Update pre-commit hook renovatebot/pre-commit-hooks to v43.48.3 (#920)

Update Helm release redis to v25

.github/workflows/charts-lint-test.yaml

@@ -1,43 +1,56 @@
-name: Lint and Test Charts
+---
+name: "Charts: Lint and test"
 
-on: pull_request
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - 'charts/**'
+      - '!charts/**/README.md'
+      - '!charts/**/README.md.gotmpl'
+  pull_request:
+    paths:
+      - 'charts/**'
+      - '!charts/**/README.md'
+      - '!charts/**/README.md.gotmpl'
+
+permissions: {}
 
 jobs:
   lint-test:
+    if: "!contains(github.event.head_commit.message, '[ci-skip]')"
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
         with:
           fetch-depth: 0
+          persist-credentials: false
 
       - name: Set up Helm
-        uses: azure/setup-helm@v3
-        with:
-          version: v3.11.1
+        uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4  # v4.3.1
 
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
         with:
-          python-version: '3.10'
+          python-version: '3.14'
           check-latest: true
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@v2.3.1
+        uses: helm/chart-testing-action@6ec842c01de15ebb84c8627d2744a0c2f2755c9f  # v2.8.0
 
       - name: Run chart-testing (list-changed)
         id: list-changed
         run: |
-          changed=$(ct list-changed --target-branch main)
-          if [[ -n "$changed" ]] && [[ "$changed" =~ "charts/" ]]; then
-            echo "::set-output name=changed::true"
+          changed=$(ct list-changed --target-branch ${REPOSITORY_DEFAULT_BRANCH})
+          if [[ -n "$changed" ]]; then
+            echo "changed=true" >> "$GITHUB_OUTPUT"
           fi
+        env:
+          REPOSITORY_DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
 
       - name: Run chart-testing (lint)
-        run: ct lint --target-branch main
-
-      # - name: Create kind cluster
-      #   uses: helm/kind-action@v1.4.0
-      #   if: steps.list-changed.outputs.changed == 'true'
-
-      # - name: Run chart-testing (install)
-      #   run: ct install --target-branch main
+        if: steps.list-changed.outputs.changed == 'true'
+        run: ct lint --target-branch ${REPOSITORY_DEFAULT_BRANCH}
+        env:
+          REPOSITORY_DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}

.github/workflows/charts-release.yaml

@@ -1,6 +1,8 @@
+---
 name: Release Charts
 
 on:
+  workflow_dispatch:
   push:
     branches:
       - main
@@ -15,22 +17,21 @@ jobs:
     # see: https://docs.github.com/en/actions/security-guides/automatic-token-authentication#modifying-the-permissions-for-the-github_token
     permissions:
       contents: write
-    runs-on: ubuntu-latest
+    if: "!contains(github.event.head_commit.message, '[ci-skip]')"
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
         with:
           fetch-depth: 0
+          persist-credentials: false
 
       - name: Configure Git
         run: |
           git config user.name "$GITHUB_ACTOR"
           git config user.email "$GITHUB_ACTOR@users.noreply.github.com"
 
-      - name: Install Helm
-        uses: azure/setup-helm@v3
-
       - name: Run chart-releaser
-        uses: helm/chart-releaser-action@v1.5.0
+        uses: helm/chart-releaser-action@cae68fefc6b5f367a0275617c9f83181ba54714f  # v1.7.0
         env:
           CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}"

.github/workflows/pre-commit-check.yaml

@@ -0,0 +1,24 @@
+---
+name: "Pre-commit consistency check"
+
+on:
+  pull_request:
+    branches:
+      - main
+  push:
+    branches:
+      - main
+
+permissions: {}
+
+jobs:
+  pre-commit:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+        with:
+          persist-credentials: false
+
+      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
+
+      - uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd  # v3.0.1

.github/workflows/shellcheck.yml

@@ -0,0 +1,26 @@
+---
+
+name: "Shellcheck"
+permissions: {}
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - 'scripts/*.sh'
+  pull_request:
+    paths:
+      - 'scripts/*.sh'
+
+jobs:
+  shellcheck:
+    name: Shellcheck
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+        with:
+          persist-credentials: false
+      - name: Run ShellCheck
+        uses: ludeeus/action-shellcheck@00cae500b08a931fb5698e11e79bfbd38e612a38  # 2.0.0

.github/workflows/zizmor.yml

@@ -0,0 +1,26 @@
+---
+
+name: GitHub Actions Security Analysis with zizmor
+
+on:
+  push:
+    branches: ["main"]
+  pull_request:
+    branches: ["*"]
+
+permissions: {}
+
+jobs:
+  zizmor:
+    name: Run zizmor
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
+        with:
+          persist-credentials: false
+
+      - name: Run zizmor
+        uses: zizmorcore/zizmor-action@0dce2577a4760a2749d8cfb7a84b7d5585ebcb7d  # v0.5.0

.helm-docs-templates/.helmignore

@@ -0,0 +1,26 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
+# OWNERS file for Kubernetes
+OWNERS
+# helm-docs templates
+*.gotmpl

.helm-docs-templates/README.md.gotmpl

@@ -0,0 +1,137 @@
+{{- define "custom.repository.organization" -}}
+johanneskastl-helm-charts
+{{- end -}}
+
+{{- define "custom.repository.url" -}}
+https://github.com/johanneskastl/helm-charts/
+{{- end -}}
+
+{{- define "custom.helm.url" -}}
+https://johanneskastl.github.io/helm-charts/
+{{- end -}}
+
+{{- define "custom.helm.path" -}}
+{{ template "custom.repository.organization" . }}/{{ template "chart.name" . }}
+{{- end -}}
+
+{{- define "custom.requirements" -}}
+## Requirements
+
+{{ template "chart.kubeVersionLine" . }}
+{{- end -}}
+
+{{- define "custom.dependencies" -}}
+## Dependencies
+
+{{ template "chart.requirementsTable" . }}
+{{- end -}}
+
+{{- define "custom.install.tldr" -}}
+## TL;DR
+
+```console
+helm repo add {{ template "custom.repository.organization" . }} {{ template "custom.helm.url" . }}
+helm repo update
+helm install {{ template "chart.name" . }} {{ template "custom.helm.path" . }}
+```
+{{- end -}}
+
+{{- define "custom.install" -}}
+## Installing the Chart
+
+To install the chart with the release name `{{ template "chart.name" . }}`
+
+```console
+helm install {{ template "chart.name" . }} {{ template "custom.helm.path" . }}
+```
+{{- end -}}
+
+{{- define "custom.uninstall" -}}
+## Uninstalling the Chart
+
+To uninstall the `{{ template "chart.name" . }}` deployment
+
+```console
+helm uninstall {{ template "chart.name" . }}
+```
+
+The command removes all the Kubernetes components associated with the chart **including persistent volumes** and deletes the release.
+{{- end -}}
+
+{{- define "custom.configuration.header" -}}
+## Configuration
+{{- end -}}
+
+{{- define "custom.configuration.readValues" -}}
+Read through the [values.yaml](./values.yaml) file. It has several commented out suggested values.
+Other values may be used from the [values.yaml](https://github.com/johanneskastl/helm-charts/tree/main/charts/common/values.yaml) from the [common library](https://github.com/johanneskastl/helm-charts/tree/main/charts/common).
+{{- end -}}
+
+{{- define "custom.configuration.example.set" -}}
+Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`.
+
+```console
+helm install {{ template "chart.name" . }} \
+  --set env.TZ="America/New York" \
+    {{ template "custom.helm.path" . }}
+```
+{{- end -}}
+
+{{- define "custom.configuration.example.file" -}}
+Alternatively, a YAML file that specifies the values for the above parameters can be provided while installing the chart.
+
+```console
+helm install {{ template "chart.name" . }} {{ template "custom.helm.path" . }} -f values.yaml
+```
+{{- end -}}
+
+{{- define "custom.valuesSection" -}}
+## Values
+
+**Important**: When deploying an application Helm chart you can add more values from the common library chart [here](https://github.com/johanneskastl/helm-charts/tree/main/charts/common)
+
+{{ template "chart.valuesTable" . }}
+{{- end -}}
+
+{{- define "custom.support" -}}
+## Support
+
+Open an [issue](https://github.com/johanneskastl/helm-charts/issues/).
+{{- end -}}
+
+{{ template "chart.header" . }}
+
+{{ template "chart.versionBadge" . }}{{ template "chart.typeBadge" . }}{{ template "chart.appVersionBadge" . }}
+
+{{ template "chart.description" . }}
+
+{{ template "custom.notes" . }}
+
+{{ template "chart.sourcesSection" . }}
+
+{{ template "custom.requirements" . }}
+
+{{ template "custom.dependencies" . }}
+
+{{ template "custom.install.tldr" . }}
+
+{{ template "custom.install" . }}
+
+{{ template "custom.uninstall" . }}
+
+{{ template "custom.configuration.header" . }}
+
+{{ template "custom.configuration.readValues" . }}
+
+{{ template "custom.configuration.example.set" . }}
+
+{{ template "custom.configuration.example.file" . }}
+
+{{ template "custom.custom.configuration" . }}
+
+{{ template "custom.valuesSection" . }}
+
+{{ template "custom.changelog" . }}
+
+{{ template "custom.support" . }}
+{{ "" }}

.helm-docs-templates/README_CHANGELOG.md.gotmpl.sample

@@ -0,0 +1,27 @@
+{{- define "custom.changelog.header" -}}
+## Changelog
+{{- end -}}
+
+{{- define "custom.changelog" -}}
+{{ template "custom.changelog.header" . }}
+
+All notable changes to this Helm chart will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+### X.Y.Z
+
+#### Added
+
+N/A
+
+#### Changed
+
+- ...
+
+#### Fixed
+
+N/A
+
+{{- end -}}

.helm-docs-templates/README_CONFIG.md.gotmpl.sample

@@ -0,0 +1,13 @@
+{{- define "custom.notes" -}}
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/johanneskastl/helm-charts/issues/)**
+{{- end -}}
+
+{{- define "custom.custom.configuration.header" -}}
+## Custom configuration
+{{- end -}}
+
+{{- define "custom.custom.configuration" -}}
+{{ template "custom.custom.configuration.header" . }}
+
+N/A
+{{- end -}}

.helmdocsignore

@@ -0,0 +1,2 @@
+# common chart requires special treatment
+charts/common/

.pre-commit-config.yaml

@@ -0,0 +1,16 @@
+# See https://pre-commit.com for more information
+repos:
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v6.0.0
+    hooks:
+      - id: trailing-whitespace
+      - id: end-of-file-fixer
+      - id: fix-byte-order-marker
+      - id: mixed-line-ending
+      - id: check-merge-conflict
+      - id: check-case-conflict
+  - repo: https://github.com/renovatebot/pre-commit-hooks
+    rev: 43.48.3
+    hooks:
+      - id: renovate-config-validator
+        args: [--strict]

README.md

@@ -2,10 +2,17 @@
 
 Collection of helm charts I used in my personal clusters.
 
+- [389ds](./charts/389ds/README.md)
+- [apacheds](./charts/apacheds/README.md)
+- [bind9](./charts/bind9/README.md)
 - [blocky](./charts/blocky/README.md)
+- [hedgedoc](./charts/hedgedoc/README.md)
 - [heimdall](./charts/heimdall/README.md)
 - [jellyfin](./charts/jellyfin/README.md)
+- [kanboard](./charts/kanboard/README.md)
+- [sharry](./charts/sharry/README.md)
 - [syncthing](./charts/syncthing/README.md)
+- [tailscale](./charts/tailscale/README.md)
 - [uptime-kuma](./charts/uptime-kuma/README.md)
 - [vaultwarden](./charts/vaultwarden/README.md)
 - [wallabag](./charts/wallabag/README.md)

charts/389ds/Chart.yaml

@@ -0,0 +1,28 @@
+---
+apiVersion: v2
+# renovate datasource=docker registryUrl=https://docker.io depName=389ds/dirsrv
+appVersion: '2.2'
+description: 389ds LDAP server
+name: 389ds
+version: 0.0.3
+kubeVersion: ">=1.19.0-0"
+keywords:
+  - 389-ds
+  - 389ds
+  - dirsrv
+  - LDAP
+home: https://github.com/johanneskastl/helm-charts/tree/main/charts/389ds
+icon: https://www.port389.org/images/logo-header-transparent.png
+sources:
+  - https://github.com/389ds/389-ds-base/
+maintainers:
+  - name: johanneskastl
+    email: git@johannes-kastl.de
+dependencies:
+  - name: common
+    repository: https://johanneskastl.github.io/helm-charts/
+    version: 5.0.5
+annotations:
+  artifacthub.io/changes: |-
+    - kind: changed
+      description: add https prefix to renovate comment

charts/389ds/README.md

@@ -0,0 +1,253 @@
+# 389ds
+
+![Version: 0.0.3](https://img.shields.io/badge/Version-0.0.3-informational?style=flat-square) ![AppVersion: 2.2](https://img.shields.io/badge/AppVersion-2.2-informational?style=flat-square)
+
+389ds LDAP server
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/johanneskastl/helm-charts/issues/)**
+
+By default, this chart uses two secrets for the 389ds server. You need to create those manually before deploying the chart.
+
+The first secret, by default called `389ds-environment`, should contain the [environment variables used for configuring the server](https://hub.docker.com/r/389ds/dirsrv). It could basically look like this:
+
+```yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  name: 389ds-environment
+  namespace: 389ds
+stringData:
+  DS_DM_PASSWORD: 'your_password_goes_here'
+  DS_SUFFIX_NAME: 'dc=example,dc=org'
+  [...]
+```
+
+The second secret is used for injecting a valid TLS certificate and key file for use with LDAPS or StartTLS. It needs to be specified in your `values.yaml` file in the `persistence` section. It is used by the `389ds-certs` mount and mounted to `/data/tls/` inside the container.
+
+Specify the name of the TLS secret in your `values.yaml` file like this:
+
+```yaml
+persistence:
+  389ds-certs:
+    name: ldap.example.org-tls
+```
+
+This chart creates a ConfigMap containing the current Let's Encrypt root certificate, that is needed as the TLS secrets generated by e.g. [cert-manager](cert-manager.io) do not contain the CA certificate, but the server needs this.
+
+In case you are using certificates from a different CA, please adjust your `values.yaml` file accordingly. Have a look at the [`values.yaml`](./values.yaml) file, but basically you need something like this:
+
+```yaml
+configmap:
+  letsencrypt-ca:
+    enabled: false
+  my-own-ca:
+    enabled: true
+    data:
+      ca.crt: |
+        -----BEGIN CERTIFICATE-----
+        [...]
+        -----END CERTIFICATE-----
+persistence:
+  389ds-ca:
+    enabled: true
+    # Please note the 389ds prefix here
+    name: 389ds-my-own-ca
+```
+
+## Source Code
+
+* <https://github.com/389ds/389-ds-base/>
+
+## Requirements
+
+Kubernetes: `>=1.19.0-0`
+
+## Dependencies
+
+| Repository | Name | Version |
+|------------|------|---------|
+| https://johanneskastl.github.io/helm-charts/ | common | 5.0.5 |
+
+## TL;DR
+
+```console
+helm repo add johanneskastl-helm-charts https://johanneskastl.github.io/helm-charts/
+helm repo update
+helm install 389ds johanneskastl-helm-charts/389ds
+```
+
+## Installing the Chart
+
+To install the chart with the release name `389ds`
+
+```console
+helm install 389ds johanneskastl-helm-charts/389ds
+```
+
+## Uninstalling the Chart
+
+To uninstall the `389ds` deployment
+
+```console
+helm uninstall 389ds
+```
+
+The command removes all the Kubernetes components associated with the chart **including persistent volumes** and deletes the release.
+
+## Configuration
+
+Read through the [values.yaml](./values.yaml) file. It has several commented out suggested values.
+Other values may be used from the [values.yaml](https://github.com/johanneskastl/helm-charts/tree/main/charts/common/values.yaml) from the [common library](https://github.com/johanneskastl/helm-charts/tree/main/charts/common).
+
+Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`.
+
+```console
+helm install 389ds \
+  --set env.TZ="America/New York" \
+    johanneskastl-helm-charts/389ds
+```
+
+Alternatively, a YAML file that specifies the values for the above parameters can be provided while installing the chart.
+
+```console
+helm install 389ds johanneskastl-helm-charts/389ds -f values.yaml
+```
+
+## Custom configuration
+
+N/A
+
+## Values
+
+**Important**: When deploying an application Helm chart you can add more values from the common library chart [here](https://github.com/johanneskastl/helm-charts/tree/main/charts/common)
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| configmap.letsencrypt-ca.data | object | `{"ca.crt":"-----BEGIN CERTIFICATE-----\nMIIFazCCA1OgAwIBAgIRAIIQz7DSQONZRGPgu2OCiwAwDQYJKoZIhvcNAQELBQAw\nTzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh\ncmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMTUwNjA0MTEwNDM4\nWhcNMzUwNjA0MTEwNDM4WjBPMQswCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJu\nZXQgU2VjdXJpdHkgUmVzZWFyY2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBY\nMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK3oJHP0FDfzm54rVygc\nh77ct984kIxuPOZXoHj3dcKi/vVqbvYATyjb3miGbESTtrFj/RQSa78f0uoxmyF+\n0TM8ukj13Xnfs7j/EvEhmkvBioZxaUpmZmyPfjxwv60pIgbz5MDmgK7iS4+3mX6U\nA5/TR5d8mUgjU+g4rk8Kb4Mu0UlXjIB0ttov0DiNewNwIRt18jA8+o+u3dpjq+sW\nT8KOEUt+zwvo/7V3LvSye0rgTBIlDHCNAymg4VMk7BPZ7hm/ELNKjD+Jo2FR3qyH\nB5T0Y3HsLuJvW5iB4YlcNHlsdu87kGJ55tukmi8mxdAQ4Q7e2RCOFvu396j3x+UC\nB5iPNgiV5+I3lg02dZ77DnKxHZu8A/lJBdiB3QW0KtZB6awBdpUKD9jf1b0SHzUv\nKBds0pjBqAlkd25HN7rOrFleaJ1/ctaJxQZBKT5ZPt0m9STJEadao0xAH0ahmbWn\nOlFuhjuefXKnEgV4We0+UXgVCwOPjdAvBbI+e0ocS3MFEvzG6uBQE3xDk3SzynTn\njh8BCNAw1FtxNrQHusEwMFxIt4I7mKZ9YIqioymCzLq9gwQbooMDQaHWBfEbwrbw\nqHyGO0aoSCqI3Haadr8faqU9GY/rOPNk3sgrDQoo//fb4hVC1CLQJ13hef4Y53CI\nrU7m2Ys6xt0nUW7/vGT1M0NPAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNV\nHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR5tFnme7bl5AFzgAiIyBpY9umbbjANBgkq\nhkiG9w0BAQsFAAOCAgEAVR9YqbyyqFDQDLHYGmkgJykIrGF1XIpu+ILlaS/V9lZL\nubhzEFnTIZd+50xx+7LSYK05qAvqFyFWhfFQDlnrzuBZ6brJFe+GnY+EgPbk6ZGQ\n3BebYhtF8GaV0nxvwuo77x/Py9auJ/GpsMiu/X1+mvoiBOv/2X/qkSsisRcOj/KK\nNFtY2PwByVS5uCbMiogziUwthDyC3+6WVwW6LLv3xLfHTjuCvjHIInNzktHCgKQ5\nORAzI4JMPJ+GslWYHb4phowim57iaztXOoJwTdwJx4nLCgdNbOhdjsnvzqvHu7Ur\nTkXWStAmzOVyyghqpZXjFaH3pO3JLF+l+/+sKAIuvtd7u+Nxe5AW0wdeRlN8NwdC\njNPElpzVmbUq4JUagEiuTDkHzsxHpFKVK7q4+63SM1N95R1NbdWhscdCb+ZAJzVc\noyi3B43njTOQ5yOf+1CceWxG1bQVs5ZufpsMljq4Ui0/1lvh+wjChP4kqKOJ2qxq\n4RgqsahDYVvTH9w7jXbyLeiNdd8XM2w9U/t7y0Ff/9yi0GE44Za4rF2LN9d11TPA\nmRGunUHBcnWEvgJBQl9nJEiU0Zsnvgc/ubhPgXRR4Xq37Z0j4r7g1SgEEzwxA57d\nemyPxgcYxn/eR44/KJ4EBs+lVDR3veyJm+kXQ99b21/+jh5Xos1AnX5iItreGCc=\n-----END CERTIFICATE-----\n"}` | configMap data content. Helm template enabled. |
+| configmap.letsencrypt-ca.enabled | bool | `true` |  |
+| controller.type | string | `"statefulset"` |  |
+| env | object | `{}` |  |
+| envFrom[0].secretRef.name | string | `"389ds-environment"` |  |
+| image.pullPolicy | string | `"IfNotPresent"` | image pull policy |
+| image.repository | string | `"389ds/dirsrv"` | image repository |
+| image.tag | string | chart.appVersion | image tag |
+| persistence.389ds-ca.enabled | bool | `true` |  |
+| persistence.389ds-ca.mountPath | string | `"/data/tls/ca/"` | Where to mount the volume in the main container. |
+| persistence.389ds-ca.name | string | `"389ds-letsencrypt-ca"` |  |
+| persistence.389ds-ca.readOnly | bool | `true` | Specify if the volume should be mounted read-only. |
+| persistence.389ds-ca.type | string | `"configMap"` | Sets the persistence type |
+| persistence.389ds-certs.enabled | bool | `true` |  |
+| persistence.389ds-certs.items[0].key | string | `"tls.key"` |  |
+| persistence.389ds-certs.items[0].path | string | `"server.key"` |  |
+| persistence.389ds-certs.items[1].key | string | `"tls.crt"` |  |
+| persistence.389ds-certs.items[1].path | string | `"server.crt"` |  |
+| persistence.389ds-certs.mountPath | string | `"/data/tls/"` | Where to mount the volume in the main container. |
+| persistence.389ds-certs.name | string | `nil` |  |
+| persistence.389ds-certs.readOnly | bool | `true` | Specify if the volume should be mounted read-only. |
+| persistence.389ds-certs.type | string | `"secret"` | Sets the persistence type |
+| persistence.data.accessMode | string | `"ReadWriteOnce"` | AccessMode for the persistent volume. |
+| persistence.data.enabled | bool | `true` |  |
+| persistence.data.mountPath | string | `"/data/"` | Where to mount the volume in the main container. |
+| persistence.data.retain | bool | `true` | Set to true to retain the PVC upon `helm uninstall` |
+| persistence.data.size | string | `"1Gi"` | The amount of storage that is requested for the persistent volume. |
+| probes.liveness.custom | bool | `true` |  |
+| probes.liveness.enabled | bool | `true` |  |
+| probes.liveness.spec.exec.command[0] | string | `"/usr/lib/dirsrv/dscontainer"` |  |
+| probes.liveness.spec.exec.command[1] | string | `"-H"` |  |
+| probes.liveness.spec.failureThreshold | int | `3` |  |
+| probes.liveness.spec.initialDelaySeconds | int | `0` |  |
+| probes.liveness.spec.periodSeconds | int | `15` |  |
+| probes.liveness.spec.timeoutSeconds | int | `1` |  |
+| probes.readiness.custom | bool | `true` |  |
+| probes.readiness.enabled | bool | `true` |  |
+| probes.readiness.spec.exec.command[0] | string | `"/usr/lib/dirsrv/dscontainer"` |  |
+| probes.readiness.spec.exec.command[1] | string | `"-H"` |  |
+| probes.readiness.spec.failureThreshold | int | `3` |  |
+| probes.readiness.spec.initialDelaySeconds | int | `0` |  |
+| probes.readiness.spec.periodSeconds | int | `15` |  |
+| probes.readiness.spec.timeoutSeconds | int | `1` |  |
+| probes.startup.custom | bool | `true` |  |
+| probes.startup.enabled | bool | `true` |  |
+| probes.startup.spec.exec.command[0] | string | `"/usr/lib/dirsrv/dscontainer"` |  |
+| probes.startup.spec.exec.command[1] | string | `"-H"` |  |
+| probes.startup.spec.failureThreshold | int | `3` |  |
+| probes.startup.spec.initialDelaySeconds | int | `30` |  |
+| probes.startup.spec.periodSeconds | int | `15` |  |
+| probes.startup.spec.timeoutSeconds | int | `1` |  |
+| service.main.annotations | object | `{}` |  |
+| service.main.enabled | bool | `true` |  |
+| service.main.namePrefix | string | `"service"` |  |
+| service.main.ports.http.enabled | bool | `false` |  |
+| service.main.ports.ldap-tcp.enabled | bool | `true` |  |
+| service.main.ports.ldap-tcp.port | int | `389` |  |
+| service.main.ports.ldap-tcp.protocol | string | `"TCP"` |  |
+| service.main.ports.ldap-tcp.targetPort | int | `3389` |  |
+| service.main.ports.ldap-udp.enabled | bool | `false` |  |
+| service.main.ports.ldap-udp.port | int | `389` |  |
+| service.main.ports.ldap-udp.protocol | string | `"UDP"` |  |
+| service.main.ports.ldap-udp.targetPort | int | `3389` |  |
+| service.main.ports.ldaps-tcp.enabled | bool | `true` |  |
+| service.main.ports.ldaps-tcp.port | int | `636` |  |
+| service.main.ports.ldaps-tcp.protocol | string | `"TCP"` |  |
+| service.main.ports.ldaps-tcp.targetPort | int | `3636` |  |
+| service.main.ports.ldaps-udp.enabled | bool | `false` |  |
+| service.main.ports.ldaps-udp.port | int | `636` |  |
+| service.main.ports.ldaps-udp.protocol | string | `"UDP"` |  |
+| service.main.ports.ldaps-udp.targetPort | int | `3636` |  |
+| service.main.type | string | `"LoadBalancer"` |  |
+| serviceAccount.annotations | object | `{}` | Annotations to add to the service account |
+| serviceAccount.create | bool | `true` | Specifies whether a service account should be created |
+| serviceAccount.name | string | `""` | The name of the service account to use. If not set and create is true, a name is generated using the fullname template |
+
+## Changelog
+
+All notable changes to this Helm chart will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+### Version 0.0.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* add https prefix to renovate comment
+
+#### Fixed
+
+N/A
+
+### Version 0.0.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* comment in Chart.yaml to allow updates via Renovatebot
+
+#### Fixed
+
+N/A
+
+### Version 0.0.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* first version of the chart, with appVersion 2.2
+
+#### Fixed
+
+N/A
+
+## Support
+
+Open an [issue](https://github.com/johanneskastl/helm-charts/issues/).

charts/389ds/README_CHANGELOG.md.gotmpl

@@ -0,0 +1,55 @@
+{{- define "custom.changelog.header" -}}
+## Changelog
+{{- end -}}
+
+{{- define "custom.changelog" -}}
+{{ template "custom.changelog.header" . }}
+
+All notable changes to this Helm chart will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+### Version 0.0.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* add https prefix to renovate comment
+
+#### Fixed
+
+N/A
+
+### Version 0.0.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* comment in Chart.yaml to allow updates via Renovatebot
+
+#### Fixed
+
+N/A
+
+### Version 0.0.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* first version of the chart, with appVersion 2.2
+
+#### Fixed
+
+N/A
+
+{{- end -}}

charts/389ds/README_CONFIG.md.gotmpl

@@ -0,0 +1,59 @@
+{{- define "custom.notes" -}}
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/johanneskastl/helm-charts/issues/)**
+
+By default, this chart uses two secrets for the 389ds server. You need to create those manually before deploying the chart.
+
+The first secret, by default called `389ds-environment`, should contain the [environment variables used for configuring the server](https://hub.docker.com/r/389ds/dirsrv). It could basically look like this:
+
+```yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  name: 389ds-environment
+  namespace: 389ds
+stringData:
+  DS_DM_PASSWORD: 'your_password_goes_here'
+  DS_SUFFIX_NAME: 'dc=example,dc=org'
+  [...]
+```
+
+The second secret is used for injecting a valid TLS certificate and key file for use with LDAPS or StartTLS. It needs to be specified in your `values.yaml` file in the `persistence` section. It is used by the `389ds-certs` mount and mounted to `/data/tls/` inside the container.
+
+Specify the name of the TLS secret in your `values.yaml` file like this:
+
+```yaml
+persistence:
+  389ds-certs:
+    name: ldap.example.org-tls
+```
+
+This chart creates a ConfigMap containing the current Let's Encrypt root certificate, that is needed as the TLS secrets generated by e.g. [cert-manager](cert-manager.io) do not contain the CA certificate, but the server needs this.
+
+In case you are using certificates from a different CA, please adjust your `values.yaml` file accordingly. Have a look at the [`values.yaml`](./values.yaml) file, but basically you need something like this:
+
+```yaml
+configmap:
+  letsencrypt-ca:
+    enabled: false
+  my-own-ca:
+    enabled: true
+    data:
+      ca.crt: |
+        -----BEGIN CERTIFICATE-----
+        [...]
+        -----END CERTIFICATE-----
+persistence:
+  389ds-ca:
+    enabled: true
+    # Please note the 389ds prefix here
+    name: 389ds-my-own-ca
+```
+
+{{- end -}}
+
+{{- define "custom.custom.configuration" -}}
+## Custom configuration
+
+N/A
+
+{{- end -}}

charts/389ds/templates/NOTES.txt

@@ -0,0 +1 @@
+{{- include "common.notes.defaultNotes" . -}}

charts/389ds/templates/_statefulset.tpl

@@ -0,0 +1,64 @@
+{{/*
+This template serves as the blueprint for the StatefulSet objects that are created
+within the common library.
+*/}}
+{{- define "common.statefulset" }}
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: {{ include "common.names.fullname" . }}
+  {{- with (merge (.Values.controller.labels | default dict) (include "common.labels" $ | fromYaml)) }}
+  labels: {{- toYaml . | nindent 4 }}
+  {{- end }}
+  {{- with (merge (.Values.controller.annotations | default dict) (include "common.annotations" $ | fromYaml)) }}
+  annotations: {{- toYaml . | nindent 4 }}
+  {{- end }}
+spec:
+  revisionHistoryLimit: {{ .Values.controller.revisionHistoryLimit }}
+  replicas: {{ .Values.controller.replicas }}
+  podManagementPolicy: {{ default "OrderedReady" .Values.controller.podManagementPolicy }}
+  {{- $strategy := default "RollingUpdate" .Values.controller.strategy }}
+  {{- if and (ne $strategy "OnDelete") (ne $strategy "RollingUpdate") }}
+    {{- fail (printf "Not a valid strategy type for StatefulSet (%s)" $strategy) }}
+  {{- end }}
+  updateStrategy:
+    type: {{ $strategy }}
+    {{- if and (eq $strategy "RollingUpdate") .Values.controller.rollingUpdate.partition }}
+    rollingUpdate:
+      partition: {{ .Values.controller.rollingUpdate.partition }}
+    {{- end }}
+  selector:
+    matchLabels:
+      {{- include "common.labels.selectorLabels" . | nindent 6 }}
+  serviceName: service-{{ include "common.names.fullname" . }}
+  template:
+    metadata:
+      {{- with include ("common.podAnnotations") . }}
+      annotations:
+        {{- . | trim | nindent 8 }}
+      {{- end }}
+      labels:
+        {{- include "common.labels.selectorLabels" . | nindent 8 }}
+        {{- with .Values.podLabels }}
+        {{- toYaml . | nindent 8 }}
+        {{- end }}
+    spec:
+      {{- include "common.controller.pod" . | nindent 6 }}
+  {{ with .Values.volumeClaimTemplates }}
+  volumeClaimTemplates:
+    {{- range $index, $vct := .Values.volumeClaimTemplates }}
+    - metadata:
+        name: {{ $vct.name }}
+      spec:
+        accessModes:
+          - {{ required (printf "accessMode is required for vCT %v" $vct.name) $vct.accessMode  | quote }}
+        resources:
+          requests:
+            storage: {{ required (printf "size is required for PVC %v" $vct.name) $vct.size | quote }}
+        {{- if $vct.storageClass }}
+        storageClassName: {{ if (eq "-" $vct.storageClass) }}""{{- else }}{{ $vct.storageClass | quote }}{{- end }}
+        {{- end }}
+    {{- end }}
+  {{- end }}
+{{- end }}

charts/389ds/templates/common.yaml

@@ -0,0 +1,4 @@
+{{/* Make sure all variables are set properly */}}
+{{- include "common.values.setup" . }}
+
+{{ include "common.all" . }}

charts/389ds/values.yaml

@@ -0,0 +1,180 @@
+#
+# IMPORTANT NOTE
+#
+# This chart inherits from the common library chart. You can check the default values/options here:
+# https://github.com/johanneskastl/helm-charts/tree/main/charts/common/values.yaml
+#
+
+controller:
+  type: statefulset
+
+image:
+  # -- image repository
+  repository: 389ds/dirsrv
+  # -- image tag
+  # @default -- chart.appVersion
+  tag:
+  # -- image pull policy
+  pullPolicy: IfNotPresent
+
+serviceAccount:
+  # -- Specifies whether a service account should be created
+  create: true
+
+  # -- Annotations to add to the service account
+  annotations: {}
+
+  # -- The name of the service account to use.
+  # If not set and create is true, a name is generated using the fullname template
+  name: ""
+
+# @default -- See below
+configmap:
+  letsencrypt-ca:
+    enabled: true
+    # -- configMap data content. Helm template enabled.
+    data:
+      ca.crt: |
+        -----BEGIN CERTIFICATE-----
+        MIIFazCCA1OgAwIBAgIRAIIQz7DSQONZRGPgu2OCiwAwDQYJKoZIhvcNAQELBQAw
+        TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh
+        cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMTUwNjA0MTEwNDM4
+        WhcNMzUwNjA0MTEwNDM4WjBPMQswCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJu
+        ZXQgU2VjdXJpdHkgUmVzZWFyY2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBY
+        MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK3oJHP0FDfzm54rVygc
+        h77ct984kIxuPOZXoHj3dcKi/vVqbvYATyjb3miGbESTtrFj/RQSa78f0uoxmyF+
+        0TM8ukj13Xnfs7j/EvEhmkvBioZxaUpmZmyPfjxwv60pIgbz5MDmgK7iS4+3mX6U
+        A5/TR5d8mUgjU+g4rk8Kb4Mu0UlXjIB0ttov0DiNewNwIRt18jA8+o+u3dpjq+sW
+        T8KOEUt+zwvo/7V3LvSye0rgTBIlDHCNAymg4VMk7BPZ7hm/ELNKjD+Jo2FR3qyH
+        B5T0Y3HsLuJvW5iB4YlcNHlsdu87kGJ55tukmi8mxdAQ4Q7e2RCOFvu396j3x+UC
+        B5iPNgiV5+I3lg02dZ77DnKxHZu8A/lJBdiB3QW0KtZB6awBdpUKD9jf1b0SHzUv
+        KBds0pjBqAlkd25HN7rOrFleaJ1/ctaJxQZBKT5ZPt0m9STJEadao0xAH0ahmbWn
+        OlFuhjuefXKnEgV4We0+UXgVCwOPjdAvBbI+e0ocS3MFEvzG6uBQE3xDk3SzynTn
+        jh8BCNAw1FtxNrQHusEwMFxIt4I7mKZ9YIqioymCzLq9gwQbooMDQaHWBfEbwrbw
+        qHyGO0aoSCqI3Haadr8faqU9GY/rOPNk3sgrDQoo//fb4hVC1CLQJ13hef4Y53CI
+        rU7m2Ys6xt0nUW7/vGT1M0NPAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNV
+        HRMBAf8EBTADAQH/MB0GA1UdDgQWBBR5tFnme7bl5AFzgAiIyBpY9umbbjANBgkq
+        hkiG9w0BAQsFAAOCAgEAVR9YqbyyqFDQDLHYGmkgJykIrGF1XIpu+ILlaS/V9lZL
+        ubhzEFnTIZd+50xx+7LSYK05qAvqFyFWhfFQDlnrzuBZ6brJFe+GnY+EgPbk6ZGQ
+        3BebYhtF8GaV0nxvwuo77x/Py9auJ/GpsMiu/X1+mvoiBOv/2X/qkSsisRcOj/KK
+        NFtY2PwByVS5uCbMiogziUwthDyC3+6WVwW6LLv3xLfHTjuCvjHIInNzktHCgKQ5
+        ORAzI4JMPJ+GslWYHb4phowim57iaztXOoJwTdwJx4nLCgdNbOhdjsnvzqvHu7Ur
+        TkXWStAmzOVyyghqpZXjFaH3pO3JLF+l+/+sKAIuvtd7u+Nxe5AW0wdeRlN8NwdC
+        jNPElpzVmbUq4JUagEiuTDkHzsxHpFKVK7q4+63SM1N95R1NbdWhscdCb+ZAJzVc
+        oyi3B43njTOQ5yOf+1CceWxG1bQVs5ZufpsMljq4Ui0/1lvh+wjChP4kqKOJ2qxq
+        4RgqsahDYVvTH9w7jXbyLeiNdd8XM2w9U/t7y0Ff/9yi0GE44Za4rF2LN9d11TPA
+        mRGunUHBcnWEvgJBQl9nJEiU0Zsnvgc/ubhPgXRR4Xq37Z0j4r7g1SgEEzwxA57d
+        emyPxgcYxn/eR44/KJ4EBs+lVDR3veyJm+kXQ99b21/+jh5Xos1AnX5iItreGCc=
+        -----END CERTIFICATE-----
+
+env: {}
+
+envFrom:
+- secretRef:
+    name: 389ds-environment
+
+probes:
+  liveness:
+    enabled: true
+    custom: true
+    spec:
+      exec:
+        command:
+          - /usr/lib/dirsrv/dscontainer
+          - -H
+      initialDelaySeconds: 0
+      periodSeconds: 15
+      timeoutSeconds: 1
+      failureThreshold: 3
+
+  readiness:
+    enabled: true
+    custom: true
+    spec:
+      exec:
+        command:
+          - /usr/lib/dirsrv/dscontainer
+          - -H
+      initialDelaySeconds: 0
+      periodSeconds: 15
+      timeoutSeconds: 1
+      failureThreshold: 3
+
+  startup:
+    enabled: true
+    custom: true
+    spec:
+      exec:
+        command:
+          - /usr/lib/dirsrv/dscontainer
+          - -H
+      initialDelaySeconds: 30
+      periodSeconds: 15
+      timeoutSeconds: 1
+      failureThreshold: 3
+
+service:
+  main:
+    enabled: true
+    type: LoadBalancer
+    namePrefix: service
+    annotations: {}
+    ports:
+      http:
+        enabled: false
+      ldap-tcp:
+        enabled: true
+        port: 389
+        protocol: TCP
+        targetPort: 3389
+      ldap-udp:
+        enabled: false
+        port: 389
+        protocol: UDP
+        targetPort: 3389
+      ldaps-tcp:
+        enabled: true
+        port: 636
+        protocol: TCP
+        targetPort: 3636
+      ldaps-udp:
+        enabled: false
+        port: 636
+        protocol: UDP
+        targetPort: 3636
+
+persistence:
+  data:
+    enabled: true
+    # -- Where to mount the volume in the main container.
+    mountPath: /data/
+    # -- AccessMode for the persistent volume.
+    accessMode: ReadWriteOnce
+    # -- The amount of storage that is requested for the persistent volume.
+    size: 1Gi
+    # -- Set to true to retain the PVC upon `helm uninstall`
+    retain: true
+  389ds-certs:
+    enabled: true
+    # Please insert the name of an existing TLS secret
+    name:
+    items:
+    - key: tls.key
+      path: server.key
+    - key: tls.crt
+      path: server.crt
+    # -- Sets the persistence type
+    type: secret
+    # -- Where to mount the volume in the main container.
+    mountPath: /data/tls/
+    # -- Specify if the volume should be mounted read-only.
+    readOnly: true
+  389ds-ca:
+    enabled: true
+    name: 389ds-letsencrypt-ca
+    # -- Sets the persistence type
+    type: configMap
+    # -- Where to mount the volume in the main container.
+    mountPath: /data/tls/ca/
+    # -- Specify if the volume should be mounted read-only.
+    readOnly: true

charts/apacheds/Chart.yaml

@@ -0,0 +1,27 @@
+---
+apiVersion: v2
+# renovate datasource=docker registryUrl=https://docker.io depName=johanneskastl/apacheds
+appVersion: 2.0.0-AM26-startupProbe
+description: ApacheDS is a LDAP server written in Java
+name: apacheds
+version: 0.0.6
+kubeVersion: ">=1.16.0-0"
+keywords:
+  - LDAP
+  - ApacheDS
+home: https://github.com/johanneskastl/helm-charts/tree/main/charts/apacheds
+icon: https://directory.apache.org/images/header-green.png
+sources:
+  - https://directory.apache.org/apacheds/
+  - https://github.com/TremoloSecurity/apacheds
+maintainers:
+  - name: johanneskastl
+    email: git@johannes-kastl.de
+dependencies:
+  - name: common
+    repository: https://johanneskastl.github.io/helm-charts/
+    version: 5.0.5
+annotations:
+  artifacthub.io/changes: |-
+    - kind: changed
+      description: add https prefix to renovate comment

charts/apacheds/README.md

@@ -0,0 +1,309 @@
+# apacheds
+
+![Version: 0.0.6](https://img.shields.io/badge/Version-0.0.6-informational?style=flat-square) ![AppVersion: 2.0.0-AM26-startupProbe](https://img.shields.io/badge/AppVersion-2.0.0--AM26--startupProbe-informational?style=flat-square)
+
+ApacheDS is a LDAP server written in Java
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/johanneskastl/helm-charts/issues/)**
+
+## Source Code
+
+* <https://directory.apache.org/apacheds/>
+* <https://github.com/TremoloSecurity/apacheds>
+
+## Requirements
+
+Kubernetes: `>=1.16.0-0`
+
+## Dependencies
+
+| Repository | Name | Version |
+|------------|------|---------|
+| https://johanneskastl.github.io/helm-charts/ | common | 5.0.5 |
+
+## TL;DR
+
+```console
+helm repo add johanneskastl-helm-charts https://johanneskastl.github.io/helm-charts/
+helm repo update
+helm install apacheds johanneskastl-helm-charts/apacheds
+```
+
+## Installing the Chart
+
+To install the chart with the release name `apacheds`
+
+```console
+helm install apacheds johanneskastl-helm-charts/apacheds
+```
+
+## Uninstalling the Chart
+
+To uninstall the `apacheds` deployment
+
+```console
+helm uninstall apacheds
+```
+
+The command removes all the Kubernetes components associated with the chart **including persistent volumes** and deletes the release.
+
+## Configuration
+
+Read through the [values.yaml](./values.yaml) file. It has several commented out suggested values.
+Other values may be used from the [values.yaml](https://github.com/johanneskastl/helm-charts/tree/main/charts/common/values.yaml) from the [common library](https://github.com/johanneskastl/helm-charts/tree/main/charts/common).
+
+Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`.
+
+```console
+helm install apacheds \
+  --set env.TZ="America/New York" \
+    johanneskastl-helm-charts/apacheds
+```
+
+Alternatively, a YAML file that specifies the values for the above parameters can be provided while installing the chart.
+
+```console
+helm install apacheds johanneskastl-helm-charts/apacheds -f values.yaml
+```
+
+## Custom configuration
+
+You need at least one Kubernetes secret for this chart, but there are three in total:
+
+1. A secret containing your configuration (called `apacheds-configuration`)
+1. (optional) A secret containing the java keystore containing the certificate
+1. (optional) A secret containing a `data.ldif` key with LDIF entries you want to have imported into your LDAP server
+
+The configuration secret should contain
+- your admin account password (`APACHEDS_ROOT_PASSWORD`)
+- the password for the Java keystore (`APACHEDS_TLS_KS_PWD`)
+- the `DN` and `OBJECT_CLASS` for your directory
+
+An example might look like this:
+
+```yaml
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: apacheds-configuration
+  namespace: apacheds
+type: Opaque
+stringData:
+  APACHEDS_TLS_KS_PWD: verysecret
+  APACHEDS_ROOT_PASSWORD: totallysecret
+  DN: dc=example,dc=org
+  OBJECT_CLASS: domain
+```
+
+The keystore secret might look like this:
+
+```yaml
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: apacheds-keystore
+  namespace: apacheds
+type: Opaque
+data:
+  apacheds.jks: <long-base64-encoded-string-goes-here>
+
+```
+
+You can create this via `kubectl` as usual, and reference it in your `values.yaml` file like so:
+
+```yaml
+persistence:
+  config:
+    name: apacheds-keystore
+[...]
+```
+
+In case you want to automatically import data into your LDAP server, create another secret like the following:
+
+```yaml
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: apacheds-ldif
+  namespace: apacheds
+type: Opaque
+stringData:
+  data.ldif: |-
+    dn: DC=example,DC=org
+    objectClass: domain
+    dc: domain
+
+    [...]
+```
+
+Add the LDIF information, but make sure the key is called `data.ldif`.
+
+Then enable the ldifimport in the `values.yaml`'s persistence section:
+
+```yaml
+persistence:
+  [...]
+  ldifimport:
+    enabled: true
+    name: apacheds-ldif
+```
+
+Make sure the `name` in the `ldifimport` block matches your Kubernetes secret's name.
+
+The container will import the data from the `data.ldif` file, that is being mounted from the secret, on startup.
+
+## Values
+
+**Important**: When deploying an application Helm chart you can add more values from the common library chart [here](https://github.com/johanneskastl/helm-charts/tree/main/charts/common)
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| controller.type | string | `"statefulset"` |  |
+| envFrom | list | See values.yaml | Use environment variables from the apacheds-configuration secret |
+| image.pullPolicy | string | `"IfNotPresent"` | image pull policy |
+| image.repository | string | `"docker.io/johanneskastl/apacheds"` | image repository |
+| image.tag | string | chart.appVersion | image tag |
+| ingress.main | object | See values.yaml | Enable and configure ingress settings for the chart under this key. |
+| persistence | object | See values.yaml | Configure persistence settings for the chart under this key. |
+| persistence.data | object | See below | Persistence for the application data |
+| persistence.data.accessMode | string | `"ReadWriteOnce"` | There should only be one pod writing to the volume |
+| persistence.data.enabled | bool | `true` | You normally want persistence for the LDAP data. Disable at your own peril... |
+| persistence.data.mountPath | string | `"/var/apacheds/"` | ApacheDS writes the data to /var/apacheds/ |
+| persistence.data.readOnly | bool | `false` | Setting this to readOnly does not make sense |
+| persistence.data.retain | bool | `true` | Do not delete the volume if the helm chart is being uninstalled, to prevent data loss... |
+| persistence.ldifimport | object | See below | Set this to enabled if you want to import files from a secret. Then set `persistence.ldifimport.name` to the name of your Kubernetes secret in your values.yaml file. |
+| persistence.ldifimport.enabled | bool | `false` | Set this to true if you want to enable the import from a LDIF file |
+| persistence.ldifimport.mountPath | string | `"/etc/apacheds-data/"` | The container image expects the LDIF file to import to be in /etc/apacheds-data/data.ldif |
+| persistence.ldifimport.type | string | `"secret"` | You should store the LDIF information in a secret |
+| persistence.tlskeystore | object | See below | For LDAPS you should have your JAVA keystore stored in Kubernetes in a secret and mounted into the pod. To do that set the `persistence.tlskeystore.name` key to the name of your existing secret in your values.yaml file. |
+| persistence.tlskeystore.enabled | bool | `false` | Set this to true to enable parsing the keystore file |
+| persistence.tlskeystore.mountPath | string | `"/etc/apacheds/"` | The keystore files needs to end up in /etc/apacheds/apacheds.jks |
+| probes.liveness.enabled | bool | `true` |  |
+| probes.liveness.spec.failureThreshold | int | `3` |  |
+| probes.liveness.spec.initialDelaySeconds | int | `150` |  |
+| probes.liveness.spec.periodSeconds | int | `15` |  |
+| probes.liveness.spec.tcpSocket.port | int | `10389` |  |
+| probes.liveness.spec.timeoutSeconds | int | `1` |  |
+| probes.readiness.enabled | bool | `true` |  |
+| probes.readiness.spec.failureThreshold | int | `3` |  |
+| probes.readiness.spec.initialDelaySeconds | int | `150` |  |
+| probes.readiness.spec.periodSeconds | int | `15` |  |
+| probes.readiness.spec.tcpSocket.port | int | `10389` |  |
+| probes.readiness.spec.timeoutSeconds | int | `1` |  |
+| probes.startup.custom | bool | `true` |  |
+| probes.startup.enabled | bool | `true` |  |
+| probes.startup.spec.exec.command[0] | string | `"sh"` |  |
+| probes.startup.spec.exec.command[1] | string | `"-c"` |  |
+| probes.startup.spec.exec.command[2] | string | `"test -f /tmp/apacheds_startup_finished"` |  |
+| probes.startup.spec.failureThreshold | int | `30` |  |
+| probes.startup.spec.initialDelaySeconds | int | `210` |  |
+| probes.startup.spec.periodSeconds | int | `10` |  |
+| probes.startup.spec.timeoutSeconds | int | `1` |  |
+| resources | object | See below | Set the resource requests / limits for the main container. |
+| resources.limits | object | See below | resource limits for the pod |
+| resources.limits.cpu | string | `"250m"` | cpu limit |
+| resources.limits.memory | string | `"256Mi"` | memory limit |
+| resources.requests | object | See below | resource requests for the pod |
+| resources.requests.cpu | string | `"125m"` | cpu request |
+| resources.requests.memory | string | `"128Mi"` | memory request |
+| service | object | See values.yaml | Configures service settings for the chart. |
+| serviceAccount.create | bool | `true` |  |
+
+## Changelog
+
+All notable changes to this Helm chart will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+### Version 0.0.6
+
+#### Added
+
+N/A
+
+#### Changed
+
+* add https prefix to renovate comment
+
+#### Fixed
+
+N/A
+
+### Version 0.0.5
+
+#### Added
+
+* comment in Chart.yaml to allow updates via Renovatebot
+
+#### Changed
+
+N/A
+
+#### Fixed
+
+N/A
+
+### Version 0.0.4
+
+#### Added
+
+N/A
+
+#### Changed
+
+* refactor startupProbe/readinessProbe/livenessProbe
+
+#### Fixed
+
+N/A
+
+### Version 0.0.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* disable TLS by default, aka make the keystore secret optional
+* change image to johanneskastl/apacheds
+
+#### Fixed
+
+N/A
+
+### Version 0.0.2
+
+#### Added
+
+* add README
+
+#### Changed
+
+N/A
+
+#### Fixed
+
+N/A
+
+### Version 0.0.1
+
+#### Added
+
+* created new chart
+
+#### Changed
+
+N/A
+
+#### Fixed
+
+N/A
+
+## Support
+
+Open an [issue](https://github.com/johanneskastl/helm-charts/issues/).

charts/apacheds/README_CHANGELOG.md.gotmpl

@@ -0,0 +1,98 @@
+{{- define "custom.changelog.header" -}}
+## Changelog
+{{- end -}}
+
+{{- define "custom.changelog" -}}
+{{ template "custom.changelog.header" . }}
+
+All notable changes to this Helm chart will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+### Version 0.0.6
+
+#### Added
+
+N/A
+
+#### Changed
+
+* add https prefix to renovate comment
+
+#### Fixed
+
+N/A
+
+### Version 0.0.5
+
+#### Added
+
+* comment in Chart.yaml to allow updates via Renovatebot
+
+#### Changed
+
+N/A
+
+#### Fixed
+
+N/A
+
+### Version 0.0.4
+
+#### Added
+
+N/A
+
+#### Changed
+
+* refactor startupProbe/readinessProbe/livenessProbe
+
+#### Fixed
+
+N/A
+
+### Version 0.0.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* disable TLS by default, aka make the keystore secret optional
+* change image to johanneskastl/apacheds
+
+#### Fixed
+
+N/A
+
+### Version 0.0.2
+
+#### Added
+
+* add README
+
+#### Changed
+
+N/A
+
+#### Fixed
+
+N/A
+
+### Version 0.0.1
+
+#### Added
+
+* created new chart
+
+#### Changed
+
+N/A
+
+#### Fixed
+
+N/A
+
+{{- end -}}

charts/apacheds/README_CONFIG.md.gotmpl

@@ -0,0 +1,99 @@
+{{- define "custom.notes" -}}
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/johanneskastl/helm-charts/issues/)**
+{{- end -}}
+
+{{- define "custom.custom.configuration.header" -}}
+## Custom configuration
+{{- end -}}
+
+{{- define "custom.custom.configuration" -}}
+{{ template "custom.custom.configuration.header" . }}
+
+You need at least one Kubernetes secret for this chart, but there are three in total:
+
+1. A secret containing your configuration (called `apacheds-configuration`)
+1. (optional) A secret containing the java keystore containing the certificate
+1. (optional) A secret containing a `data.ldif` key with LDIF entries you want to have imported into your LDAP server
+
+The configuration secret should contain
+- your admin account password (`APACHEDS_ROOT_PASSWORD`)
+- the password for the Java keystore (`APACHEDS_TLS_KS_PWD`)
+- the `DN` and `OBJECT_CLASS` for your directory
+
+An example might look like this:
+
+```yaml
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: apacheds-configuration
+  namespace: apacheds
+type: Opaque
+stringData:
+  APACHEDS_TLS_KS_PWD: verysecret
+  APACHEDS_ROOT_PASSWORD: totallysecret
+  DN: dc=example,dc=org
+  OBJECT_CLASS: domain
+```
+
+The keystore secret might look like this:
+
+```yaml
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: apacheds-keystore
+  namespace: apacheds
+type: Opaque
+data:
+  apacheds.jks: <long-base64-encoded-string-goes-here>
+
+```
+
+You can create this via `kubectl` as usual, and reference it in your `values.yaml` file like so:
+
+```yaml
+persistence:
+  config:
+    name: apacheds-keystore
+[...]
+```
+
+In case you want to automatically import data into your LDAP server, create another secret like the following:
+
+```yaml
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: apacheds-ldif
+  namespace: apacheds
+type: Opaque
+stringData:
+  data.ldif: |-
+    dn: DC=example,DC=org
+    objectClass: domain
+    dc: domain
+
+    [...]
+```
+
+Add the LDIF information, but make sure the key is called `data.ldif`.
+
+Then enable the ldifimport in the `values.yaml`'s persistence section:
+
+```yaml
+persistence:
+  [...]
+  ldifimport:
+    enabled: true
+    name: apacheds-ldif
+```
+
+Make sure the `name` in the `ldifimport` block matches your Kubernetes secret's name.
+
+The container will import the data from the `data.ldif` file, that is being mounted from the secret, on startup.
+
+{{- end -}}

charts/apacheds/templates/common.yaml

@@ -0,0 +1,31 @@
+{{/* Make sure all variables are set properly */}}
+{{- include "common.values.setup" . }}
+
+{{/* Append the hardcoded settings */}}
+{{- define "apacheds.hardcodedValues" -}}
+env:
+    JAVA_OPTS: -Djava.awt.headless=true -Djava.security.egd=file:/dev/./urandom -Xms{{ .Values.resources.requests.memory | replace "Mi" "" }}m -Xmx{{ .Values.resources.limits.memory | replace "Mi" "" }}m
+{{ if .Values.persistence.ldifimport.enabled }}
+    LDIF_FILE: /etc/apacheds-data/data.ldif
+{{- end -}}
+{{- end -}}
+{{- $_ := mergeOverwrite .Values (include "apacheds.hardcodedValues" . | fromYaml) -}}
+
+{{/* add initContainer only if /var/apacheds/ is mounted from a volume */}}
+{{- define "apacheds.initContainers" -}}
+{{ if .Values.persistence.data.enabled }}
+initContainers:
+  changeowner:
+    name: changeowner
+    image: busybox
+    command: ["sh", "-c", "chown -vR 431:433 /var/apacheds/"]
+    volumeMounts:
+    - name: data
+      mountPath: /var/apacheds/
+{{- end -}}
+{{- end -}}
+
+{{- $_ := mergeOverwrite .Values (include "apacheds.initContainers" . | fromYaml) -}}
+
+{{/* Render the templates */}}
+{{ include "common.all" . }}

charts/apacheds/values.yaml

@@ -0,0 +1,149 @@
+#
+# IMPORTANT NOTE
+#
+# This chart inherits from the common library chart. You can check the default values/options here:
+# https://github.com/johanneskastl/helm-charts/tree/main/charts/common/values.yaml
+#
+
+image:
+  # -- image repository
+  repository: docker.io/johanneskastl/apacheds
+  # -- image tag
+  # @default -- chart.appVersion
+  tag:
+  # -- image pull policy
+  pullPolicy: IfNotPresent
+
+controller:
+  type: statefulset
+
+serviceAccount:
+  create: true
+
+# -- Configures service settings for the chart.
+# @default -- See values.yaml
+service:
+  main:
+    enabled: true
+    type: LoadBalancer
+    ports:
+      http:
+        enabled: false
+      ldap-tcp:
+        enabled: true
+        port: 389
+        protocol: TCP
+        targetPort: 10389
+      ldap-udp:
+        enabled: false
+        port: 389
+        protocol: UDP
+        targetPort: 10389
+      ldaps-tcp:
+        enabled: true
+        port: 636
+        protocol: TCP
+        targetPort: 10636
+      ldaps-udp:
+        enabled: false
+        port: 636
+        protocol: UDP
+        targetPort: 10636
+
+ingress:
+  # -- Enable and configure ingress settings for the chart under this key.
+  # @default -- See values.yaml
+  main:
+    enabled: false
+
+# -- Use environment variables from the apacheds-configuration secret
+# @default -- See values.yaml
+envFrom:
+  - secretRef:
+      name: apacheds-configuration
+
+# -- Configure persistence settings for the chart under this key.
+# @default -- See values.yaml
+persistence:
+  # -- Persistence for the application data
+  # @default -- See below
+  data:
+    # -- You normally want persistence for the LDAP data. Disable at your own peril...
+    enabled: true
+    # -- ApacheDS writes the data to /var/apacheds/
+    mountPath: /var/apacheds/
+    # -- There should only be one pod writing to the volume
+    accessMode: ReadWriteOnce
+    # -- Setting this to readOnly does not make sense
+    readOnly: false
+    # -- Do not delete the volume if the helm chart is being uninstalled, to prevent data loss...
+    retain: true
+  # -- For LDAPS you should have your JAVA keystore stored in Kubernetes in a secret and mounted into the pod. To do that set the `persistence.tlskeystore.name` key to the name of your existing secret in your values.yaml file.
+  # @default -- See below
+  tlskeystore:
+    # -- Set this to true to enable parsing the keystore file
+    enabled: false
+    # -- The keystore files needs to end up in /etc/apacheds/apacheds.jks
+    mountPath: /etc/apacheds/
+    type: secret
+    readOnly: true
+  # -- Set this to enabled if you want to import files from a secret. Then set `persistence.ldifimport.name` to the name of your Kubernetes secret in your values.yaml file.
+  # @default -- See below
+  ldifimport:
+    # -- Set this to true if you want to enable the import from a LDIF file
+    enabled: false
+    # -- You should store the LDIF information in a secret
+    type: secret
+    # -- The container image expects the LDIF file to import to be in /etc/apacheds-data/data.ldif
+    mountPath: /etc/apacheds-data/
+
+probes:
+  startup:
+    enabled: true
+    custom: true
+    spec:
+      exec:
+        command:
+          - sh
+          - -c
+          - test -f /tmp/apacheds_startup_finished
+      initialDelaySeconds: 210
+      periodSeconds: 10
+      timeoutSeconds: 1
+      failureThreshold: 30
+  liveness:
+    enabled: true
+    spec:
+      tcpSocket:
+        port: 10389
+      initialDelaySeconds: 150
+      periodSeconds: 15
+      timeoutSeconds: 1
+      failureThreshold: 3
+  readiness:
+    enabled: true
+    spec:
+      tcpSocket:
+        port: 10389
+      initialDelaySeconds: 150
+      periodSeconds: 15
+      timeoutSeconds: 1
+      failureThreshold: 3
+
+# -- Set the resource requests / limits for the main container.
+# @default -- See below
+resources:
+  # -- resource limits for the pod
+  # @default -- See below
+  limits:
+    # -- cpu limit
+    cpu: 250m
+    # -- memory limit
+    memory: 256Mi
+  # -- resource requests for the pod
+  # @default -- See below
+  requests:
+    # -- cpu request
+    cpu: 125m
+    # -- memory request
+    memory: 128Mi

charts/bind9/Chart.yaml

@@ -0,0 +1,28 @@
+---
+apiVersion: v2
+# renovate datasource=docker registryUrl=https://docker.io depName=internetsystemsconsortium/bind9
+appVersion: "9.19"
+description: A Helm chart for Bind9 using the official ISC docker image
+name: bind9
+version: 0.5.5
+kubeVersion: ">=1.16.0-0"
+keywords:
+  - bind9
+  - named
+  - dns
+  - resolver
+home: https://github.com/johanneskastl/helm-charts/tree/main/charts/bind9
+icon: https://www.isc.org/images/isclogos/Bind_9_ISC_Blue.jpg
+sources:
+  - https://gitlab.isc.org/isc-projects/bind9
+maintainers:
+  - name: johanneskastl
+    email: git@johannes-kastl.de
+dependencies:
+  - name: common
+    repository: https://johanneskastl.github.io/helm-charts/
+    version: 5.0.5
+annotations:
+  artifacthub.io/changes: |-
+    - kind: change
+      description: add https prefix in renovate comment

charts/bind9/README.md

@@ -0,0 +1,357 @@
+# bind9
+
+![Version: 0.5.5](https://img.shields.io/badge/Version-0.5.5-informational?style=flat-square) ![AppVersion: 9.19](https://img.shields.io/badge/AppVersion-9.19-informational?style=flat-square)
+
+A Helm chart for Bind9 using the official ISC docker image
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/johanneskastl/helm-charts/issues/)**
+
+## Source Code
+
+* <https://gitlab.isc.org/isc-projects/bind9>
+
+## Requirements
+
+Kubernetes: `>=1.16.0-0`
+
+## Dependencies
+
+| Repository | Name | Version |
+|------------|------|---------|
+| https://johanneskastl.github.io/helm-charts/ | common | 5.0.5 |
+
+## TL;DR
+
+```console
+helm repo add johanneskastl-helm-charts https://johanneskastl.github.io/helm-charts/
+helm repo update
+helm install bind9 johanneskastl-helm-charts/bind9
+```
+
+## Installing the Chart
+
+To install the chart with the release name `bind9`
+
+```console
+helm install bind9 johanneskastl-helm-charts/bind9
+```
+
+## Uninstalling the Chart
+
+To uninstall the `bind9` deployment
+
+```console
+helm uninstall bind9
+```
+
+The command removes all the Kubernetes components associated with the chart **including persistent volumes** and deletes the release.
+
+## Configuration
+
+Read through the [values.yaml](./values.yaml) file. It has several commented out suggested values.
+Other values may be used from the [values.yaml](https://github.com/johanneskastl/helm-charts/tree/main/charts/common/values.yaml) from the [common library](https://github.com/johanneskastl/helm-charts/tree/main/charts/common).
+
+Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`.
+
+```console
+helm install bind9 \
+  --set env.TZ="America/New York" \
+    johanneskastl-helm-charts/bind9
+```
+
+Alternatively, a YAML file that specifies the values for the above parameters can be provided while installing the chart.
+
+```console
+helm install bind9 johanneskastl-helm-charts/bind9 -f values.yaml
+```
+
+## Custom configuration
+
+This chart can be used to install either a validating resolver or an
+authoritative nameserver.
+
+This is controlled by setting the `chartMode` variable to either `resolver` or
+`authoritative`.
+
+### Setting up bind9 as a resolver
+
+By default, this chart will setup Bind9 as a resolver.
+
+In case you want to forward a zone to your internal nameservers, you can create a secret containing valid named configuration that might look something like this:
+
+```
+apiVersion: v1
+kind: Secret
+metadata:
+  name: my-named-configuration-secret
+stringData:
+  named.conf.local: |
+    zone "my.corporate-domain.example.org" {
+        type static-stub;
+        server-addresses {
+                192.168.1.1;
+                192.168.1.2;
+        };
+    };
+```
+
+Please pay attention that this can ONLY contain zone settings or similar, no `options` blocks are allowed (as they are already set in the configuration generated by the chart).
+
+You need to provide the name of this secret in the `values.yaml` file like so:
+
+```
+[...]
+persistence:
+  bind9userconfiguration:
+    enabled: true
+    name: my-named-configuration-secret
+[...]
+```
+
+After that, install the helm chart like described in the 'Installing the Chart' section.
+
+### Setting up bind as an authoritative nameserver
+
+You can use this chart to set up an authoritative nameserver by setting the `chartMode` value to `authoritative`. This will generate a basic named.conf with recursion disabled. However, you need to create a secret containing the actual nameserver configuration (i.e. zones) and let the chart mount this secret into the pod.
+
+First, create a secret like this:
+
+```
+apiVersion: v1
+kind: Secret
+metadata:
+  name: my-named-nameserver-configuration-secret
+stringData:
+  named.conf.local: |
+    zone "example.org" in {
+         type master;
+         file "/named_config/example.org.zone";
+         notify no;
+    };
+  example.org.zone: |
+    $TTL 2h                             ; default TTL
+    @ IN SOA dns.example.org.     dnsmaster.example.org. (
+                        2022032900      ; serial
+                        24h             ; refresh
+                        2h              ; retry
+                        1000h           ; expire
+                        2d )            ; minimum
+[...]
+```
+
+Please pay attention that this can ONLY contain zone settings or similar, no `options` blocks are allowed (as they are already set in the configuration generated by the chart).
+
+Notice that there are two keys in that secret, one for the `named.conf.local` and one for the zone file (`example.org.zone` in the example). Both of these keys are being mounted as files to `/named_config/`.
+The zone file is referenced in the named configuration contained in the `named.conf.local` part. The `named.conf.local` is being loaded by bind automatically due to the configuration that the helm chart sets up.
+
+To use your secret you need to provide the name of this secret in the `values.yaml` file like so:
+
+```
+[...]
+persistence:
+  bind9userconfiguration:
+    enabled: true
+    name: my-named-nameserver-configuration-secret
+[...]
+```
+
+## Values
+
+**Important**: When deploying an application Helm chart you can add more values from the common library chart [here](https://github.com/johanneskastl/helm-charts/tree/main/charts/common)
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| authoritative.dnssec_validation | bool | `true` |  |
+| authoritative.ipv6_enabled | bool | `true` |  |
+| authoritative.querylog | bool | `false` |  |
+| automountServiceAccountToken | bool | `false` |  |
+| chartMode | string | `"resolver"` |  |
+| command[0] | string | `"/usr/sbin/named"` |  |
+| command[1] | string | `"-g"` |  |
+| command[2] | string | `"-c"` |  |
+| command[3] | string | `"/etc/named/named.conf"` |  |
+| command[4] | string | `"-u"` |  |
+| command[5] | string | `"bind"` |  |
+| global.labels | object | `{}` |  |
+| global.selectorLables | object | `{}` |  |
+| image.pullPolicy | string | `"Always"` | image pull policy |
+| image.repository | string | `"docker.io/internetsystemsconsortium/bind9"` | image repository |
+| image.tag | string | `nil` | image tag |
+| ingress.main | object | See values.yaml | Enable and configure ingress settings for the chart under this key. |
+| mount_configuration_from_secret.enabled | bool | `false` |  |
+| mount_configuration_from_secret.secretName | string | `"my-secret"` |  |
+| persistence | object | See values.yaml | Configure persistence settings for the chart under this key. |
+| podSecurityContext.fsGroup | int | `106` |  |
+| probes.liveness.custom | bool | `true` |  |
+| probes.liveness.enabled | bool | `true` |  |
+| probes.liveness.spec.tcpSocket.port | int | `5053` |  |
+| probes.readiness.custom | bool | `true` |  |
+| probes.readiness.enabled | bool | `true` |  |
+| probes.readiness.spec.tcpSocket.port | int | `5053` |  |
+| probes.startup.custom | bool | `true` |  |
+| probes.startup.enabled | bool | `true` |  |
+| probes.startup.spec.initialDelaySeconds | int | `10` |  |
+| probes.startup.spec.tcpSocket.port | int | `5053` |  |
+| resolver.dnssec_validation | bool | `true` |  |
+| resolver.forwarders[0] | string | `"80.241.218.68"` |  |
+| resolver.forwarders[1] | string | `"159.69.114.157"` |  |
+| resolver.forwarders[2] | string | `"176.9.93.198"` |  |
+| resolver.ipv6_enabled | bool | `true` |  |
+| resolver.querylog | bool | `false` |  |
+| service.dns-tcp.annotations | object | `{}` |  |
+| service.dns-tcp.enabled | bool | `true` |  |
+| service.dns-tcp.labels | object | `{}` |  |
+| service.dns-tcp.nameOverride | string | `"dns-tcp"` |  |
+| service.dns-tcp.ports.dns-tcp.enabled | bool | `true` |  |
+| service.dns-tcp.ports.dns-tcp.port | int | `53` |  |
+| service.dns-tcp.ports.dns-tcp.protocol | string | `"TCP"` |  |
+| service.dns-tcp.ports.dns-tcp.targetPort | int | `5053` |  |
+| service.dns-tcp.type | string | `"ClusterIP"` |  |
+| service.dns-udp.annotations | object | `{}` |  |
+| service.dns-udp.enabled | bool | `true` |  |
+| service.dns-udp.labels | object | `{}` |  |
+| service.dns-udp.ports.dns-udp.enabled | bool | `true` |  |
+| service.dns-udp.ports.dns-udp.port | int | `53` |  |
+| service.dns-udp.ports.dns-udp.protocol | string | `"UDP"` |  |
+| service.dns-udp.ports.dns-udp.targetPort | int | `5053` |  |
+| service.dns-udp.type | string | `"ClusterIP"` |  |
+| service.main.enabled | bool | `false` |  |
+| serviceAccount.create | bool | `true` |  |
+
+## Changelog
+
+All notable changes to this Helm chart will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+### Version 0.5.5
+
+#### Added
+
+N/A
+
+#### Changed
+
+* add https prefix in renovate comment
+
+#### Fixed
+
+N/A
+
+### Version 0.5.4
+
+#### Added
+
+N/A
+
+#### Changed
+
+* maintainer e-mail
+
+#### Fixed
+
+N/A
+
+### Version 0.5.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* registryURL in comment in Chart.yaml
+* add docker.io to image.repository to make this explicit
+
+#### Fixed
+
+N/A
+
+### Version 0.5.2
+
+#### Added
+
+* add comment in Chart.yaml to allow updates via Renovatebot
+
+#### Changed
+
+N/A
+
+#### Fixed
+
+N/A
+
+### Version 0.5.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+N/A
+
+#### Fixed
+
+* properly set dnssec-validation instead of hardcoding yes
+
+### Version 0.5.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 9.19
+
+#### Fixed
+
+N/A
+
+### Version 0.4.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+N/A
+
+#### Fixed
+
+* set image pullPolicy to Always, as the upstream tag is updated in-place
+
+### Version 0.4.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+N/A
+
+#### Fixed
+
+* fix IPv6 syntax in named.conf secrets
+
+### Version 0.4.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* first version of the chart in this repository
+
+#### Fixed
+
+N/A
+
+## Support
+
+Open an [issue](https://github.com/johanneskastl/helm-charts/issues/).

charts/bind9/README_CHANGELOG.md.gotmpl

@@ -0,0 +1,136 @@
+{{- define "custom.changelog" -}}
+## Changelog
+
+All notable changes to this Helm chart will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+### Version 0.5.5
+
+#### Added
+
+N/A
+
+#### Changed
+
+* add https prefix in renovate comment
+
+#### Fixed
+
+N/A
+
+### Version 0.5.4
+
+#### Added
+
+N/A
+
+#### Changed
+
+* maintainer e-mail
+
+#### Fixed
+
+N/A
+
+### Version 0.5.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* registryURL in comment in Chart.yaml
+* add docker.io to image.repository to make this explicit
+
+#### Fixed
+
+N/A
+
+### Version 0.5.2
+
+#### Added
+
+* add comment in Chart.yaml to allow updates via Renovatebot
+
+#### Changed
+
+N/A
+
+#### Fixed
+
+N/A
+
+### Version 0.5.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+N/A
+
+#### Fixed
+
+* properly set dnssec-validation instead of hardcoding yes
+
+### Version 0.5.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 9.19
+
+#### Fixed
+
+N/A
+
+### Version 0.4.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+N/A
+
+#### Fixed
+
+* set image pullPolicy to Always, as the upstream tag is updated in-place
+
+### Version 0.4.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+N/A
+
+#### Fixed
+
+* fix IPv6 syntax in named.conf secrets
+
+### Version 0.4.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* first version of the chart in this repository
+
+#### Fixed
+
+N/A
+
+{{- end -}}

charts/bind9/README_CONFIG.md.gotmpl

@@ -0,0 +1,99 @@
+{{- define "custom.notes" -}}
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/johanneskastl/helm-charts/issues/)**
+{{- end -}}
+
+{{- define "custom.custom.configuration.header" -}}
+## Custom configuration
+{{- end -}}
+
+{{- define "custom.custom.configuration" -}}
+{{ template "custom.custom.configuration.header" . }}
+
+This chart can be used to install either a validating resolver or an
+authoritative nameserver.
+
+This is controlled by setting the `chartMode` variable to either `resolver` or
+`authoritative`.
+
+### Setting up bind9 as a resolver
+
+By default, this chart will setup Bind9 as a resolver.
+
+In case you want to forward a zone to your internal nameservers, you can create a secret containing valid named configuration that might look something like this:
+
+```
+apiVersion: v1
+kind: Secret
+metadata:
+  name: my-named-configuration-secret
+stringData:
+  named.conf.local: |
+    zone "my.corporate-domain.example.org" {
+        type static-stub;
+        server-addresses {
+                192.168.1.1;
+                192.168.1.2;
+        };
+    };
+```
+
+Please pay attention that this can ONLY contain zone settings or similar, no `options` blocks are allowed (as they are already set in the configuration generated by the chart).
+
+You need to provide the name of this secret in the `values.yaml` file like so:
+
+```
+[...]
+persistence:
+  bind9userconfiguration:
+    enabled: true
+    name: my-named-configuration-secret
+[...]
+```
+
+After that, install the helm chart like described in the 'Installing the Chart' section.
+
+### Setting up bind as an authoritative nameserver
+
+You can use this chart to set up an authoritative nameserver by setting the `chartMode` value to `authoritative`. This will generate a basic named.conf with recursion disabled. However, you need to create a secret containing the actual nameserver configuration (i.e. zones) and let the chart mount this secret into the pod.
+
+First, create a secret like this:
+
+```
+apiVersion: v1
+kind: Secret
+metadata:
+  name: my-named-nameserver-configuration-secret
+stringData:
+  named.conf.local: |
+    zone "example.org" in {
+         type master;
+         file "/named_config/example.org.zone";
+         notify no;
+    };
+  example.org.zone: |
+    $TTL 2h                             ; default TTL
+    @ IN SOA dns.example.org.     dnsmaster.example.org. (
+                        2022032900      ; serial
+                        24h             ; refresh
+                        2h              ; retry
+                        1000h           ; expire
+                        2d )            ; minimum
+[...]
+```
+
+Please pay attention that this can ONLY contain zone settings or similar, no `options` blocks are allowed (as they are already set in the configuration generated by the chart).
+
+Notice that there are two keys in that secret, one for the `named.conf.local` and one for the zone file (`example.org.zone` in the example). Both of these keys are being mounted as files to `/named_config/`.
+The zone file is referenced in the named configuration contained in the `named.conf.local` part. The `named.conf.local` is being loaded by bind automatically due to the configuration that the helm chart sets up.
+
+To use your secret you need to provide the name of this secret in the `values.yaml` file like so:
+
+```
+[...]
+persistence:
+  bind9userconfiguration:
+    enabled: true
+    name: my-named-nameserver-configuration-secret
+[...]
+```
+{{- end -}}

charts/bind9/templates/common.yaml

@@ -0,0 +1 @@
+{{ include "common.all" . }}

charts/bind9/templates/secret-named-conf-authoritative.yaml

@@ -0,0 +1,38 @@
+{{ if eq .Values.chartMode "authoritative" -}}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: bind9-named-conf
+stringData:
+  named.conf: |
+    options {
+      directory "/var/cache/bind";
+
+      {{ if .Values.authoritative.dnssec_validation -}}
+      dnssec-validation {{ .Values.authoritative.dnssec_validation }};
+      {{- else -}}
+      dnssec-validation no;
+      {{- end }}
+      listen-on port 5053 { any; };
+      {{ if .Values.authoritative.ipv6_enabled -}}
+      listen-on-v6 port 5053 { any; };
+      {{- else -}}
+      listen-on-v6 { none; };
+      {{- end }}
+      recursion no;
+      allow-query { any; };
+
+      {{ if .Values.authoritative.querylog -}}
+      querylog yes;
+      {{- else -}}
+      querylog no;
+      {{- end }}
+
+    };
+    {{ if .Values.persistence.bind9userconfiguration.enabled -}}
+    include "/named_config/named.conf.local";
+    {{- end }}
+
+    // use the default zones
+    include "/etc/bind/named.conf.default-zones";
+{{- end }}

charts/bind9/templates/secret-named-conf-resolver.yaml

@@ -0,0 +1,44 @@
+{{ if eq .Values.chartMode "resolver" -}}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: bind9-named-conf
+stringData:
+  named.conf: |
+    options {
+      directory "/var/cache/bind";
+
+      {{ if .Values.resolver.dnssec_validation -}}
+      dnssec-validation {{ .Values.resolver.dnssec_validation }};
+      {{- else -}}
+      dnssec-validation no;
+      {{- end }}
+      listen-on port 5053 { any; };
+      {{ if .Values.resolver.ipv6_enabled -}}
+      listen-on-v6 port 5053 { any; };
+      {{- else -}}
+      listen-on-v6 { none; };
+      {{- end }}
+      recursion yes;
+      allow-query { any; };
+
+      {{ if .Values.resolver.querylog -}}
+      querylog yes;
+      {{- else -}}
+      querylog no;
+      {{- end }}
+
+      forwarders {
+      {{- range .Values.resolver.forwarders }}
+        {{ . }};
+      {{- end }}
+      };
+
+    };
+    {{ if .Values.persistence.bind9userconfiguration.enabled -}}
+    include "/named_config/named.conf.local";
+    {{- end }}
+
+    // use the default zones
+    include "/etc/bind/named.conf.default-zones";
+{{- end }}

charts/bind9/values.yaml

@@ -0,0 +1,158 @@
+#
+# IMPORTANT NOTE
+#
+# This chart inherits from the common library chart. You can check the default values/options here:
+# https://github.com/johanneskastl/helm-charts/tree/main/charts/common/values.yaml
+#
+
+# To use this chart to setup a resolver using bind9, enable the resolver mode
+# Possible values:
+# 'resolver': set up a resolver
+# 'authoritative': set up an authoritative nameserver
+#
+chartMode: resolver
+
+# When using this chart to set up a resolver, set the chartMode to 'resolver'
+# and add forwarders and options as you see fit
+resolver:
+  forwarders:
+    - '80.241.218.68'
+    - '159.69.114.157'
+    - '176.9.93.198'
+  dnssec_validation: true
+  ipv6_enabled: true
+  querylog: false
+
+authoritative:
+  dnssec_validation: true
+  ipv6_enabled: true
+  querylog: false
+
+#
+# To enhance the basic configuration of this chart, you can create a secret
+# containing one key called 'named.conf.local' containing your
+# bind9 resolver or nameserver configuration
+# ATTENTION: This must not contain an `options` block, only zone settings
+#            or similar are allowed
+#
+# Example:
+# ```
+# apiVersion: v1
+# kind: Secret
+# metadata:
+#   name: my-secret
+# stringData:
+#   named.conf.local: |
+#     zone "my.corporate-domain.example.org" {
+#         type static-stub;
+#         server-addresses {
+#                 192.168.1.1;
+#                 192.168.1.2;
+#         };
+#     };
+# ```
+#
+mount_configuration_from_secret:
+  enabled: false
+  secretName: my-secret
+
+image:
+  # -- image repository
+  repository: docker.io/internetsystemsconsortium/bind9
+  # as the tag is updated in-place in the upstream image, set the policy to Always
+  # https://hub.docker.com/r/internetsystemsconsortium/bind9/tags
+  # -- image pull policy
+  pullPolicy: Always
+  # -- image tag
+  tag:
+
+command:
+  - "/usr/sbin/named"
+  - "-g"
+  - "-c"
+  - "/etc/named/named.conf"
+  - "-u"
+  - "bind"
+
+serviceAccount:
+  create: true
+
+automountServiceAccountToken: false
+
+service:
+  main:
+    enabled: false
+  dns-tcp:
+    enabled: true
+    nameOverride: dns-tcp
+    type: ClusterIP
+    annotations: {}
+    labels: {}
+    ports:
+      dns-tcp:
+        port: 53
+        targetPort: 5053
+        enabled: true
+        protocol: TCP
+  dns-udp:
+    enabled: true
+    type: ClusterIP
+    annotations: {}
+    labels: {}
+    ports:
+      dns-udp:
+        port: 53
+        targetPort: 5053
+        enabled: true
+        protocol: UDP
+
+podSecurityContext:
+  fsGroup: 106
+
+probes:
+  liveness:
+    enabled: true
+    custom: true
+    spec:
+      tcpSocket:
+        port: 5053
+  readiness:
+    enabled: true
+    custom: true
+    spec:
+      tcpSocket:
+        port: 5053
+  startup:
+    enabled: true
+    custom: true
+    spec:
+      tcpSocket:
+        port: 5053
+      initialDelaySeconds: 10
+
+global:
+  labels: {}
+  selectorLables: {}
+
+ingress:
+  # -- Enable and configure ingress settings for the chart under this key.
+  # @default -- See values.yaml
+  main:
+    enabled: false
+
+# -- Configure persistence settings for the chart under this key.
+# @default -- See values.yaml
+persistence:
+  config:
+    enabled: false
+  bind9namedconf:
+    enabled: true
+    name: bind9-named-conf
+    type: secret
+    mountPath: /etc/named/
+    readOnly: true
+  bind9userconfiguration:
+    enabled: false
+    type: secret
+    mountPath: /named_config/
+    readOnly: true

charts/blocky/Chart.yaml

@@ -1,9 +1,10 @@
 ---
 apiVersion: v2
-appVersion: v0.20
+# renovate datasource=docker registryUrl=https://ghcr.io depName=0xerr0r/blocky
+appVersion: v0.28.2
 description: DNS proxy as ad-blocker for local network
 name: blocky
-version: 11.0.4
+version: 11.15.0
 kubeVersion: ">=1.19.0-0"
 keywords:
   - blocky
@@ -15,16 +16,16 @@ sources:
   - https://github.com/0xERR0R/blocky
 maintainers:
   - name: johanneskastl
-    email: kastl@b1-systems.de
+    email: git@johannes-kastl.de
 dependencies:
   - name: common
     repository: https://johanneskastl.github.io/helm-charts/
-    version: 5.0.0
+    version: 5.0.5
   - name: redis
     repository: https://charts.bitnami.com/bitnami
-    version: 16.13.1
+    version: 25.3.2
     condition: redis.enabled
 annotations:
   artifacthub.io/changes: |-
     - kind: changed
-      description: README cleanup
+      description: update dependency redis to 25.3.2

charts/blocky/README.md

@@ -1,6 +1,6 @@
 # blocky
 
-![Version: 11.0.4](https://img.shields.io/badge/Version-11.0.4-informational?style=flat-square) ![AppVersion: v0.20](https://img.shields.io/badge/AppVersion-v0.18-informational?style=flat-square)
+![Version: 11.15.0](https://img.shields.io/badge/Version-11.15.0-informational?style=flat-square) ![AppVersion: v0.28.2](https://img.shields.io/badge/AppVersion-v0.28.2-informational?style=flat-square)
 
 DNS proxy as ad-blocker for local network
 
@@ -18,8 +18,8 @@ Kubernetes: `>=1.19.0-0`
 
 | Repository | Name | Version |
 |------------|------|---------|
-| https://charts.bitnami.com/bitnami | redis | 16.13.1 |
-| https://johanneskastl.github.io/helm-charts/ | common | 5.0.0 |
+| https://charts.bitnami.com/bitnami | redis | 25.3.2 |
+| https://johanneskastl.github.io/helm-charts/ | common | 5.0.5 |
 
 ## TL;DR
 
@@ -77,7 +77,7 @@ N/A
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
 | config | string | see URL to default config | Full list of options https://github.com/0xERR0R/blocky/blob/v0.18/docs/config.yml |
-| controller.replicas | int | `1` | (int) Number of pods to load balance between |
+| controller.replicas | int | `1` | Number of pods to load balance between |
 | controller.strategy | string | `"RollingUpdate"` | Set the controller upgrade strategy |
 | env | object | See below | environment variables. See [image docs](https://0xerr0r.github.io/blocky/installation/#run-with-docker) for more details. |
 | env.TZ | string | `"UTC"` | Set the container timezone |
@@ -100,6 +100,231 @@ N/A
 
 ## Changelog
 
+All notable changes to this Helm chart will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+### Version 11.9.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update blocky to v0.28.2
+
+#### Fixed
+
+N/A
+
+### Version 11.9.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* add https prefix to renovate comment
+
+#### Fixed
+
+N/A
+
+### Version 11.9.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update blocky to 0.28.1
+
+#### Fixed
+
+N/A
+
+### Version 11.9.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update blocky to 0.28.0
+
+#### Fixed
+
+N/A
+
+### Version 11.8.4
+
+#### Added
+
+* add comment in Chart.yaml to allow updates via Renovatebot
+
+#### Changed
+
+N/A
+
+### Version 11.8.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update redis dependency to 23.2.12
+
+### Version 11.8.2
+
+(skipped)
+
+### Version 11.8.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update redis dependency to 23.2.3
+
+### Version 11.8.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to v0.27.0
+
+### Version 11.7.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to v0.26.2
+
+### Version 11.7.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to v0.26.1
+
+### Version 11.7.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to v0.26
+
+### Version 11.6.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* add new service dns with port 53 for both UDP and TCP
+
+### Version 11.5.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to v0.25
+
+### Version 11.4.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to v0.24
+
+#### Fixed
+
+N/A
+
+### Version 11.3.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to v0.23
+
+#### Fixed
+
+N/A
+
+### Version 11.2.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to v0.22
+
+#### Fixed
+
+N/A
+
+### Version 11.1.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* generate README with helm-docs
+
+#### Fixed
+
+N/A
+
+### Version 11.1.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to v0.21
+
+#### Fixed
+
+N/A
+
 ### Version 11.0.4
 
 #### Added
@@ -114,8 +339,6 @@ N/A
 
 N/A
 
-## Changelog
-
 ### Version 11.0.3
 
 #### Added

charts/blocky/README_CHANGELOG.md.gotmpl

@@ -0,0 +1,300 @@
+{{- define "custom.changelog" -}}
+## Changelog
+
+All notable changes to this Helm chart will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+### Version 11.9.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update blocky to v0.28.2
+
+#### Fixed
+
+N/A
+
+### Version 11.9.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* add https prefix to renovate comment
+
+#### Fixed
+
+N/A
+
+### Version 11.9.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update blocky to 0.28.1
+
+#### Fixed
+
+N/A
+
+### Version 11.9.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update blocky to 0.28.0
+
+#### Fixed
+
+N/A
+
+### Version 11.8.4
+
+#### Added
+
+* add comment in Chart.yaml to allow updates via Renovatebot
+
+#### Changed
+
+N/A
+
+### Version 11.8.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update redis dependency to 23.2.12
+
+### Version 11.8.2
+
+(skipped)
+
+### Version 11.8.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update redis dependency to 23.2.3
+
+### Version 11.8.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to v0.27.0
+
+### Version 11.7.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to v0.26.2
+
+### Version 11.7.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to v0.26.1
+
+### Version 11.7.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to v0.26
+
+### Version 11.6.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* add new service dns with port 53 for both UDP and TCP
+
+### Version 11.5.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to v0.25
+
+### Version 11.4.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to v0.24
+
+#### Fixed
+
+N/A
+
+### Version 11.3.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to v0.23
+
+#### Fixed
+
+N/A
+
+### Version 11.2.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to v0.22
+
+#### Fixed
+
+N/A
+
+### Version 11.1.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* generate README with helm-docs
+
+#### Fixed
+
+N/A
+
+### Version 11.1.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to v0.21
+
+#### Fixed
+
+N/A
+
+### Version 11.0.4
+
+#### Added
+
+N/A
+
+#### Changed
+
+* README.md: cleanup
+
+#### Fixed
+
+N/A
+
+### Version 11.0.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* README.md: remove another k8s-at-home
+
+#### Fixed
+
+N/A
+
+### Version 11.0.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* README.md: remove leftover references to k8s-at-home in URLs
+* README.md: cleanup
+
+#### Fixed
+
+N/A
+
+### Version 11.0.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 0.20
+
+#### Fixed
+
+N/A
+
+### Version 11.0.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* Forked the chart from k8s-at-home (at version 10.5.2)
+
+#### Fixed
+
+N/A
+
+{{- end -}}

charts/blocky/README_CONFIG.md.gotmpl

@@ -1,15 +1,10 @@
-{{- define "custom.custom.configuration.header" -}}
-## Custom configuration
+{{- define "custom.notes" -}}
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/johanneskastl/helm-charts/issues/)**
 {{- end -}}
 
 {{- define "custom.custom.configuration" -}}
-{{ template "custom.custom.configuration.header" . }}
+## Custom configuration
 
-### [10.3.0]
-
-### Added
-
-- Add dependency for redis database as the application now supports it. [Redis - Blocky](https://0xerr0r.github.io/blocky/configuration/#redis)
-- The redis dependency increases the minimum latest version of k8s to version 1.19+
+N/A
 
 {{- end -}}

charts/blocky/values.yaml

@@ -34,6 +34,21 @@ service:
     ports:
       http:
         port: 4000
+  dns:
+    enabled: false
+    type: ClusterIP
+    externalTrafficPolicy: Local
+    ports:
+      dns-tcp:
+        enabled: true
+        port: 53
+        protocol: TCP
+        targetPort: 53
+      dns-udp:
+        enabled: true
+        port: 53
+        protocol: UDP
+        targetPort: 53
   dns-tcp:
     enabled: false
     type: ClusterIP

charts/common/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: common
 description: Function library for charts that were forked from k8s-at-home after its deprecation
 type: library
-version: 5.0.1
+version: 5.0.5
 kubeVersion: ">=1.16.0-0"
 keywords:
   - common

charts/common/README.md

@@ -1,10 +1,10 @@
 # common
 
-![Version: 5.0.1](https://img.shields.io/badge/Version-5.0.0-informational?style=flat-square) ![Type: library](https://img.shields.io/badge/Type-library-informational?style=flat-square)
+![Version: 5.0.5](https://img.shields.io/badge/Version-5.0.5-informational?style=flat-square) ![Type: library](https://img.shields.io/badge/Type-library-informational?style=flat-square)
 
-Function library chart
+Function library for charts that were forked from k8s-at-home after its deprecation
 
-Forked from the [k8s-at-home library-charts](https://github.com/k8s-at-home/library-charts/) repository, as it is unfortunately deprecated.
+This chart was forked from the [k8s-at-home library charts](https://github.com/k8s-at-home/library-charts) repository, as it will no longer be maintained. As I am using several of the k8s-at-home charts, I will keep maintaining this chart and use it for the charts in this repository.
 
 ## Requirements
 
@@ -39,7 +39,7 @@ Read through the [values.yaml](./values.yaml) file. It has several commented out
 
 ## Custom configuration
 
-None.
+N/A
 
 ## Values
 
@@ -209,6 +209,7 @@ None.
 | service.main.ipFamilyPolicy | string | `nil` | Specify the ip policy. Options: SingleStack, PreferDualStack, RequireDualStack |
 | service.main.labels | object | `{}` | Provide additional labels which may be required. |
 | service.main.nameOverride | string | `nil` | Override the name suffix that is used for this service |
+| service.main.namePrefix | string | `nil` | Override the name prefix that is used for this service |
 | service.main.ports | object | See below | Configure the Service port information here. Additional ports can be added by adding a dictionary key similar to the 'http' service. |
 | service.main.ports.http.enabled | bool | `true` | Enables or disables the port |
 | service.main.ports.http.nodePort | string | `nil` | Specify the nodePort value for the LoadBalancer and NodePort service types. [[ref]](https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport) |
@@ -235,6 +236,64 @@ All notable changes to this library Helm chart will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+### [5.0.5]
+
+#### Added
+
+N/A
+
+#### Changed
+
+N/A
+
+#### Fixed
+
+- fix whitespace errors in statefulset template annotations
+- only include volumeClaimTemplates in statefulset, if they are defined
+
+### [5.0.4]
+
+#### Added
+
+N/A
+
+#### Changed
+
+N/A
+
+#### Fixed
+
+- fix whitespace errors in deployment template annotations
+
+### [5.0.3]
+
+#### Added
+
+- add namePrefix for services
+
+#### Changed
+
+N/A
+
+#### Fixed
+
+- fix whitespace errors in service annotations
+- fix whitespace errors in pod spec before serviceAccountName
+
+### [5.0.2]
+
+#### Added
+
+N/A
+
+#### Changed
+
+- generate README with helm-docs
+
+#### Fixed
+
+N/A
+
 ### [5.0.1]
 
 #### Added
@@ -266,3 +325,6 @@ N/A
 ## Support
 
 Open an [issue](https://github.com/johanneskastl/helm-charts/issues/).
+
+----------------------------------------------
+Autogenerated from chart metadata using [helm-docs v0.1.1](https://github.com/k8s-at-home/helm-docs/releases/v0.1.1)

charts/common/README.md.gotmpl

@@ -3,20 +3,17 @@ johanneskastl
 {{- end -}}
 
 {{- define "custom.repository.url" -}}
-https://github.com/johanneskastl/helm-charts
+https://github.com/johanneskastl/helm-charts/
 {{- end -}}
 
 {{- define "custom.helm.url" -}}
-https://github.com/johanneskastl/helm-charts
+https://github.com/johanneskastl/helm-charts/
 {{- end -}}
 
 {{- define "custom.helm.path" -}}
 {{ template "custom.repository.organization" . }}/{{ template "chart.name" . }}
 {{- end -}}
 
-{{- define "custom.notes" -}}
-{{- end -}}
-
 {{- define "custom.requirements" -}}
 ## Requirements
 
@@ -59,7 +56,7 @@ Read through the [values.yaml](./values.yaml) file. It has several commented out
 {{- define "custom.support" -}}
 ## Support
 
-- Open an [issue](https://github.com/johanneskastl/helm-charts/issues/)
+Open an [issue](https://github.com/johanneskastl/helm-charts/issues/).
 {{- end -}}
 
 {{ template "chart.header" . }}

charts/common/README_CHANGELOG.md.gotmpl

@@ -10,6 +10,64 @@ All notable changes to this library Helm chart will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+### [5.0.5]
+
+#### Added
+
+N/A
+
+#### Changed
+
+N/A
+
+#### Fixed
+
+- fix whitespace errors in statefulset template annotations
+- only include volumeClaimTemplates in statefulset, if they are defined
+
+### [5.0.4]
+
+#### Added
+
+N/A
+
+#### Changed
+
+N/A
+
+#### Fixed
+
+- fix whitespace errors in deployment template annotations
+
+### [5.0.3]
+
+#### Added
+
+- add namePrefix for services
+
+#### Changed
+
+N/A
+
+#### Fixed
+
+- fix whitespace errors in service annotations
+- fix whitespace errors in pod spec before serviceAccountName
+
+### [5.0.2]
+
+#### Added
+
+N/A
+
+#### Changed
+
+- generate README with helm-docs
+
+#### Fixed
+
+N/A
+
 ### [5.0.1]
 
 #### Added

charts/common/README_CONFIG.md.gotmpl

@@ -23,7 +23,7 @@ Include this chart as a dependency in your `Chart.yaml` e.g.
 # Chart.yaml
 dependencies:
 - name: common
-  version: 4.5.1
+  version: 5.0.0
   repository: {{ template "custom.helm.url" }}
 ```
 

charts/common/templates/_deployment.tpl

@@ -41,7 +41,7 @@ spec:
     metadata:
       {{- with include ("common.podAnnotations") . }}
       annotations:
-        {{- . | nindent 8 }}
+        {{- . | trim | nindent 8 }}
       {{- end }}
       labels:
         {{- include "common.labels.selectorLabels" . | nindent 8 }}

charts/common/templates/_statefulset.tpl

@@ -36,7 +36,7 @@ spec:
     metadata:
       {{- with include ("common.podAnnotations") . }}
       annotations:
-        {{- . | nindent 8 }}
+        {{- . | trim | nindent 8 }}
       {{- end }}
       labels:
         {{- include "common.labels.selectorLabels" . | nindent 8 }}
@@ -45,6 +45,7 @@ spec:
         {{- end }}
     spec:
       {{- include "common.controller.pod" . | nindent 6 }}
+  {{ with .Values.volumeClaimTemplates }}
   volumeClaimTemplates:
     {{- range $index, $vct := .Values.volumeClaimTemplates }}
     - metadata:
@@ -59,4 +60,5 @@ spec:
         storageClassName: {{ if (eq "-" $vct.storageClass) }}""{{- else }}{{ $vct.storageClass | quote }}{{- end }}
         {{- end }}
     {{- end }}
+  {{- end }}
 {{- end }}

charts/common/templates/classes/_service.tpl

@@ -14,6 +14,9 @@ within the common library.
 {{- if and (hasKey $values "nameOverride") $values.nameOverride -}}
   {{- $serviceName = printf "%v-%v" $serviceName $values.nameOverride -}}
 {{ end -}}
+{{- if and (hasKey $values "namePrefix") $values.namePrefix -}}
+  {{- $serviceName = printf "%v-%v" $values.namePrefix $serviceName -}}
+{{ end -}}
 {{- $svcType := $values.type | default "" -}}
 {{- $primaryPort := get $values.ports (include "common.classes.service.ports.primary" (dict "values" $values)) }}
 ---
@@ -29,7 +32,7 @@ metadata:
     traefik.ingress.kubernetes.io/service.serversscheme: https
   {{- end }}
   {{- with (merge ($values.annotations | default dict) (include "common.annotations" $ | fromYaml)) }}
-    {{ toYaml . | nindent 4 }}
+    {{- toYaml . | nindent 4 }}
   {{- end }}
 spec:
   {{- if (or (eq $svcType "ClusterIP") (empty $svcType)) }}

charts/common/templates/lib/controller/_pod.tpl

@@ -5,7 +5,7 @@ The pod definition included in the controller.
   {{- with .Values.imagePullSecrets }}
 imagePullSecrets:
     {{- toYaml . | nindent 2 }}
-  {{- end }}
+  {{- end -}}
 serviceAccountName: {{ include "common.names.serviceAccountName" . }}
 automountServiceAccountToken: {{ .Values.automountServiceAccountToken }}
   {{- with .Values.podSecurityContext }}

charts/common/values.yaml

@@ -259,6 +259,9 @@ service:
     # -- Override the name suffix that is used for this service
     nameOverride:
 
+    # -- Override the name prefix that is used for this service
+    namePrefix:
+
     # -- Set the service type
     type: ClusterIP
 

charts/hedgedoc/.helmignore

@@ -0,0 +1,23 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/

charts/hedgedoc/Chart.yaml

@@ -0,0 +1,34 @@
+---
+apiVersion: v2
+# renovate datasource=docker registryUrl=https://ghcr.io depName=linuxserver/hedgedoc
+appVersion: 1.10.7-ls183
+description: HedgeDoc lets you create real-time collaborative markdown notes.
+name: hedgedoc
+version: 2.2.51
+kubeVersion: ">=1.19.0-0"
+keywords:
+  - hedgedoc
+  - hedge
+  - doc
+  - markdown
+  - editor
+home: https://github.com/johanneskastl/helm-charts/tree/main/charts/hedgedoc
+icon: "https://avatars1.githubusercontent.com/u/67865462"
+sources:
+  - https://github.com/hedgedoc/hedgedoc
+  - https://hub.docker.com/r/linuxserver/hedgedoc
+maintainers:
+  - name: johanneskastl
+    email: git@johannes-kastl.de
+dependencies:
+  - name: common
+    repository: https://johanneskastl.github.io/helm-charts/
+    version: 5.0.5
+  - name: mariadb
+    version: ~1.0.5
+    repository: https://nicholaswilde.github.io/helm-charts/
+    condition: mariadb.enabled
+annotations:
+  artifacthub.io/changes: |
+    - kind: changed
+      description: update hedgedoc to 1.10.7-ls183

charts/hedgedoc/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

charts/hedgedoc/README_CONFIG.md.gotmpl

@@ -0,0 +1,15 @@
+{{- define "custom.notes" -}}
+This chart was forked from Nicholas Wilde's [helm-charts](https://github.com/nicholaswilde/helm-charts) repository, after it seemed to be abandoned.
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/johanneskastl/helm-charts/issues/)**
+{{- end -}}
+
+{{- define "custom.custom.configuration.header" -}}
+## Custom configuration
+{{- end -}}
+
+{{- define "custom.custom.configuration" -}}
+{{ template "custom.custom.configuration.header" . }}
+
+N/A
+{{- end -}}

charts/hedgedoc/templates/NOTES.txt

@@ -0,0 +1 @@
+{{- include "common.notes.defaultNotes" . -}}

charts/hedgedoc/templates/common.yaml

@@ -0,0 +1,4 @@
+{{/* Make sure all variables are set properly */}}
+{{- include "common.values.setup" . }}
+
+{{ include "common.all" . }}

charts/hedgedoc/values.yaml

@@ -0,0 +1,82 @@
+---
+#
+# IMPORTANT NOTE
+#
+# This chart inherits from the common library chart. You can check the default values/options here:
+# https://github.com/johanneskastl/helm-charts/tree/main/charts/common/values.yaml
+#
+
+image:
+  repository: ghcr.io/linuxserver/hedgedoc
+  pullPolicy: IfNotPresent
+  tag: ""
+
+secret: {}
+  # DB_PASS: "hedgedoc-pass"
+
+# See more environment variables in the hedgedoc documentation
+# https://github.com/linuxserver/docker-hedgedoc#parameters
+env:
+  # set this to example.org
+  CMD_DOMAIN:
+  # set this to "['localhost', 'example.org']"
+  CMD_ALLOW_ORIGIN:
+  # CMD_PROTOCOL_USESSL: false
+  # CMD_URL_ADDPORT: false
+  # TZ:
+  # PUID: "1000"
+  # PGID: "1000"
+  # DB_USER: "hedgedoc"
+  # DB_HOST: "mariadb"
+  # DB_NAME: "hedgedoc"
+  # DB_PORT: "3306"
+
+service:
+  main:
+    enabled: true
+    ports:
+      http:
+        enabled: true
+        port: 3000
+
+ingress:
+  main:
+    enabled: false
+
+persistence:
+  config:
+    enabled: false
+    emptyDir: false
+    mountPath: /config
+
+controller:
+  strategy: RollingUpdate
+
+probes:
+  liveness:
+    spec:
+      initialDelaySeconds: 30
+      timeoutSeconds: 10
+      failureThreshold: 5
+  readiness:
+    spec:
+      initialDelaySeconds: 30
+      timeoutSeconds: 10
+      failureThreshold: 5
+  startup:
+    spec:
+      initialDelaySeconds: 30
+      timeoutSeconds: 10
+      failureThreshold: 5
+
+# Enable mariadb
+# https://github.com/nicholaswilde/helm-charts/blob/main/charts/mariadb/values.yaml
+mariadb:
+  enabled: false
+  secret:
+    MYSQL_ROOT_PASSWORD: hedgedoc-pass
+    MYSQL_PASSWORD: hedgedoc-pass
+  env:
+    MYSQL_USER: hedgedoc
+    MYSQL_DATABASE: hedgedoc
+  fullnameOverride: template-mariadb

charts/heimdall/Chart.yaml

@@ -1,9 +1,10 @@
 ---
 apiVersion: v2
-appVersion: 2.2.2
+# renovate datasource=docker registryUrl=https://ghcr.io depName=linuxserver/heimdall
+appVersion: v2.7.6-ls338
 description: An Application dashboard and launcher
 name: heimdall
-version: 9.0.0
+version: 9.4.10
 kubeVersion: ">=1.16.0-0"
 keywords:
   - heimdall
@@ -14,12 +15,12 @@ sources:
   - https://github.com/linuxserver/heimdall
 maintainers:
   - name: johanneskastl
-    email: kastl@b1-systems.de
+    email: git@johannes-kastl.de
 dependencies:
   - name: common
     repository: https://johanneskastl.github.io/helm-charts/
-    version: 5.0.0
+    version: 5.0.5
 annotations:
   artifacthub.io/changes: |-
     - kind: changed
-      description: Forked the chart from k8s-at-home (at version 8.4.2)
+      description: update heimdall to v2.7.6-ls338

charts/heimdall/README.md

@@ -1,6 +1,6 @@
 # heimdall
 
-![Version: 9.0.0](https://img.shields.io/badge/Version-9.0.0-informational?style=flat-square) ![AppVersion: 2.2.2](https://img.shields.io/badge/AppVersion-2.2.2-informational?style=flat-square)
+![Version: 9.4.10](https://img.shields.io/badge/Version-9.4.10-informational?style=flat-square) ![AppVersion: v2.7.6-ls338](https://img.shields.io/badge/AppVersion-v2.7.6--ls338-informational?style=flat-square)
 
 An Application dashboard and launcher
 
@@ -21,7 +21,7 @@ Kubernetes: `>=1.16.0-0`
 
 | Repository | Name | Version |
 |------------|------|---------|
-| https://johanneskastl.github.io/helm-charts/ | common | 5.0.0 |
+| https://johanneskastl.github.io/helm-charts/ | common | 5.0.5 |
 
 ## TL;DR
 
@@ -83,14 +83,250 @@ N/A
 | env.PUID | string | `"1000"` | Set the container user id |
 | env.TZ | string | `"UTC"` | Set the container timezone |
 | image.pullPolicy | string | `"IfNotPresent"` | image pull policy |
-| image.repository | string | `"linuxserver/heimdall"` | image repository |
-| image.tag | string | `"version-2.2.2"` | image tag |
+| image.repository | string | `"ghcr.io/linuxserver/heimdall"` | image repository |
+| image.tag | string | chart.appVersion | image tag |
 | ingress.main | object | See values.yaml | Enable and configure ingress settings for the chart under this key. |
 | persistence | object | See values.yaml | Configure persistence settings for the chart under this key. |
 | service | object | See values.yaml | Configures service settings for the chart. |
 
 ## Changelog
 
+All notable changes to this Helm chart will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+### Version 9.4.10
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update heimdall to v2.7.6-ls338
+
+#### Fixed
+
+N/A
+
+### Version 9.4.9
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update heimdall to v2.7.6-ls337
+
+#### Fixed
+
+N/A
+
+### Version 9.4.8
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update heimdall to v2.7.6-ls336
+
+#### Fixed
+
+N/A
+
+### Version 9.4.7
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update heimdall to v2.7.6-ls335
+
+#### Fixed
+
+N/A
+
+### Version 9.4.6
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update heimdall to v2.7.6-ls333
+
+#### Fixed
+
+N/A
+
+### Version 9.4.5
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update heimdall to v2.7.6-ls330
+
+#### Fixed
+
+N/A
+
+### Version 9.4.4
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update heimdall to v2.7.6-ls329
+
+#### Fixed
+
+N/A
+
+### Version 9.4.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update heimdall to v2.7.6-ls328
+
+#### Fixed
+
+N/A
+
+### Version 9.4.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* use full version string v2.7.6-ls327
+* use ghcr.io as registryUrl
+
+### Version 9.4.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* https prefix in renovate comment
+
+### Version 9.4.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update heimdall to 2.7.6
+
+#### Fixed
+
+N/A
+
+### Version 9.3.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update heimdall to 2.6.3
+
+#### Fixed
+
+N/A
+
+### Version 9.2.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update heimdall to 2.5.8
+
+#### Fixed
+
+N/A
+
+### Version 9.1.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update heimdall to 2.4.15
+
+#### Fixed
+
+N/A
+
+### Version 9.0.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* remove image tag value and use appVersion instead
+
+#### Fixed
+
+N/A
+
+### Version 9.0.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update the common chart to 5.0.5
+
+#### Fixed
+
+N/A
+
+### Version 9.0.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* generate README with helm-docs
+
+#### Fixed
+
+N/A
+
 ### Version 9.0.0
 
 #### Added

charts/heimdall/README_CHANGELOG.md.gotmpl

@@ -0,0 +1,254 @@
+{{- define "custom.changelog" -}}
+## Changelog
+
+All notable changes to this Helm chart will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+### Version 9.4.10
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update heimdall to v2.7.6-ls338
+
+#### Fixed
+
+N/A
+
+### Version 9.4.9
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update heimdall to v2.7.6-ls337
+
+#### Fixed
+
+N/A
+
+### Version 9.4.8
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update heimdall to v2.7.6-ls336
+
+#### Fixed
+
+N/A
+
+### Version 9.4.7
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update heimdall to v2.7.6-ls335
+
+#### Fixed
+
+N/A
+
+### Version 9.4.6
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update heimdall to v2.7.6-ls333
+
+#### Fixed
+
+N/A
+
+### Version 9.4.5
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update heimdall to v2.7.6-ls330
+
+#### Fixed
+
+N/A
+
+### Version 9.4.4
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update heimdall to v2.7.6-ls329
+
+#### Fixed
+
+N/A
+
+### Version 9.4.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update heimdall to v2.7.6-ls328
+
+#### Fixed
+
+N/A
+
+### Version 9.4.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* use full version string v2.7.6-ls327
+* use ghcr.io as registryUrl
+
+### Version 9.4.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* https prefix in renovate comment
+
+### Version 9.4.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update heimdall to 2.7.6
+
+#### Fixed
+
+N/A
+
+### Version 9.3.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update heimdall to 2.6.3
+
+#### Fixed
+
+N/A
+
+### Version 9.2.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update heimdall to 2.5.8
+
+#### Fixed
+
+N/A
+
+### Version 9.1.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update heimdall to 2.4.15
+
+#### Fixed
+
+N/A
+
+### Version 9.0.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* remove image tag value and use appVersion instead
+
+#### Fixed
+
+N/A
+
+### Version 9.0.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update the common chart to 5.0.5
+
+#### Fixed
+
+N/A
+
+### Version 9.0.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* generate README with helm-docs
+
+#### Fixed
+
+N/A
+
+### Version 9.0.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* Forked the chart from k8s-at-home (at version 8.4.2).
+
+#### Fixed
+
+N/A
+
+{{- end -}}

charts/heimdall/README_CONFIG.md.gotmpl

@@ -1,3 +1,9 @@
+{{- define "custom.notes" -}}
+Forked from the chart in the [k8s-at-home repository](https://github.com/k8s-at-home/charts) at version 8.4.2.
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/johanneskastl/helm-charts/issues/)**
+{{- end -}}
+
 {{- define "custom.custom.configuration.header" -}}
 ## Custom configuration
 {{- end -}}

charts/heimdall/values.yaml

@@ -7,9 +7,10 @@
 
 image:
   # -- image repository
-  repository: linuxserver/heimdall
+  repository: ghcr.io/linuxserver/heimdall
   # -- image tag
-  tag: version-2.2.2
+  # @default -- chart.appVersion
+  tag:
   # -- image pull policy
   pullPolicy: IfNotPresent
 

charts/jellyfin/Chart.yaml

@@ -1,9 +1,10 @@
 ---
 apiVersion: v2
+# renovate datasource=docker registryUrl=https://docker.io depName=jellyfin/jellyfin
 appVersion: 10.8.1
 description: Jellyfin is a Free Software Media System
 name: jellyfin
-version: 10.0.0
+version: 10.0.4
 kubeVersion: ">=1.16.0-0"
 keywords:
   - jellyfin
@@ -16,12 +17,12 @@ sources:
   - https://github.com/jellyfin/jellyfin
 maintainers:
   - name: johanneskastl
-    email: kastl@b1-systems.de
+    email: git@johannes-kastl.de
 dependencies:
   - name: common
     repository: https://johanneskastl.github.io/helm-charts/
-    version: 5.0.0
+    version: 5.0.5
 annotations:
   artifacthub.io/changes: |-
-    - kind: changed
-      description: Forked the chart from k8s-at-home (at version 9.5.3)
+    - kind: added
+      description: add https prefix in renovate comment

charts/jellyfin/README.md

@@ -1,6 +1,6 @@
 # jellyfin
 
-![Version: 10.0.0](https://img.shields.io/badge/Version-10.0.0-informational?style=flat-square) ![AppVersion: 10.8.1](https://img.shields.io/badge/AppVersion-10.8.1-informational?style=flat-square)
+![Version: 10.0.4](https://img.shields.io/badge/Version-10.0.4-informational?style=flat-square) ![AppVersion: 10.8.1](https://img.shields.io/badge/AppVersion-10.8.1-informational?style=flat-square)
 
 Jellyfin is a Free Software Media System
 
@@ -21,7 +21,7 @@ Kubernetes: `>=1.16.0-0`
 
 | Repository | Name | Version |
 |------------|------|---------|
-| https://johanneskastl.github.io/helm-charts/ | common | 5.0.0 |
+| https://johanneskastl.github.io/helm-charts/ | common | 5.0.5 |
 
 ## TL;DR
 
@@ -90,6 +90,67 @@ N/A
 
 ## Changelog
 
+All notable changes to this Helm chart will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+### Version 10.0.4
+
+#### Added
+
+N/A
+
+#### Changed
+
+* add https prefix in renovate comment
+
+#### Fixed
+
+N/A
+
+### Version 10.0.3
+
+#### Added
+
+* comment in Chart.yaml to allow updates via Renovatebot
+
+#### Changed
+
+N/A
+
+#### Fixed
+
+N/A
+
+### Version 10.0.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update common chart to 5.0.5
+
+#### Fixed
+
+N/A
+
+### Version 10.0.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* generate README with helm-docs
+
+#### Fixed
+
+N/A
+
 ### Version 10.0.0
 
 #### Added

charts/jellyfin/README.md.gotmpl

@@ -0,0 +1,139 @@
+{{- define "custom.repository.organization" -}}
+johanneskastl-helm-charts
+{{- end -}}
+
+{{- define "custom.repository.url" -}}
+https://github.com/johanneskastl/helm-charts/
+{{- end -}}
+
+{{- define "custom.helm.url" -}}
+https://johanneskastl.github.io/helm-charts/
+{{- end -}}
+
+{{- define "custom.helm.path" -}}
+{{ template "custom.repository.organization" . }}/{{ template "chart.name" . }}
+{{- end -}}
+
+{{- define "custom.requirements" -}}
+## Requirements
+
+{{ template "chart.kubeVersionLine" . }}
+{{- end -}}
+
+{{- define "custom.dependencies" -}}
+## Dependencies
+
+{{ template "chart.requirementsTable" . }}
+{{- end -}}
+
+{{- define "custom.install.tldr" -}}
+## TL;DR
+
+```console
+helm repo add {{ template "custom.repository.organization" . }} {{ template "custom.helm.url" . }}
+helm repo update
+helm install {{ template "chart.name" . }} {{ template "custom.helm.path" . }}
+```
+{{- end -}}
+
+{{- define "custom.install" -}}
+## Installing the Chart
+
+To install the chart with the release name `{{ template "chart.name" . }}`
+
+```console
+helm install {{ template "chart.name" . }} {{ template "custom.helm.path" . }}
+```
+{{- end -}}
+
+{{- define "custom.uninstall" -}}
+## Uninstalling the Chart
+
+To uninstall the `{{ template "chart.name" . }}` deployment
+
+```console
+helm uninstall {{ template "chart.name" . }}
+```
+
+The command removes all the Kubernetes components associated with the chart **including persistent volumes** and deletes the release.
+{{- end -}}
+
+{{- define "custom.configuration.header" -}}
+## Configuration
+{{- end -}}
+
+{{- define "custom.configuration.readValues" -}}
+Read through the [values.yaml](./values.yaml) file. It has several commented out suggested values.
+Other values may be used from the [values.yaml](https://github.com/johanneskastl/helm-charts/tree/main/charts/common/values.yaml) from the [common library](https://github.com/johanneskastl/helm-charts/tree/main/charts/common).
+{{- end -}}
+
+{{- define "custom.configuration.example.set" -}}
+Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`.
+
+```console
+helm install {{ template "chart.name" . }} \
+  --set env.TZ="America/New York" \
+    {{ template "custom.helm.path" . }}
+```
+{{- end -}}
+
+{{- define "custom.configuration.example.file" -}}
+Alternatively, a YAML file that specifies the values for the above parameters can be provided while installing the chart.
+
+```console
+helm install {{ template "chart.name" . }} {{ template "custom.helm.path" . }} -f values.yaml
+```
+{{- end -}}
+
+{{- define "custom.valuesSection" -}}
+## Values
+
+**Important**: When deploying an application Helm chart you can add more values from the common library chart [here](https://github.com/johanneskastl/helm-charts/tree/main/charts/common)
+
+{{ template "chart.valuesTable" . }}
+{{- end -}}
+
+{{- define "custom.support" -}}
+## Support
+
+Open an [issue](https://github.com/johanneskastl/helm-charts/issues/).
+{{- end -}}
+
+{{ template "chart.header" . }}
+
+{{ template "chart.versionBadge" . }}{{ template "chart.typeBadge" . }}{{ template "chart.appVersionBadge" . }}
+
+{{ template "chart.description" . }}
+
+{{ template "custom.notes" . }}
+
+{{ template "chart.sourcesSection" . }}
+
+{{ template "custom.requirements" . }}
+
+{{ template "custom.dependencies" . }}
+
+{{ template "custom.install.tldr" . }}
+
+{{ template "custom.install" . }}
+
+{{ template "custom.uninstall" . }}
+
+{{ template "custom.configuration.header" . }}
+
+{{ template "custom.configuration.readValues" . }}
+
+{{ template "custom.configuration.example.set" . }}
+
+{{ template "custom.configuration.example.file" . }}
+
+{{ template "custom.custom.configuration" . }}
+
+{{ template "custom.valuesSection" . }}
+
+{{ template "custom.changelog" . }}
+
+{{ template "custom.support" . }}
+
+{{ template "helm-docs.versionFooter" . }}
+{{ "" }}

charts/jellyfin/README_CHANGELOG.md.gotmpl

@@ -0,0 +1,79 @@
+{{- define "custom.changelog" -}}
+## Changelog
+
+All notable changes to this Helm chart will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+### Version 10.0.4
+
+#### Added
+
+N/A
+
+#### Changed
+
+* add https prefix in renovate comment
+
+#### Fixed
+
+N/A
+
+### Version 10.0.3
+
+#### Added
+
+* comment in Chart.yaml to allow updates via Renovatebot
+
+#### Changed
+
+N/A
+
+#### Fixed
+
+N/A
+
+### Version 10.0.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update common chart to 5.0.5
+
+#### Fixed
+
+N/A
+
+### Version 10.0.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* generate README with helm-docs
+
+#### Fixed
+
+N/A
+
+### Version 10.0.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* Forked the chart from k8s-at-home (at version 9.5.3)
+
+#### Fixed
+
+N/A
+
+{{- end -}}

charts/jellyfin/README_CONFIG.md.gotmpl

@@ -1,3 +1,9 @@
+{{- define "custom.notes" -}}
+Forked from the chart in the [k8s-at-home repository](https://github.com/k8s-at-home/charts) at version 9.5.3.
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/johanneskastl/helm-charts/issues/)**
+{{- end -}}
+
 {{- define "custom.custom.configuration.header" -}}
 ## Custom configuration
 {{- end -}}

charts/kanboard/.helmignore

@@ -0,0 +1,26 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
+# OWNERS file for Kubernetes
+OWNERS
+# helm-docs templates
+*.gotmpl

charts/kanboard/Chart.yaml

@@ -0,0 +1,30 @@
+---
+apiVersion: v2
+# renovate datasource=docker registryUrl=https://docker.io depName=kanboard/kanboard
+appVersion: v1.2.50
+description: Kanboard is a free and open source Kanban project management software.
+name: kanboard
+version: 6.0.17
+kubeVersion: ">=1.16.0-0"
+keywords:
+  - kanboard
+  - kanban
+home: https://github.com/johanneskastl/helm-charts/tree/main/charts/kanboard
+icon: https://raw.githubusercontent.com/kanboard/website/master/assets/img/icon.svg
+sources:
+  - https://github.com/kanboard/kanboard
+maintainers:
+  - name: johanneskastl
+    email: git@johannes-kastl.de
+dependencies:
+  - name: common
+    repository: https://johanneskastl.github.io/helm-charts/
+    version: 5.0.5
+  - name: postgresql
+    version: 11.6.12
+    repository: https://charts.bitnami.com/bitnami
+    condition: postgresql.enabled
+annotations:
+  artifacthub.io/changes: |-
+    - kind: changed
+      description: update kanboard to v1.2.50

charts/kanboard/README.md

@@ -0,0 +1,361 @@
+# kanboard
+
+![Version: 6.0.17](https://img.shields.io/badge/Version-6.0.17-informational?style=flat-square) ![AppVersion: v1.2.50](https://img.shields.io/badge/AppVersion-v1.2.50-informational?style=flat-square)
+
+Kanboard is a free and open source Kanban project management software.
+
+Forked from the chart in the [k8s-at-home repository](https://github.com/k8s-at-home/charts) at version 5.1.2.
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/johanneskastl/helm-charts/issues/)**
+
+## Source Code
+
+* <https://github.com/kanboard/kanboard>
+
+## Requirements
+
+Kubernetes: `>=1.16.0-0`
+
+## Dependencies
+
+| Repository | Name | Version |
+|------------|------|---------|
+| https://charts.bitnami.com/bitnami | postgresql | 11.6.12 |
+| https://johanneskastl.github.io/helm-charts/ | common | 5.0.5 |
+
+## TL;DR
+
+```console
+helm repo add johanneskastl-helm-charts https://johanneskastl.github.io/helm-charts/
+helm repo update
+helm install kanboard johanneskastl-helm-charts/kanboard
+```
+
+## Installing the Chart
+
+To install the chart with the release name `kanboard`
+
+```console
+helm install kanboard johanneskastl-helm-charts/kanboard
+```
+
+## Uninstalling the Chart
+
+To uninstall the `kanboard` deployment
+
+```console
+helm uninstall kanboard
+```
+
+The command removes all the Kubernetes components associated with the chart **including persistent volumes** and deletes the release.
+
+## Configuration
+
+Read through the [values.yaml](./values.yaml) file. It has several commented out suggested values.
+Other values may be used from the [values.yaml](https://github.com/johanneskastl/helm-charts/tree/main/charts/common/values.yaml) from the [common library](https://github.com/johanneskastl/helm-charts/tree/main/charts/common).
+
+Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`.
+
+```console
+helm install kanboard \
+  --set env.TZ="America/New York" \
+    johanneskastl-helm-charts/kanboard
+```
+
+Alternatively, a YAML file that specifies the values for the above parameters can be provided while installing the chart.
+
+```console
+helm install kanboard johanneskastl-helm-charts/kanboard -f values.yaml
+```
+
+## Custom configuration
+
+N/A
+
+## Values
+
+**Important**: When deploying an application Helm chart you can add more values from the common library chart [here](https://github.com/johanneskastl/helm-charts/tree/main/charts/common)
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| env | object | See below (only deviations from the default settings are specified) | environment variables. See [image docs](https://docs.kanboard.org/en/latest/admin_guide/docker.html#environment-variables) and [application docs](# https://docs.kanboard.org/en/latest/admin_guide/config_file.html) for more details. |
+| env.DB_DRIVER | string | `"sqlite"` | Database driver: sqlite, mysql or postgres |
+| env.DB_HOSTNAME | string | `nil` | Mysql/Postgres hostname |
+| env.DB_NAME | string | `nil` | Mysql/Postgres database name |
+| env.DB_PASSWORD | string | `nil` | Mysql/Postgres password |
+| env.DB_PORT | string | `nil` | Mysql/Postgres custom port (empty = default port) |
+| env.DB_USERNAME | string | `nil` | Mysql/Postgres username |
+| env.LOG_DRIVER | string | `"stdout"` | log driver: syslog, stderr, stdout or file |
+| env.MAIL_CONFIGURATION | string | `"false"` | Enable/disable email configuration from the user interface |
+| env.TZ | string | `"UTC"` | Set the container timezone |
+| image.pullPolicy | string | `"IfNotPresent"` | image pull policy |
+| image.repository | string | `"kanboard/kanboard"` | image repository |
+| image.tag | string | chart.appVersion | image tag |
+| ingress.main | object | See values.yaml | Enable and configure ingress settings for the chart under this key. |
+| persistence | object | See values.yaml | Configure persistence settings for the chart under this key. |
+| postgresql | object | See values.yaml | Enable and configure postgresql database subchart under this key.    For more options see [postgresql chart documentation](https://github.com/bitnami/charts/tree/master/bitnami/postgresql) |
+| service | object | See values.yaml | Configures service settings for the chart. |
+
+## Changelog
+
+All notable changes to this Helm chart will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+### Version 6.0.17
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update kanboard to v1.2.50
+
+#### Fixed
+
+N/A
+
+### Version 6.0.16
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update kanboard to v1.2.49
+
+#### Fixed
+
+N/A
+
+### Version 6.0.15
+
+#### Added
+
+N/A
+
+#### Changed
+
+* add https prefix to renovate comment
+
+#### Fixed
+
+N/A
+
+### Version 6.0.14
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update kanboard to v1.2.48
+
+#### Fixed
+
+N/A
+
+### Version 6.0.13
+
+#### Added
+
+* add comment in Chart.yaml to allow updates via Renovatebot
+
+#### Changed
+
+N/A
+
+#### Fixed
+
+N/A
+
+### Version 6.0.12
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.2.32
+
+#### Fixed
+
+N/A
+
+### Version 6.0.11
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.2.31
+
+#### Fixed
+
+N/A
+
+### Version 6.0.10
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.2.30
+
+#### Fixed
+
+N/A
+
+### Version 6.0.9
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.2.29
+
+#### Fixed
+
+N/A
+
+### Version 6.0.8
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.2.28
+* do no longer hardcode the image tag in the values.yaml file, use the appVersion as default instead
+
+#### Fixed
+
+N/A
+
+### Version 6.0.7
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.2.27
+
+#### Fixed
+
+N/A
+
+### Version 6.0.6
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.2.26
+
+#### Fixed
+
+N/A
+
+### Version 6.0.5
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.2.25
+
+#### Fixed
+
+N/A
+
+### Version 6.0.4
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.2.24
+
+#### Fixed
+
+N/A
+
+### Version 6.0.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.2.23
+
+#### Fixed
+
+N/A
+
+### Version 6.0.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.2.22
+
+#### Fixed
+
+N/A
+
+### Version 6.0.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.2.21
+
+#### Fixed
+
+N/A
+
+### Version 6.0.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* Forked the chart from k8s-at-home (at version 5.1.2)
+
+#### Fixed
+
+N/A
+
+## Support
+
+Open an [issue](https://github.com/johanneskastl/helm-charts/issues/).

charts/kanboard/README_CHANGELOG.md.gotmpl

@@ -0,0 +1,266 @@
+{{- define "custom.changelog.header" -}}
+## Changelog
+{{- end -}}
+
+{{- define "custom.changelog" -}}
+{{ template "custom.changelog.header" . }}
+
+All notable changes to this Helm chart will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+### Version 6.0.17
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update kanboard to v1.2.50
+
+#### Fixed
+
+N/A
+
+### Version 6.0.16
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update kanboard to v1.2.49
+
+#### Fixed
+
+N/A
+
+### Version 6.0.15
+
+#### Added
+
+N/A
+
+#### Changed
+
+* add https prefix to renovate comment
+
+#### Fixed
+
+N/A
+
+### Version 6.0.14
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update kanboard to v1.2.48
+
+#### Fixed
+
+N/A
+
+### Version 6.0.13
+
+#### Added
+
+* add comment in Chart.yaml to allow updates via Renovatebot
+
+#### Changed
+
+N/A
+
+#### Fixed
+
+N/A
+
+### Version 6.0.12
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.2.32
+
+#### Fixed
+
+N/A
+
+### Version 6.0.11
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.2.31
+
+#### Fixed
+
+N/A
+
+### Version 6.0.10
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.2.30
+
+#### Fixed
+
+N/A
+
+### Version 6.0.9
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.2.29
+
+#### Fixed
+
+N/A
+
+### Version 6.0.8
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.2.28
+* do no longer hardcode the image tag in the values.yaml file, use the appVersion as default instead
+
+#### Fixed
+
+N/A
+
+### Version 6.0.7
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.2.27
+
+#### Fixed
+
+N/A
+
+### Version 6.0.6
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.2.26
+
+#### Fixed
+
+N/A
+
+### Version 6.0.5
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.2.25
+
+#### Fixed
+
+N/A
+
+### Version 6.0.4
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.2.24
+
+#### Fixed
+
+N/A
+
+### Version 6.0.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.2.23
+
+#### Fixed
+
+N/A
+
+### Version 6.0.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.2.22
+
+#### Fixed
+
+N/A
+
+### Version 6.0.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.2.21
+
+#### Fixed
+
+N/A
+
+### Version 6.0.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* Forked the chart from k8s-at-home (at version 5.1.2)
+
+#### Fixed
+
+N/A
+
+{{- end -}}

charts/kanboard/README_CONFIG.md.gotmpl

@@ -0,0 +1,15 @@
+{{- define "custom.notes" -}}
+Forked from the chart in the [k8s-at-home repository](https://github.com/k8s-at-home/charts) at version 5.1.2.
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/johanneskastl/helm-charts/issues/)**
+{{- end -}}
+
+{{- define "custom.custom.configuration.header" -}}
+## Custom configuration
+{{- end -}}
+
+{{- define "custom.custom.configuration" -}}
+{{ template "custom.custom.configuration.header" . }}
+
+N/A
+{{- end -}}

charts/kanboard/templates/NOTES.txt

@@ -0,0 +1 @@
+{{- include "common.notes.defaultNotes" . -}}

charts/kanboard/templates/common.yaml

@@ -0,0 +1 @@
+{{ include "common.all" . }}

charts/kanboard/values.yaml

@@ -0,0 +1,75 @@
+#
+# IMPORTANT NOTE
+#
+# This chart inherits from the common library chart. You can check the default values/options here:
+# https://github.com/johanneskastl/helm-charts/tree/main/charts/common/values.yaml
+#
+
+image:
+  # -- image repository
+  repository: kanboard/kanboard
+  # -- image tag
+  # @default -- chart.appVersion
+  tag:
+  # -- image pull policy
+  pullPolicy: IfNotPresent
+
+# -- environment variables. See [image docs](https://docs.kanboard.org/en/latest/admin_guide/docker.html#environment-variables)
+# and [application docs](# https://docs.kanboard.org/en/latest/admin_guide/config_file.html) for more details.
+# @default -- See below (only deviations from the default settings are specified)
+env:
+  # -- Set the container timezone
+  TZ: UTC
+  # -- Enable/disable email configuration from the user interface
+  MAIL_CONFIGURATION: "false"
+  # -- log driver: syslog, stderr, stdout or file
+  LOG_DRIVER: stdout
+  # -- Database driver: sqlite, mysql or postgres
+  DB_DRIVER: sqlite
+  # -- Mysql/Postgres hostname
+  DB_HOSTNAME:
+  # -- Mysql/Postgres custom port (empty = default port)
+  DB_PORT:
+  # -- Mysql/Postgres username
+  DB_USERNAME:
+  # -- Mysql/Postgres password
+  DB_PASSWORD:
+  # -- Mysql/Postgres database name
+  DB_NAME:
+
+# -- Configures service settings for the chart.
+# @default -- See values.yaml
+service:
+  main:
+    ports:
+      http:
+        port: 80
+
+ingress:
+  # -- Enable and configure ingress settings for the chart under this key.
+  # @default -- See values.yaml
+  main:
+    enabled: false
+
+# -- Configure persistence settings for the chart under this key.
+# @default -- See values.yaml
+persistence:
+  data:
+    enabled: false
+    mountPath: /var/www/app/data
+
+  ssl:
+    enabled: false
+    mountPath: /etc/nginx/ssl
+
+# -- Enable and configure postgresql database subchart under this key.
+#    For more options see [postgresql chart documentation](https://github.com/bitnami/charts/tree/master/bitnami/postgresql)
+# @default -- See values.yaml
+postgresql:
+  enabled: false
+  postgresqlUsername: kanboard
+  postgresqlPassword: kanboard
+  postgresqlDatabase: kanboard
+  persistence:
+    enabled: false
+    # storageClass: ""

charts/openldap/.helmignore

@@ -0,0 +1,26 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
+# OWNERS file for Kubernetes
+OWNERS
+# helm-docs templates
+*.gotmpl

charts/openldap/Chart.yaml

@@ -0,0 +1,26 @@
+---
+apiVersion: v2
+appVersion: 2.6.6
+description: Helm chart for OpenLDAP based on the Bitnami image
+name: openldap
+version: 2.0.0
+kubeVersion: ">=1.16.0-0"
+keywords:
+  - OpenLDAP
+  - Directory Server
+home: https://github.com/johanneskastl/helm-charts/tree/main/charts/openldap
+icon: http://www.openldap.org/images/headers/LDAPworm.gif
+sources:
+  - https://git.openldap.org/openldap/openldap
+  - https://github.com/bitnami/containers/tree/main/bitnami/openldap
+maintainers:
+  - name: johanneskastl
+    email: kastl@b1-systems.de
+dependencies:
+  - name: common
+    repository: https://johanneskastl.github.io/helm-charts/
+    version: 5.0.5
+annotations:
+  artifacthub.io/changes: |-
+    - kind: changed
+      description: first version of the chart in this repository

charts/openldap/README.md

@@ -0,0 +1,200 @@
+# openldap
+
+![Version: 2.0.0](https://img.shields.io/badge/Version-2.0.0-informational?style=flat-square) ![AppVersion: 2.6.6](https://img.shields.io/badge/AppVersion-2.6.6-informational?style=flat-square)
+
+Helm chart for OpenLDAP based on the Bitnami image
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/johanneskastl/helm-charts/issues/)**
+
+## Source Code
+
+* <https://git.openldap.org/openldap/openldap>
+* <https://github.com/bitnami/containers/tree/main/bitnami/openldap>
+
+## Requirements
+
+Kubernetes: `>=1.16.0-0`
+
+## Dependencies
+
+| Repository | Name | Version |
+|------------|------|---------|
+| https://johanneskastl.github.io/helm-charts/ | common | 5.0.5 |
+
+## TL;DR
+
+```console
+helm repo add johanneskastl-helm-charts https://johanneskastl.github.io/helm-charts/
+helm repo update
+helm install openldap johanneskastl-helm-charts/openldap
+```
+
+## Installing the Chart
+
+To install the chart with the release name `openldap`
+
+```console
+helm install openldap johanneskastl-helm-charts/openldap
+```
+
+## Uninstalling the Chart
+
+To uninstall the `openldap` deployment
+
+```console
+helm uninstall openldap
+```
+
+The command removes all the Kubernetes components associated with the chart **including persistent volumes** and deletes the release.
+
+## Configuration
+
+Read through the [values.yaml](./values.yaml) file. It has several commented out suggested values.
+Other values may be used from the [values.yaml](https://github.com/johanneskastl/helm-charts/tree/main/charts/common/values.yaml) from the [common library](https://github.com/johanneskastl/helm-charts/tree/main/charts/common).
+
+Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`.
+
+```console
+helm install openldap \
+  --set env.TZ="America/New York" \
+    johanneskastl-helm-charts/openldap
+```
+
+Alternatively, a YAML file that specifies the values for the above parameters can be provided while installing the chart.
+
+```console
+helm install openldap johanneskastl-helm-charts/openldap -f values.yaml
+```
+
+## Custom configuration
+
+Depending on your usecase, you need to set the following environment variables for the container.
+
+```
+LDAP_ADMIN_USERNAME: 'admin'
+LDAP_ADMIN_PASSWORD: 'topsecret'
+LDAP_CONFIG_ADMIN_USERNAME: 'admin'
+LDAP_CONFIG_ADMIN_PASSWORD: 'topsecret'
+LDAP_CONFIG_ADMIN_ENABLED: 'yes'
+LDAP_ROOT: 'dc=example,dc=org'
+```
+
+Adjust these values and add them to a Kubernetes secret like so:
+
+```yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  name: openldap-secret
+  namespace: openldap
+stringData:
+  LDAP_ADMIN_USERNAME: 'admin'
+  LDAP_ADMIN_PASSWORD: 'topsecret'
+  LDAP_CONFIG_ADMIN_USERNAME: 'admin'
+  LDAP_CONFIG_ADMIN_PASSWORD: 'topsecret'
+  LDAP_CONFIG_ADMIN_ENABLED: 'yes'
+  LDAP_ROOT: 'dc=example,dc=org'
+```
+
+Then reference this secret in the `envFrom` section of your `values.yaml`:
+
+```yaml
+envFrom:
+- secretRef:
+    name: openldap-secret
+```
+
+For debugging you might want to also set these variables:
+
+```
+LDAP_LOGLEVEL: '1'
+BITNAMI_DEBUG: 'true'
+```
+
+By default, this chart wants to mount a TLS secret into the container,
+so the LDAP server supports TLS. If you do **not** want to have TLS enabled,
+disable this by setting `persistence.certificate.enabled` to false:
+
+```
+persistence:
+  certificate:
+    enabled: false
+```
+
+If you want to have custom LDIF files mounted into the container, you can enable this by enabling the persistence setting for `ldifImport` and specifying a secret name:
+
+```
+persistence:
+  ldifImport:
+    enabled: true
+    name: my-ldif-secret
+```
+
+## Values
+
+**Important**: When deploying an application Helm chart you can add more values from the common library chart [here](https://github.com/johanneskastl/helm-charts/tree/main/charts/common)
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| automountServiceAccountToken | bool | `false` |  |
+| image.pullPolicy | string | `"Always"` | image pull policy |
+| image.repository | string | `"bitnami/openldap"` | image repository |
+| image.tag | string | `nil` | image tag |
+| ingress.main | object | See values.yaml | Enable and configure ingress settings for the chart under this key. |
+| persistence | object | See values.yaml | Configure persistence settings for the chart under this key. |
+| persistence.certificate | object | `{"enabled":true,"mountPath":"/etc/ssl/private/","type":"secret"}` |  and mounted into the pod. |
+| persistence.ldifimport | object | `{"enabled":false,"mountPath":"/ldif_import/","type":"secret"}` |  This disables the autogeneration of the default tree, see https://github.com/bitnami/bitnami-docker-openldap/issues/86 and https://github.com/bitnami/bitnami-docker-openldap/issues/83 |
+| podSecurityContext.fsGroup | int | `1001` |  |
+| probes.liveness.enabled | bool | `true` |  |
+| probes.liveness.spec.failureThreshold | int | `3` |  |
+| probes.liveness.spec.initialDelaySeconds | int | `15` |  |
+| probes.liveness.spec.periodSeconds | int | `15` |  |
+| probes.liveness.spec.tcpSocket.port | int | `1389` |  |
+| probes.liveness.spec.timeoutSeconds | int | `1` |  |
+| probes.readiness.enabled | bool | `true` |  |
+| probes.readiness.spec.failureThreshold | int | `3` |  |
+| probes.readiness.spec.initialDelaySeconds | int | `15` |  |
+| probes.readiness.spec.periodSeconds | int | `15` |  |
+| probes.readiness.spec.tcpSocket.port | int | `1389` |  |
+| probes.readiness.spec.timeoutSeconds | int | `1` |  |
+| probes.startup.enabled | bool | `true` |  |
+| probes.startup.spec.failureThreshold | int | `12` |  |
+| probes.startup.spec.initialDelaySeconds | int | `0` |  |
+| probes.startup.spec.periodSeconds | int | `10` |  |
+| probes.startup.spec.tcpSocket.port | int | `1389` |  |
+| probes.startup.spec.timeoutSeconds | int | `1` |  |
+| securityContext.capabilities.add[0] | string | `"NET_BIND_SERVICE"` |  |
+| securityContext.capabilities.drop[0] | string | `"ALL"` |  |
+| securityContext.readOnlyRootFilesystem | bool | `false` |  |
+| securityContext.runAsNonRoot | bool | `true` |  |
+| securityContext.runAsUser | int | `1001` |  |
+| service | object | See values.yaml | Configures service settings for the chart. |
+| serviceAccount.create | bool | `true` |  |
+
+## Changelog
+
+All notable changes to this Helm chart will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+### Version 2.0.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* first version of the chart in this repository
+
+#### Fixed
+
+N/A
+
+## Support
+
+Open an [issue](https://github.com/johanneskastl/helm-charts/issues/).
+
+----------------------------------------------
+Autogenerated from chart metadata using [helm-docs v0.1.1](https://github.com/k8s-at-home/helm-docs/releases/v0.1.1)

charts/openldap/README_CHANGELOG.md.gotmpl

@@ -0,0 +1,23 @@
+{{- define "custom.changelog" -}}
+## Changelog
+
+All notable changes to this Helm chart will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+### Version 2.0.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* first version of the chart in this repository
+
+#### Fixed
+
+N/A
+
+{{- end -}}

charts/openldap/README_CONFIG.md.gotmpl

@@ -0,0 +1,73 @@
+{{- define "custom.notes" -}}
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/johanneskastl/helm-charts/issues/)**
+{{- end -}}
+
+{{- define "custom.custom.configuration.header" -}}
+## Custom configuration
+{{- end -}}
+
+{{- define "custom.custom.configuration" -}}
+{{ template "custom.custom.configuration.header" . }}
+
+Depending on your usecase, you need to set the following environment variables for the container.
+
+```
+LDAP_ADMIN_USERNAME: 'admin'
+LDAP_ADMIN_PASSWORD: 'topsecret'
+LDAP_CONFIG_ADMIN_USERNAME: 'admin'
+LDAP_CONFIG_ADMIN_PASSWORD: 'topsecret'
+LDAP_CONFIG_ADMIN_ENABLED: 'yes'
+LDAP_ROOT: 'dc=example,dc=org'
+```
+
+Adjust these values and add them to a Kubernetes secret like so:
+
+```yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  name: openldap-secret
+  namespace: openldap
+stringData:
+  LDAP_ADMIN_USERNAME: 'admin'
+  LDAP_ADMIN_PASSWORD: 'topsecret'
+  LDAP_CONFIG_ADMIN_USERNAME: 'admin'
+  LDAP_CONFIG_ADMIN_PASSWORD: 'topsecret'
+  LDAP_CONFIG_ADMIN_ENABLED: 'yes'
+  LDAP_ROOT: 'dc=example,dc=org'
+```
+
+Then reference this secret in the `envFrom` section of your `values.yaml`:
+
+```yaml
+envFrom:
+- secretRef:
+    name: openldap-secret
+```
+
+For debugging you might want to also set these variables:
+
+```
+LDAP_LOGLEVEL: '1'
+BITNAMI_DEBUG: 'true'
+```
+
+By default, this chart wants to mount a TLS secret into the container,
+so the LDAP server supports TLS. If you do **not** want to have TLS enabled,
+disable this by setting `persistence.certificate.enabled` to false:
+
+```
+persistence:
+  certificate:
+    enabled: false
+```
+
+If you want to have custom LDIF files mounted into the container, you can enable this by enabling the persistence setting for `ldifImport` and specifying a secret name:
+
+```
+persistence:
+  ldifImport:
+    enabled: true
+    name: my-ldif-secret
+```
+{{- end -}}

charts/openldap/templates/common.yaml

@@ -0,0 +1,25 @@
+{{/* Make sure all variables are set properly */}}
+{{- include "common.values.setup" . }}
+
+{{/* Append the hardcoded settings */}}
+{{- define "openldap.hardcodedValues" -}}
+env:
+  {{ if .Values.persistence.ldifimport.enabled }}
+    LDAP_SKIP_DEFAULT_TREE: 'yes'
+    LDAP_CUSTOM_LDIF_DIR: '/ldif_import/'
+  {{ else }}
+    LDAP_SKIP_DEFAULT_TREE: 'no'
+  {{ end }}
+  {{ if .Values.persistence.certificate.enabled }}
+    LDAP_ENABLE_TLS: 'yes'
+    LDAP_TLS_CERT_FILE: '/etc/ssl/private/tls.crt'
+    LDAP_TLS_KEY_FILE: '/etc/ssl/private/tls.key'
+    LDAP_TLS_CA_FILE: '/etc/ssl/private/tls.crt'
+  {{ else }}
+    LDAP_ENABLE_TLS: 'no'
+  {{ end }}
+      {{- end -}}
+    {{- $_ := mergeOverwrite .Values (include "openldap.hardcodedValues" . | fromYaml) -}}
+
+    {{/* Render the templates */}}
+{{ include "common.all" . }}

charts/openldap/values.yaml

@@ -0,0 +1,124 @@
+#
+# IMPORTANT NOTE
+#
+# This chart inherits from the common library chart. You can check the default values/options here:
+# https://github.com/johanneskastl/helm-charts/tree/main/charts/common/values.yaml
+#
+
+image:
+  # -- image repository
+  repository: bitnami/openldap
+  # as the tag is updated in-place in the upstream image, set the policy to Always
+  # https://hub.docker.com/r/bitnami/openldap/tags
+  # -- image pull policy
+  pullPolicy: Always
+  # -- image tag
+  tag:
+
+# -- Configures service settings for the chart.
+# @default -- See values.yaml
+service:
+  main:
+    enabled: true
+    type: LoadBalancer
+    ports:
+      http:
+        enabled: false
+      ldap-tcp:
+        enabled: true
+        port: 389
+        protocol: TCP
+        targetPort: 1389
+      ldap-udp:
+        enabled: false
+        port: 389
+        protocol: UDP
+        targetPort: 1389
+      ldaps-tcp:
+        enabled: true
+        port: 636
+        protocol: TCP
+        targetPort: 1636
+      ldaps-udp:
+        enabled: false
+        port: 636
+        protocol: UDP
+        targetPort: 1636
+
+ingress:
+  # -- Enable and configure ingress settings for the chart under this key.
+  # @default -- See values.yaml
+  main:
+    enabled: false
+
+# -- Configure persistence settings for the chart under this key.
+# @default -- See values.yaml
+persistence:
+  config:
+    enabled: true
+    type: pvc
+    mountPath: /bitnami/openldap
+    accessMode: ReadWriteOnce
+    size: 1Gi
+    retain: true
+  # For persistence, you should have your certificate stored in Kubernetes in a secret
+  # and mounted into the pod.
+  certificate:
+    enabled: true
+    type: secret
+    mountPath: /etc/ssl/private/
+  # Set this to enabled if you want to import files from a secret.
+  # This disables the autogeneration of the default tree, see
+  # https://github.com/bitnami/bitnami-docker-openldap/issues/86 and
+  # https://github.com/bitnami/bitnami-docker-openldap/issues/83
+  ldifimport:
+    enabled: false
+    type: secret
+    mountPath: /ldif_import/
+
+probes:
+  liveness:
+    enabled: true
+    spec:
+      tcpSocket:
+        port: 1389
+      initialDelaySeconds: 15
+      periodSeconds: 15
+      timeoutSeconds: 1
+      failureThreshold: 3
+  readiness:
+    enabled: true
+    spec:
+      tcpSocket:
+        port: 1389
+      initialDelaySeconds: 15
+      periodSeconds: 15
+      timeoutSeconds: 1
+      failureThreshold: 3
+  startup:
+    enabled: true
+    spec:
+      tcpSocket:
+        port: 1389
+      initialDelaySeconds: 0
+      periodSeconds: 10
+      timeoutSeconds: 1
+      failureThreshold: 12
+
+serviceAccount:
+  create: true
+
+podSecurityContext:
+  fsGroup: 1001
+
+securityContext:
+  capabilities:
+    drop:
+    - ALL
+    add:
+    - NET_BIND_SERVICE
+  readOnlyRootFilesystem: false
+  runAsNonRoot: true
+  runAsUser: 1001
+
+automountServiceAccountToken: false

charts/sharry/.helmignore

@@ -0,0 +1,26 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
+# OWNERS file for Kubernetes
+OWNERS
+# helm-docs templates
+*.gotmpl

charts/sharry/Chart.yaml

@@ -0,0 +1,25 @@
+---
+apiVersion: v2
+# renovate datasource=docker registryUrl=https://docker.io depName=eikek0/sharry
+appVersion: v1.15.0
+description: Sharry allows to share files with others in a simple way. It is a self-hosted web application. The basic concept is to upload files and get a url back that can then be shared.
+name: sharry
+version: 6.9.2
+keywords:
+  - file sharing
+home: https://github.com/johanneskastl/charts/tree/main/charts/sharry
+icon: https://github.com/eikek/sharry/blob/master/artwork/logo.svg?raw=true
+sources:
+  - https://github.com/eikek/sharry
+  - https://hub.docker.com/r/eikek0/sharry
+maintainers:
+  - name: johanneskastl
+    email: git@johannes-kastl.de
+dependencies:
+  - name: common
+    repository: https://johanneskastl.github.io/helm-charts/
+    version: 5.0.5
+annotations:
+  artifacthub.io/changes: |-
+    - kind: changed
+      description: add https prefix in renovate comment

charts/sharry/README.md

@@ -0,0 +1,250 @@
+# sharry
+
+![Version: 6.9.2](https://img.shields.io/badge/Version-6.9.2-informational?style=flat-square) ![AppVersion: v1.15.0](https://img.shields.io/badge/AppVersion-v1.15.0-informational?style=flat-square)
+
+Sharry allows to share files with others in a simple way. It is a self-hosted web application. The basic concept is to upload files and get a url back that can then be shared.
+
+Forked from the chart in the [k8s-at-home repository](https://github.com/k8s-at-home/charts) at version 5.4.2.
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/johanneskastl/helm-charts/issues/)**
+
+## Source Code
+
+* <https://github.com/eikek/sharry>
+* <https://hub.docker.com/r/eikek0/sharry>
+
+## Requirements
+
+## Dependencies
+
+| Repository | Name | Version |
+|------------|------|---------|
+| https://johanneskastl.github.io/helm-charts/ | common | 5.0.5 |
+
+## TL;DR
+
+```console
+helm repo add johanneskastl-helm-charts https://johanneskastl.github.io/helm-charts/
+helm repo update
+helm install sharry johanneskastl-helm-charts/sharry
+```
+
+## Installing the Chart
+
+To install the chart with the release name `sharry`
+
+```console
+helm install sharry johanneskastl-helm-charts/sharry
+```
+
+## Uninstalling the Chart
+
+To uninstall the `sharry` deployment
+
+```console
+helm uninstall sharry
+```
+
+The command removes all the Kubernetes components associated with the chart **including persistent volumes** and deletes the release.
+
+## Configuration
+
+Read through the [values.yaml](./values.yaml) file. It has several commented out suggested values.
+Other values may be used from the [values.yaml](https://github.com/johanneskastl/helm-charts/tree/main/charts/common/values.yaml) from the [common library](https://github.com/johanneskastl/helm-charts/tree/main/charts/common).
+
+Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`.
+
+```console
+helm install sharry \
+  --set env.TZ="America/New York" \
+    johanneskastl-helm-charts/sharry
+```
+
+Alternatively, a YAML file that specifies the values for the above parameters can be provided while installing the chart.
+
+```console
+helm install sharry johanneskastl-helm-charts/sharry -f values.yaml
+```
+
+## Custom configuration
+
+N/A
+
+## Values
+
+**Important**: When deploying an application Helm chart you can add more values from the common library chart [here](https://github.com/johanneskastl/helm-charts/tree/main/charts/common)
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| args | list | `["/opt/sharry.conf"]` | Override the command line arguments for the default container |
+| config | string | See values.yaml | Sharry configuration. Supports Helm templates. See [application docs](https://eikek.github.io/sharry/doc/configure) for more details. |
+| image.pullPolicy | string | `"IfNotPresent"` | image pull policy |
+| image.repository | string | `"eikek0/sharry"` | image repository |
+| image.tag | string | chart.appVersion | image tag |
+| ingress.main | object | See values.yaml | Enable and configure ingress settings for the chart under this key. |
+| service | object | See values.yaml | Configures service settings for the chart. |
+
+## Changelog
+
+All notable changes to this Helm chart will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+### Version 6.9.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* add https prefix in renovate comment
+
+### Version 6.9.1
+
+#### Added
+
+* add comment in Chart.yaml to allow updates via Renovatebot
+
+#### Changed
+
+N/A
+
+### Version 6.9.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.15.0
+
+### Version 6.8.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* enable admin credentials by default
+
+### Version 6.7.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* fix appVersion to have a leading v
+
+### Version 6.6.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.14.0
+
+### Version 6.5.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.13.2
+
+### Version 6.5.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.13.1
+
+### Version 6.5.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.13.0
+
+### Version 6.4.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.12.1
+
+### Version 6.4.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.12.0
+
+### Version 6.3.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.11.0
+
+### Version 6.2.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.10.0
+
+### Version 6.1.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.9.0
+
+### Version 6.0.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* Forked the chart from k8s-at-home (at version 5.4.2)
+
+#### Fixed
+
+N/A
+
+## Support
+
+Open an [issue](https://github.com/johanneskastl/helm-charts/issues/).

charts/sharry/README_CHANGELOG.md.gotmpl

@@ -0,0 +1,167 @@
+{{- define "custom.changelog.header" -}}
+## Changelog
+{{- end -}}
+
+{{- define "custom.changelog" -}}
+{{ template "custom.changelog.header" . }}
+
+All notable changes to this Helm chart will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+### Version 6.9.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* add https prefix in renovate comment
+
+### Version 6.9.1
+
+#### Added
+
+* add comment in Chart.yaml to allow updates via Renovatebot
+
+#### Changed
+
+N/A
+
+### Version 6.9.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.15.0
+
+### Version 6.8.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* enable admin credentials by default
+
+### Version 6.7.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* fix appVersion to have a leading v
+
+### Version 6.6.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.14.0
+
+### Version 6.5.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.13.2
+
+### Version 6.5.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.13.1
+
+### Version 6.5.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.13.0
+
+### Version 6.4.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.12.1
+
+### Version 6.4.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.12.0
+
+### Version 6.3.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.11.0
+
+### Version 6.2.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.10.0
+
+### Version 6.1.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.9.0
+
+### Version 6.0.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* Forked the chart from k8s-at-home (at version 5.4.2)
+
+#### Fixed
+
+N/A
+
+{{- end -}}

charts/sharry/README_CONFIG.md.gotmpl

@@ -0,0 +1,15 @@
+{{- define "custom.notes" -}}
+Forked from the chart in the [k8s-at-home repository](https://github.com/k8s-at-home/charts) at version 5.4.2.
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/johanneskastl/helm-charts/issues/)**
+{{- end -}}
+
+{{- define "custom.custom.configuration.header" -}}
+## Custom configuration
+{{- end -}}
+
+{{- define "custom.custom.configuration" -}}
+{{ template "custom.custom.configuration.header" . }}
+
+N/A
+{{- end -}}

charts/sharry/templates/NOTES.txt

@@ -0,0 +1 @@
+{{- include "common.notes.defaultNotes" . -}}

charts/sharry/templates/common.yaml

@@ -0,0 +1,19 @@
+{{/* Make sure all variables are set properly */}}
+{{- include "common.values.setup" . }}
+
+{{/* Append the hardcoded settings */}}
+{{- define "sharry.harcodedValues" -}}
+persistence:
+  sharry-config:
+    enabled: "true"
+    mountPath: "/opt/sharry.conf"
+    subPath: sharry.conf
+    type: "custom"
+    volumeSpec:
+      configMap:
+        name: {{ printf "%v-config" (include "common.names.fullname" .) }}
+{{- end -}}
+{{- $_ := mergeOverwrite .Values (include "sharry.harcodedValues" . | fromYaml) -}}
+
+{{/* Render the templates */}}
+{{ include "common.all" . }}

charts/sharry/templates/configmap.yaml

@@ -0,0 +1,11 @@
+{{- include "common.values.setup" . -}}
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: {{ include "common.names.fullname" . }}-config
+  labels:
+    {{- include "common.labels" . | nindent 4 }}
+data:
+  sharry.conf: |
+    {{- tpl .Values.config $| nindent 4 }}

charts/sharry/values.yaml

@@ -0,0 +1,59 @@
+#
+## IMPORTANT NOTE
+##
+# This chart inherits from the common library chart. You can check the default values/options here:
+# https://github.com/johanneskastl/helm-charts/tree/main/charts/common/values.yaml
+##
+image:
+  # -- image repository
+  repository: eikek0/sharry
+  # -- image pull policy
+  pullPolicy: IfNotPresent
+  # -- image tag
+  # @default -- chart.appVersion
+  tag:
+
+# -- Configures service settings for the chart.
+# @default -- See values.yaml
+service:
+  main:
+    ports:
+      http:
+        port: 9090
+
+# -- Override the command line arguments for the default container
+args:
+- "/opt/sharry.conf"
+
+ingress:
+  # -- Enable and configure ingress settings for the chart under this key.
+  # @default -- See values.yaml
+  main:
+    enabled: false
+    # -- Enable large file support with those annotations for nginx
+    # annotations:
+    #   nginx.ingress.kubernetes.io/client-body-buffer-size: "2048m"
+    #   nginx.ingress.kubernetes.io/proxy-body-size: "2048m"
+    #   nginx.ingress.kubernetes.io/proxy-buffering: "off"
+
+# -- Sharry configuration. Supports Helm templates.
+# See [application docs](https://eikek.github.io/sharry/doc/configure) for more details.
+# @default -- See values.yaml
+config: |
+  sharry.restserver {
+    # base-url = "https://sharry.${DOMAIN}"
+    bind {
+      address = "0.0.0.0"
+      port = {{ .Values.service.main.ports.http.port }}
+    }
+    backend {
+      auth {
+        fixed {
+          enabled = true
+          user = "admin"
+          password = "admin"
+          order = 10
+        }
+      }
+    }
+  }

charts/syncthing/Chart.yaml

@@ -1,26 +1,29 @@
 ---
 apiVersion: v2
-appVersion: 1.18.2
+# no leading v on the appVersion
+# in contrast to the tags in GitHub
+# renovate datasource=docker registryUrl=https://docker.io depName=syncthing/syncthing
+appVersion: 2.0.14
 description: Open Source Continuous File Synchronization
 name: syncthing
-version: 4.0.1
+version: 5.0.16
 kubeVersion: ">=1.16.0-0"
 keywords:
   - syncthing
   - file sync
-home: https://github.com/johanneskastl/helm-charts/tree/master/charts/stable/syncthing
+home: https://github.com/johanneskastl/helm-charts/tree/main/charts/syncthing
 icon: https://github.com/syncthing/syncthing/raw/main/assets/logo-128.png
 sources:
   - https://syncthing.net/
   - https://github.com/syncthing/syncthing
 maintainers:
   - name: johanneskastl
-    email: kastl@b1-systems.de
+    email: git@johannes-kastl.de
 dependencies:
   - name: common
     repository: https://johanneskastl.github.io/helm-charts/
-    version: 5.0.0
+    version: 5.0.5
 annotations:
   artifacthub.io/changes: |-
     - kind: changed
-      description: Fix link in home URL
+      description: update syncthing to 2.0.14

charts/syncthing/README.md

@@ -1,6 +1,6 @@
 # syncthing
 
-![Version: 4.0.1](https://img.shields.io/badge/Version-4.0.1-informational?style=flat-square) ![AppVersion: 1.18.2](https://img.shields.io/badge/AppVersion-1.18.2-informational?style=flat-square)
+![Version: 5.0.16](https://img.shields.io/badge/Version-5.0.16-informational?style=flat-square) ![AppVersion: 2.0.14](https://img.shields.io/badge/AppVersion-2.0.14-informational?style=flat-square)
 
 Open Source Continuous File Synchronization
 
@@ -21,7 +21,7 @@ Kubernetes: `>=1.16.0-0`
 
 | Repository | Name | Version |
 |------------|------|---------|
-| https://johanneskastl.github.io/helm-charts/ | common | 5.0.0 |
+| https://johanneskastl.github.io/helm-charts/ | common | 5.0.5 |
 
 ## TL;DR
 
@@ -79,14 +79,785 @@ N/A
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
 | image.pullPolicy | string | `"IfNotPresent"` | image pull policy |
-| image.repository | string | `"syncthing/syncthing"` | image repository |
-| image.tag | string | `"1.18.2"` | image tag |
+| image.repository | string | `"docker.io/syncthing/syncthing"` | image repository |
+| image.tag | string | chart.appVersion | image tag |
 | ingress.main | object | See values.yaml | Enable and configure ingress settings for the chart under this key. |
 | persistence | object | See values.yaml | Configure persistence settings for the chart under this key. |
 | service | object | See values.yaml | Configures service settings for the chart. |
 
 ## Changelog
 
+All notable changes to this Helm chart will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+### Version 5.0.16
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update syncthing to 2.0.14
+
+#### Fixed
+
+N/A
+
+### Version 5.0.15
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update syncthing to 2.0.13
+
+#### Fixed
+
+N/A
+
+### Version 5.0.14
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update syncthing to 2.0.12
+
+#### Fixed
+
+N/A
+
+### Version 5.0.13
+
+#### Added
+
+N/A
+
+#### Changed
+
+* add https prefix to renovate comment
+
+#### Fixed
+
+N/A
+
+### Version 5.0.12
+
+#### Added
+
+* comment in Chart.yaml to allow updates via Renovatebot
+
+#### Changed
+
+N/A
+
+#### Fixed
+
+N/A
+
+### Version 5.0.11
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 2.0.11
+
+#### Fixed
+
+N/A
+
+### Version 5.0.10
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 2.0.10
+
+#### Fixed
+
+N/A
+
+### Version 5.0.9
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 2.0.9
+
+#### Fixed
+
+N/A
+
+### Version 5.0.8
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 2.0.8
+
+#### Fixed
+
+N/A
+
+### Version 5.0.7
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 2.0.7
+
+#### Fixed
+
+N/A
+
+### Version 5.0.6
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 2.0.6
+
+#### Fixed
+
+N/A
+
+### Version 5.0.5
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 2.0.5
+
+#### Fixed
+
+N/A
+
+### Version 5.0.4
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 2.0.4
+
+#### Fixed
+
+N/A
+
+### Version 5.0.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 2.0.3
+
+### Version 5.0.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 2.0.2
+
+### Version 5.0.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 2.0.1
+
+### Version 5.0.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 2.0.0
+
+### Version 4.12.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.30.0
+
+### Version 4.11.7
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.29.7
+
+### Version 4.11.6
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.29.6
+
+### Version 4.11.5
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.29.5
+
+### Version 4.11.4
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.29.4
+
+### Version 4.11.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.29.3
+
+### Version 4.11.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.29.2
+
+### Version 4.11.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.29.1
+
+### Version 4.11.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.29.0
+
+### Version 4.10.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.28.1
+
+### Version 4.10.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.28.0
+
+### Version 4.9.12
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.27.12
+
+### Version 4.9.11
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.27.11
+
+### Version 4.9.10
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.27.10
+
+### Version 4.9.9
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.27.9
+
+### Version 4.9.8
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.27.8
+
+### Version 4.9.7
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.27.7
+
+### Version 4.9.6
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.27.6
+
+### Version 4.9.5
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.27.5
+
+### Version 4.9.4
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.27.4
+
+### Version 4.9.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.27.3
+
+### Version 4.9.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.27.2
+
+### Version 4.9.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.27.1
+
+### Version 4.9.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.27.0
+
+### Version 4.8.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.26.1
+
+### Version 4.8.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.26.0
+
+### Version 4.7.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.25.0
+
+### Version 4.6.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.24.0
+
+### Version 4.5.7
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.23.7
+
+### Version 4.5.6
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.23.6
+
+### Version 4.5.5
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.23.5
+
+### Version 4.5.4
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.23.4
+
+### Version 4.5.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.23.3
+
+### Version 4.5.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.23.2
+
+### Version 4.5.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.23.1
+
+### Version 4.5.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.23.0
+
+### Version 4.4.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.22.2
+
+### Version 4.4.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.22.1
+
+### Version 4.4.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.22.0
+
+### Version 4.3.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.21.0
+
+### Version 4.2.4
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.20.4
+
+### Version 4.2.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.20.3
+
+### Version 4.2.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.20.2
+
+### Version 4.2.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.20.1
+
+### Version 4.2.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.20.0
+
+### Version 4.1.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.19.2
+
+### Version 4.1.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.19.1
+
+### Version 4.1.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.19.0
+
+### Version 4.0.7
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update dependency for 'common' chart
+
+### Version 4.0.6
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.18.6
+
+### Version 4.0.5
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.18.5
+
+### Version 4.0.4
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.18.4
+
+### Version 4.0.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.18.3
+
+### Version 4.0.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* generate README with helm-docs
+
+#### Fixed
+
+N/A
+
 ### Version 4.0.1
 
 #### Added

charts/syncthing/README_CHANGELOG.md.gotmpl

@@ -0,0 +1,803 @@
+{{- define "custom.changelog" -}}
+## Changelog
+
+All notable changes to this Helm chart will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+### Version 5.0.16
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update syncthing to 2.0.14
+
+#### Fixed
+
+N/A
+
+### Version 5.0.15
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update syncthing to 2.0.13
+
+#### Fixed
+
+N/A
+
+### Version 5.0.14
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update syncthing to 2.0.12
+
+#### Fixed
+
+N/A
+
+### Version 5.0.13
+
+#### Added
+
+N/A
+
+#### Changed
+
+* add https prefix to renovate comment
+
+#### Fixed
+
+N/A
+
+### Version 5.0.12
+
+#### Added
+
+* comment in Chart.yaml to allow updates via Renovatebot
+
+#### Changed
+
+N/A
+
+#### Fixed
+
+N/A
+
+### Version 5.0.11
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 2.0.11
+
+#### Fixed
+
+N/A
+
+### Version 5.0.10
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 2.0.10
+
+#### Fixed
+
+N/A
+
+### Version 5.0.9
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 2.0.9
+
+#### Fixed
+
+N/A
+
+### Version 5.0.8
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 2.0.8
+
+#### Fixed
+
+N/A
+
+### Version 5.0.7
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 2.0.7
+
+#### Fixed
+
+N/A
+
+### Version 5.0.6
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 2.0.6
+
+#### Fixed
+
+N/A
+
+### Version 5.0.5
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 2.0.5
+
+#### Fixed
+
+N/A
+
+### Version 5.0.4
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 2.0.4
+
+#### Fixed
+
+N/A
+
+### Version 5.0.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 2.0.3
+
+### Version 5.0.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 2.0.2
+
+### Version 5.0.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 2.0.1
+
+### Version 5.0.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 2.0.0
+
+### Version 4.12.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.30.0
+
+### Version 4.11.7
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.29.7
+
+### Version 4.11.6
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.29.6
+
+### Version 4.11.5
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.29.5
+
+### Version 4.11.4
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.29.4
+
+### Version 4.11.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.29.3
+
+### Version 4.11.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.29.2
+
+### Version 4.11.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.29.1
+
+### Version 4.11.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.29.0
+
+### Version 4.10.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.28.1
+
+### Version 4.10.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.28.0
+
+### Version 4.9.12
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.27.12
+
+### Version 4.9.11
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.27.11
+
+### Version 4.9.10
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.27.10
+
+### Version 4.9.9
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.27.9
+
+### Version 4.9.8
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.27.8
+
+### Version 4.9.7
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.27.7
+
+### Version 4.9.6
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.27.6
+
+### Version 4.9.5
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.27.5
+
+### Version 4.9.4
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.27.4
+
+### Version 4.9.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.27.3
+
+### Version 4.9.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.27.2
+
+### Version 4.9.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.27.1
+
+### Version 4.9.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.27.0
+
+### Version 4.8.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.26.1
+
+### Version 4.8.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.26.0
+
+### Version 4.7.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.25.0
+
+### Version 4.6.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.24.0
+
+### Version 4.5.7
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.23.7
+
+### Version 4.5.6
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.23.6
+
+### Version 4.5.5
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.23.5
+
+### Version 4.5.4
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.23.4
+
+### Version 4.5.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.23.3
+
+### Version 4.5.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.23.2
+
+### Version 4.5.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.23.1
+
+### Version 4.5.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.23.0
+
+### Version 4.4.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.22.2
+
+### Version 4.4.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.22.1
+
+### Version 4.4.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.22.0
+
+### Version 4.3.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.21.0
+
+### Version 4.2.4
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.20.4
+
+### Version 4.2.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.20.3
+
+### Version 4.2.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.20.2
+
+### Version 4.2.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.20.1
+
+### Version 4.2.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.20.0
+
+### Version 4.1.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.19.2
+
+### Version 4.1.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.19.1
+
+### Version 4.1.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.19.0
+
+### Version 4.0.7
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update dependency for 'common' chart
+
+### Version 4.0.6
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.18.6
+
+### Version 4.0.5
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.18.5
+
+### Version 4.0.4
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.18.4
+
+### Version 4.0.3
+
+#### Added
+
+N/A
+
+#### Changed
+
+* update appVersion to 1.18.3
+
+### Version 4.0.2
+
+#### Added
+
+N/A
+
+#### Changed
+
+* generate README with helm-docs
+
+#### Fixed
+
+N/A
+
+### Version 4.0.1
+
+#### Added
+
+N/A
+
+#### Changed
+
+* Chart.yaml: Fix link in home URL
+
+#### Fixed
+
+N/A
+
+### Version 4.0.0
+
+#### Added
+
+N/A
+
+#### Changed
+
+* Forked the chart from k8s-at-home (at version 3.5.2)
+
+#### Fixed
+
+N/A
+
+{{- end -}}

charts/syncthing/README_CONFIG.md.gotmpl

@@ -1,3 +1,9 @@
+{{- define "custom.notes" -}}
+Forked from the chart in the [k8s-at-home repository](https://github.com/k8s-at-home/charts) at version 3.5.2.
+
+**This chart is not maintained by the upstream project and any issues with the chart should be raised [here](https://github.com/johanneskastl/helm-charts/issues/)**
+{{- end -}}
+
 {{- define "custom.custom.configuration.header" -}}
 ## Custom configuration
 {{- end -}}

charts/syncthing/values.yaml

@@ -7,9 +7,10 @@
 
 image:
   # -- image repository
-  repository: syncthing/syncthing
+  repository: docker.io/syncthing/syncthing
   # -- image tag
-  tag: 1.18.2
+  # @default -- chart.appVersion
+  tag:
   # -- image pull policy
   pullPolicy: IfNotPresent
 

charts/tailscale/.helmignore

@@ -0,0 +1,26 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
+# OWNERS file for Kubernetes
+OWNERS
+# helm-docs templates
+*.gotmpl

charts/tailscale/Chart.yaml

@@ -0,0 +1,26 @@
+---
+apiVersion: v2
+# renovate datasource=docker registryUrl=https://docker.io depName=tailscale/tailscale
+appVersion: v1.94.2
+description: Run a tailscale subnet router in Kubernetes
+name: tailscale
+version: 0.34.1
+kubeVersion: ">=1.19.0-0"
+keywords:
+  - tailscale
+  - vpn
+  - wireguard
+home: https://github.com/johanneskastl/helm-charts/tree/main/charts/tailscale
+sources:
+  - https://github.com/tailscale/tailscale
+maintainers:
+  - name: johanneskastl
+    email: git@johannes-kastl.de
+dependencies:
+  - name: common
+    repository: https://johanneskastl.github.io/helm-charts/
+    version: 5.0.5
+annotations:
+  artifacthub.io/changes: |-
+    - kind: changed
+      description: update tailscale to v1.94.2