:Otl2KuySu9bI/cZfCyjiKA==,type:str]
          autoDiscoverUrl: https://authentik.vhaudiquet.fr/application/o/gitea/.well-known/openid-configuration
    config:
        APP_NAME: Gitea
@@ -83,28 +102,38 @@ gitea:
        indexer:
            ISSUE_INDEXER_TYPE: bleve
            REPO_INDEXER_ENABLED: true
+# Resource limits for Gitea container
+resources:
+    requests:
+        cpu: 250m
+        memory: 512Mi
+    limits:
+        cpu: 1000m
+        memory: 1Gi
+# Increase replica count is not useful for 1-node cluster
+replicaCount: 1
 sops:
-    lastmodified: "2026-06-05T20:21:53Z"
-    mac: ENC[AES256_GCM,data:CySJzul7ciMGGQqt33RUG7sVp0xOt1ylK/uV0hibYDYk/s8JudcAO5bEDRfkeEaQuiURALAgCpg0ooA4wFlhklcfNYP5g2JqEtcwfR1e7DUW3KHmUTA3ViaLo3M7EtP9ALvZlE/L6cPqolIae4tjawIXnUSlZQ3d7O4m50VFHC0=,iv:DxvxcAE1N/J14S+j9N6YkF0885hi1CZoFB6dk1IqNxM=,tag:tbqHPJocfGlRJFDIuoW8VQ==,type:str]
+    lastmodified: "2026-06-27T10:20:08Z"
+    mac: ENC[AES256_GCM,data:VZY4oK2PCMBJd4VozL5qS7jlZtOu1JNsOn7aqJgPZ8uQR7kG939By7oVELMH9us0Sb8AZIYmzx7nLwnlp6IUNnacOffhKNl4stTFrb5Vry/5zem0CNp08eEDEt9VoxNudfQYC2axuGSwbAIahMzZsOYVRqOGgF1gEG17+hgd7ww=,iv:MiHKGUfzaSAppXLLxJSQD5loGkToFLzVQetWoRHq074=,tag:FduCPbHmy6A0mYdCrnRxDw==,type:str]
    pgp:
-        - created_at: "2026-06-05T20:21:52Z"
+        - created_at: "2026-06-27T10:20:08Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

-            hQIMA7uy4qQr71wiAQ//VC/fnusp5oupWvPbCJCRl46OfetfXIsY/J8JP3Npp2XB
-            Yz2u3gxwPLDZxLnBsR/jafym1/1wi42SV3eka16j8dKjm4cICA27ycAmU4zSC2/O
-            Os3s5wo4e7ajNHnRZ+SyXzBPeg6LEbv9O/mx2tiQZBHIs5bhQ1ZxQ7lTwiKYP8Es
-            kFf8oVO5rEEpMAd0RpiSlzsTWVWuOEfw0uQXjQOP+ZFAqcf9lPnQp273MbxUe0jL
-            e58OLp3wO+LWRlRnixrx9vLuUsFou+JcSfKoTFbcBXzDs0SSUiAOwz5nELNtlENT
-            dHGzaplWMnHFWPd3Ef7AUGwUlb23mxJNv/yuM6CNgkTec6qYdr3Arc84kGT9qdz3
-            pktw94Wiw3uPLpiGVkFMdBynzVUBbbiWPGByVF0NBRnp8+NABsiekAjFrV2I1wdr
-            rGmNtTS66jf2yEBMP5w64BbVH8zQ/FA4wSEQxFGm02Cp0dv/HSy07aPDUBWZZzr/
-            b9j6EUBZ7DKDLDY4uC05GJqeZFWf3M9disXnUbHQifMNIaRveoKPvBOg58ZpyUrA
-            rffDkBJmy5Cvwll3+8uomsYrU9sWVCs1dHOG3xfbHNmh4XB0J3G59S1+PRBgsQi9
-            zHTDuh9tF+ehCdMQjje+Cq9f6Aajv/S9HDaKxLfVkAVgdzP/Tu5ARZPIoYxyhR3S
-            XgGfZASrRdk9XjmjrBRt5wBl0MjVr9vXEVxNqEGcpcDM5Q9MznRRhGKtAQ4BcC84
-            bajKkGp9+6vas0tKR+Mp2wq4T+GMqLQVa3KedBuwXVdk3gE3jxhzd7rdT8chZbQ=
-            =kMPK
+            hQIMA7uy4qQr71wiAQ//VDYGwZupOfefdEtJkD9SPOW3tHcOy2XR6ULhVQjXTGGh
+            APuONtgUZKFCViUqYZB7l6fazM8U/fv3cHsIpZfALFGE9wSZ+4So6D5dmBj13egh
+            yznV55xjinoaKPzaYYZoVmlt1ZO22SxmC0vld3yfAs89KD1Aow5wNZGTBELzyAWF
+            gMYGMkCsLlH3gqBaJTV1m5LKHHQAtoyzvJbKcpiynNRySfN/ogNX67GmgEMH9+u8
+            UexPwUHL6skIzHLmugYcrs4FAABot4WzoJsR794wOq/DEqHBE4SfQg48y/DROu2O
+            mgo6KqiXXe8qPGCIvjLiudb7MdSLpoLqgZ0vpExzdS/wMXAXczodrRRJmzEQyeDE
+            j08pquhfUzQ1SA/9VRQkgl4r0dj0CTuc+EhvHD4M9nj3JIjvuJ0AdyKye5S8rdNM
+            rm9eyX8V+o6X811qUM8bobKEi36tdnSMiB1yVHTtdW7hKctQwRMNQ8A9QEtOxS2F
+            +9Owub4LXZwBejSLgh9jaKEnilJQKVYN5Aw2lNAmZZZKtJ+iGHHkq9H6k+k5oEoG
+            xkQ/IYIEGLhfjH0PDZ9m2G3Ren3EkEkNjYvhwENhuUcyuW5Abl62v9FMY8c9NYyK
+            +uf5VS1ceHOBcelQcdSx9Kuox5UuyUtbwUcv+HbTmymZtmYdw+dnOTtRHR5CNY7S
+            XgEvPWAEagJpsmqC2n7Vc9d7b7TVp+SLSiL/w0v9JD6ko54Rwj0x21Odx3FLe7P6
+            obKU6XNNX9PPThJw2W0E295i2+DmOTH0AFio3rsg5wM3JFUokY/t8590sWnFR8g=
+            =Gypa
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
@@ -1,7 +1,7 @@
 # Default values for blocky (k8s-home-lab chart)
 image:
    repository: ghcr.io/0xerr0r/blocky
-    tag: 0.26
+    tag: v0.24
    pullPolicy: IfNotPresent
 controller:
    replicas: 2
@@ -90,4 +90,4 @@ sops:
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
-    version: 3.10.2
+    version: 3.10.2
Author	SHA1	Message	Date
vhaudiquet	f8f7ae6047	buildpath: add memory limits for mongo, update	2026-06-27 12:39:22 +02:00
vhaudiquet	102d1a1a68	gitea: remove stale "redis" reference, update to "valkey"	2026-06-27 12:20:07 +02:00
vhaudiquet	2eb4568682	gitea: add resource limits	2026-06-27 12:09:03 +02:00
dependabot[bot]	09447ecc8f	build(deps): bump vabene1111/recipes in /docker/personal/tandoor Bumps vabene1111/recipes from 2.6.9 to 2.6.11. --- updated-dependencies: - dependency-name: vabene1111/recipes dependency-version: 2.6.11 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-24 09:57:34 +02:00
dependabot[bot]	8086bf3da0	build(deps): bump tomsquest/docker-radicale in /docker/personal/radicale Bumps tomsquest/docker-radicale from 3.7.3.0 to 3.7.5.0. --- updated-dependencies: - dependency-name: tomsquest/docker-radicale dependency-version: 3.7.5.0 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-24 09:57:28 +02:00
dependabot[bot]	c1e7c4cdaa	build(deps): bump jellyfin/jellyfin Bumps jellyfin/jellyfin from 2026061506 to 2026062206. --- updated-dependencies: - dependency-name: jellyfin/jellyfin dependency-version: '2026062206' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-24 09:57:18 +02:00
dependabot[bot]	1fe2d761a2	build(deps): bump hotio/jackett Bumps [hotio/jackett](https://github.com/hotio/jackett) from release-v0.24.2075 to release-v0.24.2110. - [Commits](https://github.com/hotio/jackett/commits) --- updated-dependencies: - dependency-name: hotio/jackett dependency-version: release-v0.24.2110 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-24 09:57:08 +02:00
dependabot[bot]	06b7acf84c	build(deps): bump stalwartlabs/stalwart Bumps stalwartlabs/stalwart from v0.16.9 to v0.16.10. --- updated-dependencies: - dependency-name: stalwartlabs/stalwart dependency-version: v0.16.10 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-24 09:56:58 +02:00
dependabot[bot]	b346174788	build(deps): bump gramps-project/grampsweb in /docker/personal/gramps Bumps [gramps-project/grampsweb](https://github.com/gramps-project/gramps-web) from 26.6.1 to 26.6.2. - [Release notes](https://github.com/gramps-project/gramps-web/releases) - [Commits](https://github.com/gramps-project/gramps-web/compare/v26.6.1...v26.6.2) --- updated-dependencies: - dependency-name: gramps-project/grampsweb dependency-version: 26.6.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-24 09:56:49 +02:00
dependabot[bot]	e2b436ee09	build(deps): bump esphome/esphome in /docker/home/esphome Bumps [esphome/esphome](https://github.com/esphome/esphome) from 2026.5.3 to 2026.6.2. - [Release notes](https://github.com/esphome/esphome/releases) - [Commits](https://github.com/esphome/esphome/compare/2026.5.3...2026.6.2) --- updated-dependencies: - dependency-name: esphome/esphome dependency-version: 2026.6.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-24 09:56:41 +02:00
dependabot[bot]	ac9dd882b9	build(deps): bump hotio/radarr Bumps [hotio/radarr](https://github.com/hotio/radarr) from release-6.1.1.10360 to release-6.2.1.10461. - [Commits](https://github.com/hotio/radarr/commits) --- updated-dependencies: - dependency-name: hotio/radarr dependency-version: release-6.2.1.10461 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-24 09:56:34 +02:00