Update rancher/mirrored-library-traefik Docker tag to v3

manifests/airtrail/airtrail.yaml

@@ -53,7 +53,7 @@ spec:
         fsGroup: 1000
       containers:
       - name: airtrail
-        image: johly/airtrail:v3.13.0
+        image: johly/airtrail:v3.12.0
         imagePullPolicy: IfNotPresent
         envFrom:
         - configMapRef:

manifests/auth-proxy/internal-services.yaml

@@ -83,3 +83,37 @@ spec:
     app: internal-proxy
   type: ClusterIP
 ---
+apiVersion: v1
+kind: Service
+metadata:
+  name: hermes
+  namespace: auth-proxy
+  labels:
+    app: internal-proxy
+spec:
+  ports:
+  - name: http
+    port: 80
+    protocol: TCP
+    targetPort: 8080
+  selector:
+    app: internal-proxy
+  type: ClusterIP
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: ollama
+  namespace: auth-proxy
+  labels:
+    app: internal-proxy
+spec:
+  ports:
+  - name: http
+    port: 80
+    protocol: TCP
+    targetPort: 8080
+  selector:
+    app: internal-proxy
+  type: ClusterIP
+---

manifests/auth-proxy/non-auth-ingress.yaml

@@ -18,7 +18,7 @@ spec:
     - ombi.cluster.fun
     - bsky-feeds.cluster.fun
     - ai.cluster.fun
-    - hermes-hooks.cluster.fun
+    - penpot.cluster.fun
     secretName: non-auth-proxy-ingress
   rules:
   - host: hello-world.cluster.fun
@@ -61,7 +61,7 @@ spec:
             name: tailscale-proxy
             port:
               name: non-auth
-  - host: hermes-hooks.cluster.fun
+  - host: penpot.cluster.fun
     http:
       paths:
       - path: /

manifests/auth-proxy/proxy.yaml

@@ -13,7 +13,11 @@ data:
       "loki.auth-proxy.svc": "loki-write.cluster.local",
       "loki.auth-proxy.svc:80": "loki-write.cluster.local",
       "loki-distributed.auth-proxy.svc": "loki-loki.cluster.local",
-      "loki-distributed.auth-proxy.svc:80": "loki-loki.cluster.local"
+      "loki-distributed.auth-proxy.svc:80": "loki-loki.cluster.local",
+      "hermes.auth-proxy.svc": "hermes.cluster.local",
+      "hermes.auth-proxy.svc:80": "hermes.cluster.local",
+      "ollama.auth-proxy.svc": "ollama.cluster.local",
+      "ollama.auth-proxy.svc:11434": "ollama.cluster.local"
     }
 ---
 apiVersion: apps/v1
@@ -68,7 +72,7 @@ spec:
           mountPath: /config/
 
       - name: oauth-proxy
-        image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.5
+        image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.4
         args:
         - --cookie-secure=false
         - --provider=oidc

manifests/dashboard/dashboard.yaml

@@ -81,7 +81,7 @@ spec:
             secretKeyRef:
               key: password
               name: dashboard-auth
-        image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.5
+        image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.4
         name: oauth-proxy
         ports:
         - containerPort: 8000

manifests/gitea/gitea.yaml

@@ -43,7 +43,7 @@ spec:
       priorityClassName: critical
       containers:
       - name: git
-        image: gitea/gitea:28.1.0
+        image: gitea/gitea:1.27.3
         env:
         - name: APP_NAME
           value: "Git"
@@ -67,8 +67,6 @@ spec:
           value: arc-green
         - name: ALLOWED_HOST_LIST
           value: "*"
-        - name: EGRESS_MODE
-          value: "lax"
         - name: SECRET_KEY
           valueFrom:
             secretKeyRef:

manifests/grist/grist.yaml

@@ -75,7 +75,7 @@ spec:
       priorityClassName: critical
       containers:
         - name: grist
-          image: gristlabs/grist-oss:1.7.20
+          image: gristlabs/grist-oss:1.7.19
           imagePullPolicy: IfNotPresent
           ports:
             - name: http

manifests/monitoring/vmagent.yaml

@@ -217,7 +217,7 @@ spec:
       serviceAccountName: prometheus-server
       containers:
         - name: vmagent
-          image: "victoriametrics/vmagent:v1.153.0"
+          image: "victoriametrics/vmagent:v1.152.0"
           imagePullPolicy: "IfNotPresent"
           args:
             - -remoteWrite.url=http://vmcluster.auth-proxy.svc/insert/0/prometheus/

manifests/nodered/nodered.yaml

@@ -57,7 +57,7 @@ spec:
           - name: data
             mountPath: /data
       - name: update-native-modules
-        image: nodered/node-red:4.1.16-18
+        image: nodered/node-red:4.1.15-18
         imagePullPolicy: IfNotPresent
         command:
           - bash
@@ -73,7 +73,7 @@ spec:
             mountPath: /data
       containers:
       - name: web
-        image: nodered/node-red:4.1.16-18
+        image: nodered/node-red:4.1.15-18
         imagePullPolicy: Always
         ports:
         - containerPort: 1880

manifests/social-to-rolodex/social-to-rolodex.yaml

@@ -92,7 +92,7 @@ spec:
             secretKeyRef:
               key: password
               name: social-to-rolodex-auth
-        image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.5
+        image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.4
         name: oauth-proxy
         ports:
         - containerPort: 8000

manifests/trek/trek.yaml

@@ -58,7 +58,7 @@ spec:
     spec:
       containers:
       - name: trek
-        image: mauriceboe/trek:4.3.3
+        image: mauriceboe/trek:4.3.2
         imagePullPolicy: IfNotPresent
         envFrom:
         - configMapRef: