Update ghcr.io/lordmathis/lemma Docker tag to v0.6.0

2025-12-22 16:44:24 +00:00 · 2025-11-24 18:29:03 +00:00
7 changed files with 106 additions and 106 deletions
--- a/apps/prod/lemma/kustomization.yaml
+++ b/apps/prod/lemma/kustomization.yaml
@@ -10,4 +10,4 @@ resources:

 images:
  - name: ghcr.io/lordmathis/lemma
-    newTag: v0.5.6
+    newTag: v0.6.0
--- a/clusters/prod/flux-system/gotk-components.yaml
+++ b/clusters/prod/flux-system/gotk-components.yaml
@@ -1,6 +1,6 @@
 ---
 # This manifest was generated by flux. DO NOT EDIT.
-# Flux Version: v2.7.5
+# Flux Version: v2.7.3
 # Components: source-controller,kustomize-controller,helm-controller,notification-controller,image-reflector-controller,image-automation-controller
 apiVersion: v1
 kind: Namespace
@@ -8,7 +8,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
    pod-security.kubernetes.io/warn: restricted
    pod-security.kubernetes.io/warn-version: latest
  name: flux-system
@@ -19,7 +19,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: allow-egress
  namespace: flux-system
 spec:
@@ -39,7 +39,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: allow-scraping
  namespace: flux-system
 spec:
@@ -59,7 +59,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: allow-webhooks
  namespace: flux-system
 spec:
@@ -78,7 +78,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: critical-pods-flux-system
  namespace: flux-system
 spec:
@@ -98,7 +98,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: crd-controller-flux-system
 rules:
 - apiGroups:
@@ -204,7 +204,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
    rbac.authorization.k8s.io/aggregate-to-admin: "true"
    rbac.authorization.k8s.io/aggregate-to-edit: "true"
  name: flux-edit-flux-system
@@ -212,7 +212,6 @@ rules:
 - apiGroups:
  - notification.toolkit.fluxcd.io
  - source.toolkit.fluxcd.io
-  - source.extensions.fluxcd.io
  - helm.toolkit.fluxcd.io
  - image.toolkit.fluxcd.io
  - kustomize.toolkit.fluxcd.io
@@ -231,7 +230,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
    rbac.authorization.k8s.io/aggregate-to-admin: "true"
    rbac.authorization.k8s.io/aggregate-to-edit: "true"
    rbac.authorization.k8s.io/aggregate-to-view: "true"
@@ -240,7 +239,6 @@ rules:
 - apiGroups:
  - notification.toolkit.fluxcd.io
  - source.toolkit.fluxcd.io
-  - source.extensions.fluxcd.io
  - helm.toolkit.fluxcd.io
  - image.toolkit.fluxcd.io
  - kustomize.toolkit.fluxcd.io
@@ -257,7 +255,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: cluster-reconciler-flux-system
 roleRef:
  apiGroup: rbac.authorization.k8s.io
@@ -277,7 +275,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: crd-controller-flux-system
 roleRef:
  apiGroup: rbac.authorization.k8s.io
@@ -315,7 +313,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: buckets.source.toolkit.fluxcd.io
 spec:
  group: source.toolkit.fluxcd.io
@@ -1086,7 +1084,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: externalartifacts.source.toolkit.fluxcd.io
 spec:
  group: source.toolkit.fluxcd.io
@@ -1282,7 +1280,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: gitrepositories.source.toolkit.fluxcd.io
 spec:
  group: source.toolkit.fluxcd.io
@@ -2236,7 +2234,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: helmcharts.source.toolkit.fluxcd.io
 spec:
  group: source.toolkit.fluxcd.io
@@ -2962,7 +2960,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: helmrepositories.source.toolkit.fluxcd.io
 spec:
  group: source.toolkit.fluxcd.io
@@ -3593,7 +3591,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: ocirepositories.source.toolkit.fluxcd.io
 spec:
  group: source.toolkit.fluxcd.io
@@ -4419,7 +4417,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: source-controller
  namespace: flux-system
 ---
@@ -4430,7 +4428,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
    control-plane: controller
  name: source-controller
  namespace: flux-system
@@ -4451,7 +4449,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
    control-plane: controller
  name: source-controller
  namespace: flux-system
@@ -4472,7 +4470,7 @@ spec:
        app.kubernetes.io/component: source-controller
        app.kubernetes.io/instance: flux-system
        app.kubernetes.io/part-of: flux
-        app.kubernetes.io/version: v2.7.5
+        app.kubernetes.io/version: v2.7.3
    spec:
      containers:
      - args:
@@ -4495,7 +4493,7 @@ spec:
            resourceFieldRef:
              containerName: manager
              resource: limits.memory
-        image: ghcr.io/fluxcd/source-controller:v1.7.4
+        image: ghcr.io/fluxcd/source-controller:v1.7.3
        imagePullPolicy: IfNotPresent
        livenessProbe:
          httpGet:
@@ -4559,7 +4557,7 @@ metadata:
    app.kubernetes.io/component: kustomize-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: kustomizations.kustomize.toolkit.fluxcd.io
 spec:
  group: kustomize.toolkit.fluxcd.io
@@ -5929,7 +5927,7 @@ metadata:
    app.kubernetes.io/component: kustomize-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: kustomize-controller
  namespace: flux-system
 ---
@@ -5940,7 +5938,7 @@ metadata:
    app.kubernetes.io/component: kustomize-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
    control-plane: controller
  name: kustomize-controller
  namespace: flux-system
@@ -5959,7 +5957,7 @@ spec:
        app.kubernetes.io/component: kustomize-controller
        app.kubernetes.io/instance: flux-system
        app.kubernetes.io/part-of: flux
-        app.kubernetes.io/version: v2.7.5
+        app.kubernetes.io/version: v2.7.3
    spec:
      containers:
      - args:
@@ -5978,7 +5976,7 @@ spec:
            resourceFieldRef:
              containerName: manager
              resource: limits.memory
-        image: ghcr.io/fluxcd/kustomize-controller:v1.7.3
+        image: ghcr.io/fluxcd/kustomize-controller:v1.7.2
        imagePullPolicy: IfNotPresent
        livenessProbe:
          httpGet:
@@ -6035,7 +6033,7 @@ metadata:
    app.kubernetes.io/component: helm-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: helmreleases.helm.toolkit.fluxcd.io
 spec:
  group: helm.toolkit.fluxcd.io
@@ -8666,7 +8664,7 @@ metadata:
    app.kubernetes.io/component: helm-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: helm-controller
  namespace: flux-system
 ---
@@ -8677,7 +8675,7 @@ metadata:
    app.kubernetes.io/component: helm-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
    control-plane: controller
  name: helm-controller
  namespace: flux-system
@@ -8696,7 +8694,7 @@ spec:
        app.kubernetes.io/component: helm-controller
        app.kubernetes.io/instance: flux-system
        app.kubernetes.io/part-of: flux
-        app.kubernetes.io/version: v2.7.5
+        app.kubernetes.io/version: v2.7.3
    spec:
      containers:
      - args:
@@ -8715,7 +8713,7 @@ spec:
            resourceFieldRef:
              containerName: manager
              resource: limits.memory
-        image: ghcr.io/fluxcd/helm-controller:v1.4.5
+        image: ghcr.io/fluxcd/helm-controller:v1.4.3
        imagePullPolicy: IfNotPresent
        livenessProbe:
          httpGet:
@@ -8772,7 +8770,7 @@ metadata:
    app.kubernetes.io/component: notification-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: alerts.notification.toolkit.fluxcd.io
 spec:
  group: notification.toolkit.fluxcd.io
@@ -9162,7 +9160,7 @@ metadata:
    app.kubernetes.io/component: notification-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: providers.notification.toolkit.fluxcd.io
 spec:
  group: notification.toolkit.fluxcd.io
@@ -9574,7 +9572,7 @@ metadata:
    app.kubernetes.io/component: notification-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: receivers.notification.toolkit.fluxcd.io
 spec:
  group: notification.toolkit.fluxcd.io
@@ -10051,7 +10049,7 @@ metadata:
    app.kubernetes.io/component: notification-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: notification-controller
  namespace: flux-system
 ---
@@ -10062,7 +10060,7 @@ metadata:
    app.kubernetes.io/component: notification-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
    control-plane: controller
  name: notification-controller
  namespace: flux-system
@@ -10083,7 +10081,7 @@ metadata:
    app.kubernetes.io/component: notification-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
    control-plane: controller
  name: webhook-receiver
  namespace: flux-system
@@ -10104,7 +10102,7 @@ metadata:
    app.kubernetes.io/component: notification-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
    control-plane: controller
  name: notification-controller
  namespace: flux-system
@@ -10123,7 +10121,7 @@ spec:
        app.kubernetes.io/component: notification-controller
        app.kubernetes.io/instance: flux-system
        app.kubernetes.io/part-of: flux
-        app.kubernetes.io/version: v2.7.5
+        app.kubernetes.io/version: v2.7.3
    spec:
      containers:
      - args:
@@ -10141,7 +10139,7 @@ spec:
            resourceFieldRef:
              containerName: manager
              resource: limits.memory
-        image: ghcr.io/fluxcd/notification-controller:v1.7.5
+        image: ghcr.io/fluxcd/notification-controller:v1.7.4
        imagePullPolicy: IfNotPresent
        livenessProbe:
          httpGet:
@@ -10203,7 +10201,7 @@ metadata:
    app.kubernetes.io/component: image-reflector-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: imagepolicies.image.toolkit.fluxcd.io
 spec:
  group: image.toolkit.fluxcd.io
@@ -10795,7 +10793,7 @@ metadata:
    app.kubernetes.io/component: image-reflector-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: imagerepositories.image.toolkit.fluxcd.io
 spec:
  group: image.toolkit.fluxcd.io
@@ -11405,7 +11403,7 @@ metadata:
    app.kubernetes.io/component: image-reflector-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: image-reflector-controller
  namespace: flux-system
 ---
@@ -11416,7 +11414,7 @@ metadata:
    app.kubernetes.io/component: image-reflector-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
    control-plane: controller
  name: image-reflector-controller
  namespace: flux-system
@@ -11435,7 +11433,7 @@ spec:
        app.kubernetes.io/component: image-reflector-controller
        app.kubernetes.io/instance: flux-system
        app.kubernetes.io/part-of: flux
-        app.kubernetes.io/version: v2.7.5
+        app.kubernetes.io/version: v2.7.3
    spec:
      containers:
      - args:
@@ -11454,7 +11452,7 @@ spec:
            resourceFieldRef:
              containerName: manager
              resource: limits.memory
-        image: ghcr.io/fluxcd/image-reflector-controller:v1.0.4
+        image: ghcr.io/fluxcd/image-reflector-controller:v1.0.3
        imagePullPolicy: IfNotPresent
        livenessProbe:
          httpGet:
@@ -11514,7 +11512,7 @@ metadata:
    app.kubernetes.io/component: image-automation-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: imageupdateautomations.image.toolkit.fluxcd.io
 spec:
  group: image.toolkit.fluxcd.io
@@ -12343,7 +12341,7 @@ metadata:
    app.kubernetes.io/component: image-automation-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: image-automation-controller
  namespace: flux-system
 ---
@@ -12354,7 +12352,7 @@ metadata:
    app.kubernetes.io/component: image-automation-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
    control-plane: controller
  name: image-automation-controller
  namespace: flux-system
@@ -12373,7 +12371,7 @@ spec:
        app.kubernetes.io/component: image-automation-controller
        app.kubernetes.io/instance: flux-system
        app.kubernetes.io/part-of: flux
-        app.kubernetes.io/version: v2.7.5
+        app.kubernetes.io/version: v2.7.3
    spec:
      containers:
      - args:
@@ -12392,7 +12390,7 @@ spec:
            resourceFieldRef:
              containerName: manager
              resource: limits.memory
-        image: ghcr.io/fluxcd/image-automation-controller:v1.0.4
+        image: ghcr.io/fluxcd/image-automation-controller:v1.0.3
        imagePullPolicy: IfNotPresent
        livenessProbe:
          httpGet:
--- a/infrastructure/controllers/cert-manager/release.yaml
+++ b/infrastructure/controllers/cert-manager/release.yaml
@@ -9,7 +9,7 @@ spec:
  chart:
    spec:
      chart: cert-manager
-      version: "v1.19.2"
+      version: "v1.19.1"
      sourceRef:
        kind: HelmRepository
        name: cert-manager
--- a/infrastructure/controllers/metallb/release.yaml
+++ b/infrastructure/controllers/metallb/release.yaml
@@ -9,7 +9,7 @@ spec:
  chart:
    spec:
      chart: metallb
-      version: "0.15.3"
+      version: "0.15.2"
      sourceRef:
        kind: HelmRepository
        name: metallb
--- a/infrastructure/controllers/tailscale/release.yaml
+++ b/infrastructure/controllers/tailscale/release.yaml
@@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: tailscale-operator
-      version: "1.90.9"
+      version: "1.90.8"
      sourceRef:
        kind: HelmRepository
        name: tailscale
--- a/provisioning/.terraform.lock.hcl
+++ b/provisioning/.terraform.lock.hcl
@@ -23,25 +23,25 @@ provider "registry.opentofu.org/carlpett/sops" {
 }

 provider "registry.opentofu.org/cloudflare/cloudflare" {
-  version     = "5.14.0"
-  constraints = "~> 5.14.0"
+  version     = "5.13.0"
+  constraints = "~> 5.13.0"
  hashes = [
-    "h1:3jPvvMTyL3MK9/TNC3P9gneO/49+w+0R6ZC2strHYEQ=",
-    "h1:5rwgZxUA7qCU4HWcE7VUE5hPqrAH1Bk9Rr13qEeR1KY=",
-    "h1:9P4hI5ZCaQg7r6sWI2ym/emBL0PoqwRIH2lkS8M0utI=",
-    "h1:K1BwBdxNZKlDWzcLny+JJ5hJSfVHQQGLhLGDFiwB21s=",
-    "h1:TLkPOFWOYgBr4VruNBCBz6vXfiSL3C4gR2ADHr8o1c0=",
-    "h1:cTGeJfUr/A+9lAVtL2nMeS79YmHhYXTKHm0Hw1QAvDU=",
-    "h1:ntgqo1xnrkfRvYdkIWiaC7Wp3iC6mZCdRXH39FdjfQg=",
-    "h1:vw0FlywCuCQ8AnYA8P36ZIlxpmqSGBVF/q+Hq8Dr6f4=",
-    "zh:0556cb6f38067c95e320f2d5680cf9851991d28448da903dd50b6c4b54de1c0b",
-    "zh:7cdd70418aa6571c27de4102e3cc3228f6edbe4a1eaa7927f772234ee09fb519",
-    "zh:84feef6c19993da06139e05dd6e1fceb7beb086f041cb9bc4edcae6081fe4812",
-    "zh:8b7dfcececcced324a8a8344fcb48b746f218174ffc691e36a54d09f2fb5e797",
-    "zh:99ba55ced06327bd8f16077f26d95593d3d77107e9faf204bf1a2485653eb02e",
-    "zh:9e93df24a28ffe7551458035bae8ea1f4fdab74a9a47ce61f1008bc18025ecd0",
-    "zh:a03e65a78c70578f3ebb3f2d84df516a33e2c3e9b62c0e3a2d2cea4f411c5e83",
-    "zh:e57ab18a3275dee18d69910a1103a52c8071d77e449e50b1a8b9d80779068145",
+    "h1:97C7zEwL5uJZd3I+/5KFtML7NndkfCuqk3vEUFiXbo8=",
+    "h1:D+Ty0Xfr+/2HrWR1pt2gzguNWOvd3AQ/TiACUBvAnEA=",
+    "h1:JMLFKGbmm1T/sHEbgtJ7YCRCdcogaR5CNlaiPs64en8=",
+    "h1:LTLQ106lZE8kbVPh3/XSPjkcPxoIA6XLin86oSBwivA=",
+    "h1:Y3oDoed8OZUvTWB3ZhrTrYK4i8E2PzooxI51LHIfvSc=",
+    "h1:dUNaOiPP8/xd0FqC5KeVznl3YfAxMcK66V84lbNMNvk=",
+    "h1:k3pb/vVKqf/Ff7fWpcRBnisBEz0bNc4jYF0/UXeopYc=",
+    "h1:ymDTsW0Te05AkvjZ8JQVtPOCnqIaSywj5drmu8rOVmw=",
+    "zh:1ff138eabee392059ddb31f4765b69c8cb3526028e62f9ea1dc4f181f71494b5",
+    "zh:2f2686a43e22c5210463f467902b83dcfd1849aa39eaca9ae741a1fd8e3d893f",
+    "zh:6de2cea01a34dac3b066f898d66ebad8a1d2a3f3e6f65b718e75da982977b2ea",
+    "zh:6fdbf5c8a9a5655ed54c1bf6eb320e8fa6e60b621a858b1ad6108fc7770dd794",
+    "zh:7f007a8a5f90973ca884586899a6fba52f777a0741521b56dc6a654349ae49d7",
+    "zh:ae40122c16e628509de573316a9397a41bc1855398c7ffc807710ed58a03a2c4",
+    "zh:bd4f309b9815c85b1326f43cd33fdf12e829a2b2185dd65129aaa5d927352596",
+    "zh:c2b4df5f7aa3760123435aa5f410a6b7f101608bdb4edf2c48424022386b4a3d",
    "zh:f809ab383cca0a5f83072981c64208cbd7fa67e986a86ee02dd2c82333221e32",
  ]
 }
@@ -64,34 +64,36 @@ provider "registry.opentofu.org/hashicorp/cloudinit" {
 }

 provider "registry.opentofu.org/hetznercloud/hcloud" {
-  version     = "1.57.0"
-  constraints = "~> 1.57.0"
+  version     = "1.56.0"
+  constraints = "~> 1.56.0"
  hashes = [
-    "h1:0zhuOTR/o5N1v3YhqAF+FV4zzAhf7u4daYeMjCSggTs=",
-    "h1:3L7tShwvc84Pq3x++t/eUOCpRj56+0zz0xXLSL0MzmM=",
-    "h1:4puV5dGyissHRQ8qxhxiFIFlk3/BDrIGBhjLTOOUCYI=",
-    "h1:6r1yJRzfDDyYi8HcFy+xn3/wEUF1Haelj0uitxzgyTE=",
-    "h1:868UK5UDkokWwcTEDe51zRkYm/fglnQmPQLz/KKWj50=",
-    "h1:90Awue4l5neJvyotgLRivOpDNGTP7dvrtaswrNhKZH8=",
-    "h1:NN5kxyHbylzToCBXaz+SOmbCAm0wImXaMfQa+nSDRL0=",
-    "h1:NgmyKBvR1DwY81s68oxD7PBG5ro2U7Buoqubyhjsq7w=",
-    "h1:TDdNxF3yyWkUqUg7eSSKtAzoQaH9OCUL9eg2Lh0Oh+0=",
-    "h1:Xk+Whn6wnhEJEeiO/mPII/mOL+buHLj05AKy4TbDz3U=",
-    "h1:qDj6odiMxH7GSJew6ThZdeGtkFnIK0zJavo022VBDLY=",
-    "h1:rACnAzPlfbR1zy3n+febsWuoWPvN1Tt+U9lyVDFRb4w=",
-    "h1:xpAcuja19Ts7bCpmULKdBw4dEBJhF/eL6AjM4xDBEAI=",
-    "zh:016ecc39328f34f6c0ffa413598f354824f7878c89cd031f123edb4bc8a687a2",
-    "zh:10b362dc0847200c987214b129b5f85e2f7d8ad417261a1d2dd04ab74de15603",
-    "zh:194647d9a61dca4f411f44580316b88a11095d7a99679d445f9b0f2c1ba976c4",
-    "zh:1d8aafe2ce7890696385bb3a0c3286e7ee3020416d337f59935406e4c6f91de6",
-    "zh:594585616210fb232fad4ebda2387ecd3f483931e00eff988fca83add6ce7cfc",
-    "zh:65e50be33ffb85580546f119839e1293591cc6d4db729d809931d0408b6ae408",
-    "zh:7d4ed5bd8c477ec304142e2160203a76a0d09c93d224950bda253172b2571038",
-    "zh:90a70a70a266b78c8216903e711904e6969b3957d182602b5d788602ec9ef323",
-    "zh:abb8e28e96fb8de270995873de980896b7cb53cfc550f02c50eaa42884624ba9",
-    "zh:bbf34dca2de6e105ca7204222162a0402d8e9e9a28e1de5ffbaa2c0d6270a059",
-    "zh:c1a9edb693d632dcb5c3c9ee84c97138e08eadb9354e28592efd581f68ac0385",
-    "zh:dadbf1368fae314fe8dcb99ebefbc78409f3fc0e3808cd92ea573b8eee1cae98",
-    "zh:e713e00ca27348abd18da2eeff861905e84050e3e7e008f14a0c63c70ab2ff84",
+    "h1:+4Qtwtrd3LVbfxYFDwBMH9WDZBJKKsbqHYXnprGUby4=",
+    "h1:05vLahDH6JGeRPvEFXlCooqNbtLO6Tkflc+N57aUIQo=",
+    "h1:2H1wnJ/4a6Bdozb2ghdVrAasAiU27cBo2XWK6zQW9xM=",
+    "h1:9XtTszjyt2FI7S6OpGBURMA2Vuc8WIlXnw/PuXY+Fvc=",
+    "h1:DkNOAPovq7bHzRdsLkO0Q8DJ98hBTihOOfALMQuncFM=",
+    "h1:IQNU+m7xwtnaMy6ZNQCB2AZ7cVb+GODCAzGeKJrME5o=",
+    "h1:Nr1/xrFr7MSF5h0cqLnr+eHrosAsNXDw7yBWlpKnF64=",
+    "h1:Y1oUxyPwoYFjsC4JrQ8pNY9oUaD4C8bN8l7DV4YScXg=",
+    "h1:clFcTVSFxny14+16ys7z7rwLuXjqBegC71VOFp/yAc8=",
+    "h1:e5beJALl2iuVt9kQcLG9EK5AfBqnfvsUsPxNMrtJzW8=",
+    "h1:fWOxAwlRmO/53Cc/8OhZcYrtY1doIwPxjZsqPp7Ed7s=",
+    "h1:fmMOaMk2Okn96zFiIKdiu3K5s7pfSY23Bn1KPbOoWBg=",
+    "h1:iqptB9j307n3Mp+Pn0tn8pSSC3pJvNCDA84ennuw320=",
+    "h1:nOUvAwDKAWqAsNe09IpAUJzWSD2HVRBX9XKF6h5Xr2U=",
+    "zh:01eaf9af844ba544b58180664a93d9ce7c058c72111f2fb4e0c48297e7bf7adf",
+    "zh:1cab6d661040321aeddeafcfba6594bac180d50ea65f68a942b8167897847a46",
+    "zh:24f7f6e55614fba0bfd30bbe10e74095f2ef49f726ec4bfd7f2ab3cea1bb5fd6",
+    "zh:2e957a02957190413cfd84468a08fbfd0ad58b9cb4d5f39b63a0f3670fe0f35b",
+    "zh:522665361563f87f9ee9aebfc298d7cc47013ddef37f05eda543e2e46cb60cb4",
+    "zh:5befd7a20ad903e60e76b2d2d24f59301392d4cc01b30596281585ba3dc036c4",
+    "zh:76a2c3b3aa0af51e1605cd7f331ff1106f1b2c992c4bd2ade7a71a1922bb3b99",
+    "zh:826bc65d7c57f7d329bb20c6c8980b8c04679a53c4839421053917156d56efb1",
+    "zh:9190e004f16625bf6eae15cce0a32823fc49d9e86434b115f63fa0b078dc3959",
+    "zh:9bab6067f45329d73bb56453feebee4bc61df592ff0123501b734714da6c205c",
+    "zh:9c1ed53070d624b2e75da150ce65a75339578f2c98b306d09b0bfbd94695b77d",
+    "zh:c8d07c46143e81f6400d143041b4ba9d94290856d749a328b3331b61cd4659bd",
+    "zh:cc10db1ef06a5dc5427317f2514ae709de46f8fcfacb82508a270618b39248a1",
+    "zh:d272a301eb80b65a66302612302c60f25bc7dd7a8490a603fb4b9e183b54017a",
  ]
 }
--- a/provisioning/main.tf
+++ b/provisioning/main.tf
@@ -3,7 +3,7 @@ terraform {
  required_providers {
    hcloud = {
      source  = "hetznercloud/hcloud"
-      version = "~> 1.57.0"
+      version = "~> 1.56.0"
    }
    sops = {
      source  = "carlpett/sops"
@@ -11,7 +11,7 @@ terraform {
    }
    cloudflare = {
      source  = "cloudflare/cloudflare"
-      version = "~> 5.14.0"
+      version = "~> 5.13.0"
    }
  }
  required_version = ">= 0.13"