Merge branch 'main' of https://github.com/mitchross/talos-argocd-proxmox

mitchross · mitchross · commit 1c0dc8166481 · 2026-02-03T22:50:37.000-05:00
diff --git a/CLAUDE.md b/CLAUDE.md
diff --git a/infrastructure/controllers/argocd/kustomization.yaml b/infrastructure/controllers/argocd/kustomization.yaml
@@ -11,7 +11,7 @@ resources:
 helmCharts:
   - name: argo-cd
     repo: https://argoproj.github.io/argo-helm
-    version: "9.3.4" # It's good practice to pin the chart version
+    version: "9.3.7" # It's good practice to pin the chart version
     releaseName: argocd
     namespace: argocd
     valuesFile: values.yaml
diff --git a/infrastructure/controllers/external-secrets/kustomization.yaml b/infrastructure/controllers/external-secrets/kustomization.yaml
@@ -11,7 +11,7 @@ resources:
 helmCharts:
 - name: external-secrets
   repo: https://charts.external-secrets.io
-  version: 1.2.1
+  version: 1.3.1
   releaseName: external-secrets
   valuesFile: values.yaml
   includeCRDs: true
diff --git a/infrastructure/database/redis/redis-instance/kustomization.yaml b/infrastructure/database/redis/redis-instance/kustomization.yaml
@@ -11,7 +11,7 @@ resources:
 helmCharts:
   - name: redis
     repo: oci://registry-1.docker.io/bitnamicharts
-    version: 24.1.0
+    version: 24.1.2
     releaseName: redis
     namespace: redis-instance
     includeCRDs: true
diff --git a/infrastructure/networking/cloudflared/deployment.yaml b/infrastructure/networking/cloudflared/deployment.yaml
@@ -29,7 +29,7 @@ spec:
                 topologyKey: kubernetes.io/hostname
       containers:
         - name: cloudflared
-          image: cloudflare/cloudflared:2026.1.1 # renovate: docker=cloudflare/cloudflared
+          image: cloudflare/cloudflared:2026.1.2 # renovate: docker=cloudflare/cloudflared
           imagePullPolicy: IfNotPresent
           args:
             - tunnel
diff --git a/infrastructure/storage/longhorn/kustomization.yaml b/infrastructure/storage/longhorn/kustomization.yaml
@@ -10,7 +10,7 @@ resources:
 helmCharts:
   - name: longhorn
     repo: https://charts.longhorn.io
-    version: 1.10.1
+    version: 1.11.0
     releaseName: longhorn
     namespace: longhorn-system
     valuesFile: values.yaml
diff --git a/infrastructure/storage/volsync/values.yaml b/infrastructure/storage/volsync/values.yaml
@@ -5,7 +5,7 @@
 # Use perfectra1n image that includes Kopia mover
 image: &image
   repository: ghcr.io/perfectra1n/volsync
-  tag: 0.17.6
+  tag: 0.17.7
 
 # Set all mover images to same version
 kopia: *image
diff --git a/monitoring/loki-stack/kustomization.yaml b/monitoring/loki-stack/kustomization.yaml
@@ -8,7 +8,7 @@ resources:
 helmCharts:
   - name: loki
     repo: https://grafana.github.io/helm-charts
-    version: 6.49.0
+    version: 6.51.0
     releaseName: loki
     namespace: loki-stack
     valuesFile: values.yaml
diff --git a/monitoring/prometheus-stack/kustomization.yaml b/monitoring/prometheus-stack/kustomization.yaml
@@ -21,7 +21,7 @@ patchesStrategicMerge:
 helmCharts:
   - name: kube-prometheus-stack
     repo: https://prometheus-community.github.io/helm-charts
-    version: 81.2.2
+    version: 81.5.0
     releaseName: kube-prometheus-stack
     namespace: prometheus-stack
     valuesFile: values.yaml
diff --git a/monitoring/tempo/kustomization.yaml b/monitoring/tempo/kustomization.yaml
@@ -8,6 +8,6 @@ resources:
 helmCharts:
 - name: tempo
   repo: https://grafana.github.io/helm-charts
-  version: 1.24.3 # Latest
+  version: 1.24.4 # Latest
   releaseName: tempo
   valuesFile: values.yaml
diff --git a/my-apps/ai/comfyui/deployment.yaml b/my-apps/ai/comfyui/deployment.yaml
@@ -38,8 +38,8 @@ spec:
       containers:
       - name: comfyui
         # Image from https://github.com/YanWenKun/ComfyUI-Docker/tree/main/cu128-megapak-pt29
-        # renovate: datasource=docker depName=yanwk/comfyui-boot versioning=regex:^cu128-megapak-pt29-(?<year>\d{4})(?<month>\d{2})(?<day>\d{2})$
-        image: yanwk/comfyui-boot:cu128-megapak-pt29-20260115
+        # renovate: datasource=docker depName=yanwk/comfyui-boot
+        image: yanwk/comfyui-boot:cu128-megapak-pt29@sha256:604970b4c35f99ecd028e22378b7fe5583df495e4b3811f4505afcda076b38b0
         imagePullPolicy: IfNotPresent
         workingDir: /root
         ports:
diff --git a/my-apps/ai/llama-cpp/configmap.yaml b/my-apps/ai/llama-cpp/configmap.yaml
@@ -6,74 +6,54 @@ metadata:
 data:
   presets.ini: |
     # ==========================================================
-    # SINGLE GPU ROLES (24GB VRAM)
+    # REASONING (24GB VRAM) - Nemotron-3-Nano
     # ==========================================================
-    [reasoning-single - nemotron3-nano-30b]
+    [reasoning - nemotron3-nano]
     # Unsloth docs: temp=1.0, top-p=1.0 for chat; temp=0.6, top-p=0.95 for tools
     # NoPE architecture - no YaRN needed, supports up to 1M context
     model = /models/Nemotron-3-Nano-30B-A3B-UD-Q4_K_XL.gguf
-    alias = reasoning-single, reasoning, chat, nemotron3 nano30b
+    alias = reasoning, chat, nemotron, nemotron3 nano
     ctx-size = 32768
     n-gpu-layers = 99
     temp = 1.0
     top-p = 1.0
     jinja = 1
     special = 1
 
-    [vision-single - glm4v-flash]
-    # Unsloth docs: temp=1.0, top-p=0.95, top-k=40, jinja required
-    # May output Chinese - use system prompt "Respond in English"
-    model = /models/GLM-4.6V-Flash-UD-Q8_K_XL.gguf
-    alias = vision-single, vision, ocr, glm4v flash
-    mmproj = /models/GLM-4.6V-Flash-mmproj.gguf
+    # ==========================================================
+    # CODING (48GB VRAM) - Qwen3-Coder-Next
+    # ==========================================================
+    [coder - qwen3-coder-next]
+    # Unsloth docs: temp=1.0, top_p=0.95, top_k=40, min_p=0.01
+    # Non-thinking mode for rapid code generation, 256K context native
+    # 80B total / 3B active (MoE) - Hybrid DeltaNet + Gated Attention
+    model = /models/Qwen3-Coder-Next-UD-Q3_K_XL.gguf
+    alias = coder, code, qwen3-coder, qwen3 coder next
     ctx-size = 65536
     n-gpu-layers = 99
+    tensor-split = 1,1
     temp = 1.0
     top-p = 0.95
     top-k = 40
+    min-p = 0.01
     jinja = 1
 
     # ==========================================================
-    # DUAL GPU ROLES (48GB VRAM)
+    # VISION (48GB VRAM) - Qwen3-VL-30B-A3B-Thinking
     # ==========================================================
-    [dev-dual - devstral-small]
-    # Unsloth docs: temp=0.15, min-p=0.01, jinja required
-    # Max context 262K tokens
-    model = /models/Devstral-Small-2-24B-Instruct-2512-UD-Q5_K_XL.gguf
-    alias = dev-dual, dev, coder, devstral small
-    ctx-size = 65536
-    n-gpu-layers = 99
-    tensor-split = 1,1
-    temp = 0.15
-    min-p = 0.01
-    jinja = 1
-
-    [manager-dual - qwen3-next]
-    # Unsloth docs (Thinking model): temp=0.6, top-p=0.95, top-k=20, min-p=0.0
-    # Auto-adds <think> tags, max context 262K
-    model = /models/Qwen3-Next-80B-A3B-Thinking-UD-Q4_K_XL.gguf
-    alias = manager-dual, manager, orchestrator, qwen3 next
-    ctx-size = 131072
+    [vision - qwen3-vl-thinking]
+    # HF discussion: temp=1.0, top_p=0.95, top_k=20, min_p=0.0, presence_penalty=1.5
+    # Thinking mode for detailed image analysis
+    # 30B total / 3B active (MoE), 256K context native
+    model = /models/Qwen3-VL-30B-A3B-Thinking-Q8_0.gguf
+    mmproj = /models/mmproj-F16.gguf
+    alias = vision, image, ocr, qwen3 vl
+    ctx-size = 32768
     n-gpu-layers = 99
     tensor-split = 1,1
-    temp = 0.6
+    temp = 1.0
     top-p = 0.95
     top-k = 20
     min-p = 0.0
+    presence-penalty = 1.5
     jinja = 1
-
-    #==========================================================
-    # 400GB RAM HYBRID ROLE
-    # ==========================================================
-    [expert-hybrid - kimi-k2]
-    # Pointing to the first shard inside the nested folder
-    model = /models/UD-Q2_K_XL/Kimi-K2-Thinking-UD-Q2_K_XL-00001-of-00008.gguf
-    alias = expert-hybrid, expert, kimi, kimi k2
-    ctx-size = 98304
-    n-gpu-layers = 99
-    # VITAL: regex for Kimi-K2 to keep the 1T experts in your 400GB RAM
-    override-tensor = .ffn_.*_exps.=CPU
-    threads = 24
-    temp = 1.0
-    jinja = 1
-    mlock = 1
diff --git a/my-apps/ai/ollama/deployment.yaml b/my-apps/ai/ollama/deployment.yaml
@@ -34,7 +34,7 @@ spec:
         effect: "NoSchedule"
       containers:
       - name: ollama
-        image: ollama/ollama:0.14.3
+        image: ollama/ollama:0.15.3
         imagePullPolicy: IfNotPresent
         ports:
         - containerPort: 11434
diff --git a/my-apps/ai/open-webui/configmap.yaml b/my-apps/ai/open-webui/configmap.yaml
@@ -12,17 +12,17 @@ data:
   OPENAI_API_KEY: "sk-required"
   ENABLE_OLLAMA_API: "false"
 
-  # Semantic Routing for Unsloth 2.0
-  # Use reasoning (Nemotron) as default, vision (GLM-4.6V) for images
-  DEFAULT_MODELS: "reasoning-single - nemotron3-nano-30b"
+  # Semantic Routing - Model Selection
+  # Use reasoning (Nemotron) as default, vision (Qwen3-VL) for images, coder for code
+  DEFAULT_MODELS: "reasoning - nemotron3-nano"
   WHITELISTED_MODELS: ""
 
   # Vision Models - tell Open WebUI which models support images
-  VISION_MODELS: "vision-single - glm4v-flash"
+  VISION_MODELS: "vision - qwen3-vl-thinking"
 
   # Hardware-Optimized Parameters (Nemotron-3 recommended: temp=1.0, top_p=1.0)
   # For tool calling use: temp=0.6, top_p=0.95
-  CONTEXT_WINDOW: "131072"
+  CONTEXT_WINDOW: "65536"
   TEMPERATURE: "1.0"
   TOP_P: "1.0"
   MIN_P: "0.0"
@@ -64,8 +64,8 @@ data:
   # MCP proxies for tools, multi-tools, and Kiwix knowledge base
   OPENAPI_API_ENDPOINTS: "mcpo-time:http://mcpo.open-webui.svc.cluster.local:8000:mcp-demo-key;mcpo-multi:http://mcpo-multi.open-webui.svc.cluster.local:8001:mcp-multi-key;mcpo-kiwix:http://mcpo-kiwix.open-webui.svc.cluster.local:8002:mcp-kiwix-key"
   # Use main model for tool/function calling
-  TASK_MODEL: "reasoning-single - nemotron3-nano-30b"
-  TASK_MODEL_EXTERNAL: "reasoning-single - nemotron3-nano-30b"
+  TASK_MODEL: "reasoning - nemotron3-nano"
+  TASK_MODEL_EXTERNAL: "reasoning - nemotron3-nano"
 
   # ---------------------------------------------------------------------------
   # Default System Prompt (Kiwix RAG)
diff --git a/my-apps/development/gitea/kustomization.yaml b/my-apps/development/gitea/kustomization.yaml
@@ -7,7 +7,7 @@ resources:
 helmCharts:
 - name: gitea
   repo: https://dl.gitea.com/charts/
-  version: 12.4.0
+  version: 12.5.0
   releaseName: gitea
   namespace: gitea
   valuesFile: values.yaml
diff --git a/my-apps/development/it-tools/deployment.yaml b/my-apps/development/it-tools/deployment.yaml
@@ -19,7 +19,7 @@ spec:
     spec:
       containers:
         - name: it-tools
-          image: ghcr.io/sharevb/it-tools:nightly@sha256:b707bed6dd364348c726d81a8991eb7f6733ae65c3a5fd78bb9d2c9872908ae7
+          image: ghcr.io/sharevb/it-tools:nightly@sha256:b4e483f7125a967937706c3f3b147f76ea43f261fe9c0bbabb99d42ef3760573
           imagePullPolicy: IfNotPresent
           env:
             - name: TZ
diff --git a/my-apps/development/strimzi/kustomization.yaml b/my-apps/development/strimzi/kustomization.yaml
@@ -9,7 +9,7 @@ resources:
 helmCharts:
   - name: strimzi-kafka-operator
     repo: https://strimzi.io/charts/
-    version: 0.49.1
+    version: 0.50.0
     releaseName: strimzi
     namespace: kafka
     includeCRDs: true
diff --git a/my-apps/media/immich/deployment-machine-learning.yaml b/my-apps/media/immich/deployment-machine-learning.yaml
@@ -29,7 +29,7 @@ spec:
             topologyKey: kubernetes.io/hostname
       containers:
       - name: machine-learning
-        image: ghcr.io/immich-app/immich-machine-learning:v2.4.1@sha256:b3deefd1826f113824e9d7bc30d905e7f823535887d03f869330946b6db3b44a
+        image: ghcr.io/immich-app/immich-machine-learning:v2.5.2@sha256:531d2bccbe20d0412496e36455715a18d692911eca5e2ee37d32e1e4f50e14bb
         ports:
         - name: http
           containerPort: 3003
diff --git a/my-apps/media/immich/deployment-server.yaml b/my-apps/media/immich/deployment-server.yaml
@@ -30,7 +30,7 @@ spec:
             topologyKey: kubernetes.io/hostname
       containers:
       - name: immich-server
-        image: ghcr.io/immich-app/immich-server:v2.4.1@sha256:e6a6298e67ae077808fdb7d8d5565955f60b0708191576143fc02d30ab1389d1
+        image: ghcr.io/immich-app/immich-server:v2.5.2@sha256:8ac5a6d471fbb6fcfec6bc34854dd5a947c1795547f0d9345d9bf1803d1209e3
         ports:
         - name: http
           containerPort: 2283
diff --git a/my-apps/media/jellyfin/deployment.yaml b/my-apps/media/jellyfin/deployment.yaml
@@ -38,7 +38,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: jellyfin
-          image: ghcr.io/jellyfin/jellyfin:10.11.5
+          image: ghcr.io/jellyfin/jellyfin:10.11.6
           imagePullPolicy: IfNotPresent
           securityContext:
             allowPrivilegeEscalation: false
diff --git a/my-apps/media/tubesync/deployment.yaml b/my-apps/media/tubesync/deployment.yaml
@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
       - name: tubesync
-        image: ghcr.io/meeb/tubesync:v0.16.1
+        image: ghcr.io/meeb/tubesync:v0.16.2
         imagePullPolicy: IfNotPresent
         ports:
         - containerPort: 4848
