build(deps): bump caddy in /kubernetes/system/caddy

Bumps caddy from 2.11.2 to 2.11.3.

---
updated-dependencies:
- dependency-name: caddy
  dependency-version: 2.11.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/dependabot.yml

@@ -34,6 +34,7 @@ updates:
       - "/docker/production/alexscript"
       - "/docker/production/buildpath"
       - "/docker/production/semeryfr"
+      - "/docker/production/vhaudiquetfr"
       - "/docker/tools/excalidraw"
       - "/docker/tools/obsidian-livesync"
       - "/docker/tools/stirling-pdf"
@@ -51,7 +52,6 @@ updates:
       - "/kubernetes/personal/notesnook"
       - "/kubernetes/personal/photoprism"
       - "/kubernetes/production/umami"
-      - "/kubernetes/production/vhaudiquet-fr"
       - "/kubernetes/system/blocky"
       - "/kubernetes/system/caddy"
       - "/kubernetes/system/coredns"

.swarmcd/stacks.yaml

@@ -153,6 +153,11 @@ semeryfr:
   branch: main
   compose_file: docker/production/semeryfr/docker-compose.yml
 
+vhaudiquetfr:
+  repo: homeprod
+  branch: main
+  compose_file: docker/production/vhaudiquetfr/docker-compose.yml
+
 excalidraw:
   repo: homeprod
   branch: main

docker/home/n8n/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   n8n:
-    image: docker.n8n.io/n8nio/n8n:2.21.2
+    image: docker.n8n.io/n8nio/n8n:2.19.5
     environment:
       - TZ=Europe/Paris
       - N8N_SECURE_COOKIE=false

docker/infrastructure/mail/stalwart/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   stalwart:
-    image: stalwartlabs/stalwart:v0.16.5
+    image: stalwartlabs/stalwart:v0.16.4
     container_name: stalwart
     networks:
       - default

docker/personal/gramps/docker-compose.yml

@@ -1,7 +1,7 @@
 services:
   grampsweb:
     container_name: grampsweb
-    image: ghcr.io/gramps-project/grampsweb:26.5.1
+    image: ghcr.io/gramps-project/grampsweb:26.5.0
     restart: always
     networks:
       - default
@@ -31,7 +31,7 @@ services:
 
   grampsweb_celery:
     container_name: grampsweb_celery
-    image: ghcr.io/gramps-project/grampsweb:26.5.1
+    image: ghcr.io/gramps-project/grampsweb:26.5.0
     restart: always
     environment:
       - GRAMPSWEB_TREE="Gramps Web"  # will create a new tree if not exists

docker/personal/media/films-series/jackett/docker-compose.yml

@@ -1,7 +1,7 @@
 services:
   jackett:
     container_name: jackett
-    image: ghcr.io/hotio/jackett:release-v0.24.1846
+    image: ghcr.io/hotio/jackett:release-v0.24.1822
     ports:
       - "9117"
     networks:

docker/personal/media/films-series/jellyfin/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   jellyfin:
-    image: jellyfin/jellyfin:2026051106
+    image: jellyfin/jellyfin:2026050514
     container_name: jellyfin
     networks:
       - default

docker/personal/syncthing/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   syncthing-valentin:
-    image: syncthing/syncthing:2.1
+    image: syncthing/syncthing:2.0
     container_name: syncthing-valentin
     hostname: syncthing-valentin
     environment:

docker/production/buildpath/docker-compose.yml

@@ -10,7 +10,7 @@ services:
     env_file: .env
 
   match_collector:
-    image: git.vhaudiquet.fr/vhaudiquet/lolstats-match_collector:0224b7812c8631bde3e9513adace64341152fc20
+    image: git.vhaudiquet.fr/vhaudiquet/lolstats-match_collector:e76cb3ea8ee0ce83295d470aa527e484924e773f
     build: ./match_collector
     volumes:
       - bpcdragon_cache:/cdragon
@@ -23,7 +23,7 @@ services:
     env_file: .env
 
   frontend:
-    image: git.vhaudiquet.fr/vhaudiquet/lolstats-frontend:0224b7812c8631bde3e9513adace64341152fc20
+    image: git.vhaudiquet.fr/vhaudiquet/lolstats-frontend:e76cb3ea8ee0ce83295d470aa527e484924e773f
     build: ./frontend
     restart: always
     volumes:

docker/production/vhaudiquetfr/docker-compose.yml

@@ -0,0 +1,36 @@
+services:
+  vhaudiquetfr:
+    container_name: vhaudiquetfr
+    image: git.vhaudiquet.fr/vhaudiquet/vhaudiquet.fr:259ad574d15c1b50e0766602b6b0b5ee39afd657
+    networks:
+      - default
+      - proxy
+    ports:
+      - 80
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.vhaudiquetfr.rule=Host(`vhaudiquet.fr`)"
+    environment:
+      - NGINX_HOST=vhaudiquet.fr
+      - NGINX_PORT=80
+    volumes:
+      - files:/usr/share/nginx/html/files
+      - public:/usr/share/nginx/html/public
+
+networks:
+  proxy:
+    external: true
+    name: proxy
+
+volumes:
+  files:
+    driver: local
+    driver_opts:
+      type: 'none'
+      o: 'bind'
+      device: '/app/vhaudiquetfr/files'
+  public:
+    driver_opts:
+      type: 'nfs'
+      o: 'addr=truenas.lan'
+      device: ':/mnt/main_storage/public'

generate-dependabot.sh

@@ -52,7 +52,6 @@ find kubernetes -name 'release.yaml' -print0 \
 if ! [ -f .github/dependabot.yml ] || ! cmp -s "$tmpfile" .github/dependabot.yml; then
   mv "$tmpfile" .github/dependabot.yml
   echo "Updated .github/dependabot.yml!"
-  git add ".github/dependabot.yml"
 else
   echo "No changes to .github/dependabot.yml."
 fi

generate-docker-swarmcd.sh

@@ -33,7 +33,6 @@ find docker -name 'docker-compose.yml' -print0 \
 if ! [ -f .swarmcd/stacks.yaml ] || ! cmp -s "$tmpfile" .swarmcd/stacks.yaml; then
   mv "$tmpfile" .swarmcd/stacks.yaml
   echo "Updated .swarmcd/stacks.yaml!"
-  git add ".swarmcd/stacks.yaml"
 else
   echo "No changes to .swarmcd/stacks.yaml."
 fi

kubernetes/production/vhaudiquet-fr/kustomization.yaml

@@ -1,13 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: vhaudiquet-fr
-resources:
-  - namespace.yaml
-  - repository.yaml
-  - release.yaml
-secretGenerator:
-  - name: vhaudiquet-fr-values
-    files:
-      - values.yaml=values.yaml
-configurations:
-  - kustomizeconfig.yaml

kubernetes/production/vhaudiquet-fr/kustomizeconfig.yaml

@@ -1,6 +0,0 @@
-nameReference:
-- kind: Secret
-  version: v1
-  fieldSpecs:
-  - path: spec/valuesFrom/name
-    kind: HelmRelease

kubernetes/production/vhaudiquet-fr/namespace.yaml

@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: vhaudiquet-fr

kubernetes/production/vhaudiquet-fr/release.yaml

@@ -1,19 +0,0 @@
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: vhaudiquet-fr
-  namespace: vhaudiquet-fr
-spec:
-  interval: 1m
-  chart:
-    spec:
-      sourceRef:
-        kind: HelmRepository
-        name: vhaudiquet-fr
-        namespace: vhaudiquet-fr
-      chart: vhaudiquet-fr
-      version: '>=0.1.0-0'
-      interval: 1m
-  valuesFrom:
-    - kind: Secret
-      name: vhaudiquet-fr-values

kubernetes/production/vhaudiquet-fr/repository.yaml

@@ -1,8 +0,0 @@
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: vhaudiquet-fr
-  namespace: vhaudiquet-fr
-spec:
-  interval: 1m
-  url: https://git.vhaudiquet.fr/api/packages/vhaudiquet/helm

kubernetes/production/vhaudiquet-fr/values.yaml

@@ -1,67 +0,0 @@
-# Number of replicas
-replicaCount: 1
-# Container image configuration
-image:
-    repository: git.vhaudiquet.fr/vhaudiquet/vhaudiquet.fr
-    pullPolicy: IfNotPresent
-    # The image tag defaults to the chart appVersion (which is set to git SHA by CI).
-    # Override this only if you need a specific version.
-    tag: ""
-# Image pull secrets for private registries
-imagePullSecrets: []
-# Ingress configuration
-ingress:
-    enabled: true
-    className: ""
-    annotations: {}
-    # kubernetes.io/ingress.class: nginx
-    # kubernetes.io/tls-acme: "true"
-    hosts:
-        - host: vhaudiquet.fr
-          paths:
-            - path: /
-              pathType: Prefix
-    tls: []
-# Environment variables
-env:
-    NGINX_HOST: vhaudiquet.fr
-    NGINX_PORT: "80"
-# NFS Storage configuration for public files
-nfs:
-    enabled: true
-    # NFS server IP address
-    server: truenas.lan
-    # NFS export path
-    path: /mnt/main_storage/public
-    # Mount path inside the container
-    mountPath: /usr/share/nginx/html/public
-    # Storage size for PVC
-    storageSize: 10Gi
-    # Storage class name (leave empty for default)
-    storageClassName: ""
-sops:
-    lastmodified: "2026-05-14T09:33:46Z"
-    mac: ENC[AES256_GCM,data:R5ular4bAyV0cFPGUGYg4NWCGI64rWTax6ObBnCadORwSTh5/VQN3bsDDPFC3dep/7nKzY71d2X4qAcVU3RkWa9eMP+e9dhaGV9/8gvY/qDXZiNEuAXsmpaSATgUo6mUwqrwl5tn4ono4ID8gr7FRVpneTbYX/HpiWDbBa9l1Xk=,iv:wQ552gswkX5aOy/Cht1zY56camnb8EhEwy711osyf4c=,tag:t+U/1wRD7/z39KY9zjNcMQ==,type:str]
-    pgp:
-        - created_at: "2026-05-14T09:33:46Z"
-          enc: |-
-            -----BEGIN PGP MESSAGE-----
-
-            hQIMA7uy4qQr71wiAQ/+JAzu9u2Dgn+lA58pIhRbM1064juEOvebtBK0FdJCi7AG
-            /Up2oooBmLMxybk16q0800kZHgOAcqTWkRcDq3QhC7nK+xcs03plTLLAlqfnh2x0
-            XyqQVk4du9caRdgvgN96tG+oWUJcuUJ/uFunXAzRvPnNysS5sGXVKJmbVVKfTjqk
-            UPyA5sBbCIxW10kPZJjprR1HaRl2dkgz7jZI/q2RXhFjCOhthMErBFr4f6xD3LnN
-            H5XVtixNcVmIinsGUIgvPW+qknjrf17ammgEtOqjtuu4PUevQFt4zkVyjU0Y/ASj
-            HAyYgSNIAXanb3u9ulL6CCg/CXJSofTrexw5RPM9eTQQ7S1KqHm/Ns6jjl/jXtEW
-            cIQZ5bQJPTJu7W9gxGpgaLmWwGfoDWvmT2rIFYC9tf+61F4EbRvY6KepKET9NYTJ
-            EnyDoxRsfVgxwQjyqpIpmNewWpgWwcLbD8INoJUVx/Yr284F9pBCgKqKRmeNH/Sy
-            kEt3QD1ElohuwTx7XLkYf6LuDFy8kA5wFUPKUgxmoFsGZhMhmi8ysUkUxtYPPMD8
-            YLVOK8UX3sYUDdY7tQjlgz6nhMqGL7ekqxyA5PSCGlhg5siKIhltz1CzadNOrsqF
-            jHkiUCrDNu1ToRPllOw4WMwSzII/sf2oP3FJyE+/Rsl49rVjELLfC8eWPhG0yhXS
-            XgGHbmvrm1QPl70dF+896QE/XtSydiqLUynCeIAvh61//ipS9lSZXpdDKEP5Q7ZD
-            /lTbPRH7Y7EZUgarjBtc2wYg3iaBkELtS5lnQeJawHQ8/M3TxdWmgEeBim/qr+A=
-            =K+50
-            -----END PGP MESSAGE-----
-          fp: DC6910268E657FF70BA7EC289974494E76938DDC
-    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
-    version: 3.10.2

kubernetes/system/blocky/values.yaml

@@ -1,7 +1,7 @@
 # Default values for blocky (k8s-home-lab chart)
 image:
     repository: ghcr.io/0xerr0r/blocky
-    tag: 0.30.0
+    tag: v0.24
     pullPolicy: IfNotPresent
 controller:
     replicas: 2
@@ -90,4 +90,4 @@ sops:
             -----END PGP MESSAGE-----
           fp: DC6910268E657FF70BA7EC289974494E76938DDC
     encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
-    version: 3.10.2
+    version: 3.10.2

kubernetes/system/caddy/caddyfile.yaml

@@ -17,7 +17,7 @@ data:
   Caddyfile: |
     vhaudiquet.fr {
       tls /etc/caddy/certs/vhaudiquet-fr.crt /etc/caddy/certs/vhaudiquet-fr.key
-      reverse_proxy 10.1.2.171:80
+      reverse_proxy 10.1.2.212:80
     }
 
     *.vhaudiquet.fr {

kubernetes/system/caddy/values.yaml

@@ -10,7 +10,7 @@ image:
     repository: caddy
     pullPolicy: IfNotPresent
     tagSuffix: ""
-    tag: 2.11.2
+    tag: 2.11.3
 service:
     type: LoadBalancer
     externalTrafficPolicy: Local
@@ -96,4 +96,4 @@ sops:
             -----END PGP MESSAGE-----
           fp: DC6910268E657FF70BA7EC289974494E76938DDC
     encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
-    version: 3.10.2
+    version: 3.10.2

kubernetes/system/coredns/zone-configmap.yaml

@@ -65,4 +65,3 @@ data:
     webmail         IN  A   10.1.2.212
     wizarr          IN  A   10.1.2.212
     zigbee2mqtt     IN  A   10.1.2.212
-    nodered         IN  A   10.1.2.212