Update ghcr.io/lordmathis/lemma Docker tag to v0.6.0

2025-12-23 17:14:25 +00:00 · 2025-11-12 00:03:31 +00:00
9 changed files with 108 additions and 108 deletions
--- a/apps/prod/lemma/kustomization.yaml
+++ b/apps/prod/lemma/kustomization.yaml
@@ -10,4 +10,4 @@ resources:

 images:
  - name: ghcr.io/lordmathis/lemma
-    newTag: v0.5.6
+    newTag: v0.6.0
--- a/clusters/prod/flux-system/gotk-components.yaml
+++ b/clusters/prod/flux-system/gotk-components.yaml
@@ -1,6 +1,6 @@
 ---
 # This manifest was generated by flux. DO NOT EDIT.
-# Flux Version: v2.7.5
+# Flux Version: v2.7.3
 # Components: source-controller,kustomize-controller,helm-controller,notification-controller,image-reflector-controller,image-automation-controller
 apiVersion: v1
 kind: Namespace
@@ -8,7 +8,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
    pod-security.kubernetes.io/warn: restricted
    pod-security.kubernetes.io/warn-version: latest
  name: flux-system
@@ -19,7 +19,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: allow-egress
  namespace: flux-system
 spec:
@@ -39,7 +39,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: allow-scraping
  namespace: flux-system
 spec:
@@ -59,7 +59,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: allow-webhooks
  namespace: flux-system
 spec:
@@ -78,7 +78,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: critical-pods-flux-system
  namespace: flux-system
 spec:
@@ -98,7 +98,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: crd-controller-flux-system
 rules:
 - apiGroups:
@@ -204,7 +204,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
    rbac.authorization.k8s.io/aggregate-to-admin: "true"
    rbac.authorization.k8s.io/aggregate-to-edit: "true"
  name: flux-edit-flux-system
@@ -212,7 +212,6 @@ rules:
 - apiGroups:
  - notification.toolkit.fluxcd.io
  - source.toolkit.fluxcd.io
-  - source.extensions.fluxcd.io
  - helm.toolkit.fluxcd.io
  - image.toolkit.fluxcd.io
  - kustomize.toolkit.fluxcd.io
@@ -231,7 +230,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
    rbac.authorization.k8s.io/aggregate-to-admin: "true"
    rbac.authorization.k8s.io/aggregate-to-edit: "true"
    rbac.authorization.k8s.io/aggregate-to-view: "true"
@@ -240,7 +239,6 @@ rules:
 - apiGroups:
  - notification.toolkit.fluxcd.io
  - source.toolkit.fluxcd.io
-  - source.extensions.fluxcd.io
  - helm.toolkit.fluxcd.io
  - image.toolkit.fluxcd.io
  - kustomize.toolkit.fluxcd.io
@@ -257,7 +255,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: cluster-reconciler-flux-system
 roleRef:
  apiGroup: rbac.authorization.k8s.io
@@ -277,7 +275,7 @@ metadata:
  labels:
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: crd-controller-flux-system
 roleRef:
  apiGroup: rbac.authorization.k8s.io
@@ -315,7 +313,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: buckets.source.toolkit.fluxcd.io
 spec:
  group: source.toolkit.fluxcd.io
@@ -1086,7 +1084,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: externalartifacts.source.toolkit.fluxcd.io
 spec:
  group: source.toolkit.fluxcd.io
@@ -1282,7 +1280,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: gitrepositories.source.toolkit.fluxcd.io
 spec:
  group: source.toolkit.fluxcd.io
@@ -2236,7 +2234,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: helmcharts.source.toolkit.fluxcd.io
 spec:
  group: source.toolkit.fluxcd.io
@@ -2962,7 +2960,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: helmrepositories.source.toolkit.fluxcd.io
 spec:
  group: source.toolkit.fluxcd.io
@@ -3593,7 +3591,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: ocirepositories.source.toolkit.fluxcd.io
 spec:
  group: source.toolkit.fluxcd.io
@@ -4419,7 +4417,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: source-controller
  namespace: flux-system
 ---
@@ -4430,7 +4428,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
    control-plane: controller
  name: source-controller
  namespace: flux-system
@@ -4451,7 +4449,7 @@ metadata:
    app.kubernetes.io/component: source-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
    control-plane: controller
  name: source-controller
  namespace: flux-system
@@ -4472,7 +4470,7 @@ spec:
        app.kubernetes.io/component: source-controller
        app.kubernetes.io/instance: flux-system
        app.kubernetes.io/part-of: flux
-        app.kubernetes.io/version: v2.7.5
+        app.kubernetes.io/version: v2.7.3
    spec:
      containers:
      - args:
@@ -4495,7 +4493,7 @@ spec:
            resourceFieldRef:
              containerName: manager
              resource: limits.memory
-        image: ghcr.io/fluxcd/source-controller:v1.7.4
+        image: ghcr.io/fluxcd/source-controller:v1.7.3
        imagePullPolicy: IfNotPresent
        livenessProbe:
          httpGet:
@@ -4559,7 +4557,7 @@ metadata:
    app.kubernetes.io/component: kustomize-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: kustomizations.kustomize.toolkit.fluxcd.io
 spec:
  group: kustomize.toolkit.fluxcd.io
@@ -5929,7 +5927,7 @@ metadata:
    app.kubernetes.io/component: kustomize-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: kustomize-controller
  namespace: flux-system
 ---
@@ -5940,7 +5938,7 @@ metadata:
    app.kubernetes.io/component: kustomize-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
    control-plane: controller
  name: kustomize-controller
  namespace: flux-system
@@ -5959,7 +5957,7 @@ spec:
        app.kubernetes.io/component: kustomize-controller
        app.kubernetes.io/instance: flux-system
        app.kubernetes.io/part-of: flux
-        app.kubernetes.io/version: v2.7.5
+        app.kubernetes.io/version: v2.7.3
    spec:
      containers:
      - args:
@@ -5978,7 +5976,7 @@ spec:
            resourceFieldRef:
              containerName: manager
              resource: limits.memory
-        image: ghcr.io/fluxcd/kustomize-controller:v1.7.3
+        image: ghcr.io/fluxcd/kustomize-controller:v1.7.2
        imagePullPolicy: IfNotPresent
        livenessProbe:
          httpGet:
@@ -6035,7 +6033,7 @@ metadata:
    app.kubernetes.io/component: helm-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: helmreleases.helm.toolkit.fluxcd.io
 spec:
  group: helm.toolkit.fluxcd.io
@@ -8666,7 +8664,7 @@ metadata:
    app.kubernetes.io/component: helm-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: helm-controller
  namespace: flux-system
 ---
@@ -8677,7 +8675,7 @@ metadata:
    app.kubernetes.io/component: helm-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
    control-plane: controller
  name: helm-controller
  namespace: flux-system
@@ -8696,7 +8694,7 @@ spec:
        app.kubernetes.io/component: helm-controller
        app.kubernetes.io/instance: flux-system
        app.kubernetes.io/part-of: flux
-        app.kubernetes.io/version: v2.7.5
+        app.kubernetes.io/version: v2.7.3
    spec:
      containers:
      - args:
@@ -8715,7 +8713,7 @@ spec:
            resourceFieldRef:
              containerName: manager
              resource: limits.memory
-        image: ghcr.io/fluxcd/helm-controller:v1.4.5
+        image: ghcr.io/fluxcd/helm-controller:v1.4.3
        imagePullPolicy: IfNotPresent
        livenessProbe:
          httpGet:
@@ -8772,7 +8770,7 @@ metadata:
    app.kubernetes.io/component: notification-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: alerts.notification.toolkit.fluxcd.io
 spec:
  group: notification.toolkit.fluxcd.io
@@ -9162,7 +9160,7 @@ metadata:
    app.kubernetes.io/component: notification-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: providers.notification.toolkit.fluxcd.io
 spec:
  group: notification.toolkit.fluxcd.io
@@ -9574,7 +9572,7 @@ metadata:
    app.kubernetes.io/component: notification-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: receivers.notification.toolkit.fluxcd.io
 spec:
  group: notification.toolkit.fluxcd.io
@@ -10051,7 +10049,7 @@ metadata:
    app.kubernetes.io/component: notification-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: notification-controller
  namespace: flux-system
 ---
@@ -10062,7 +10060,7 @@ metadata:
    app.kubernetes.io/component: notification-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
    control-plane: controller
  name: notification-controller
  namespace: flux-system
@@ -10083,7 +10081,7 @@ metadata:
    app.kubernetes.io/component: notification-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
    control-plane: controller
  name: webhook-receiver
  namespace: flux-system
@@ -10104,7 +10102,7 @@ metadata:
    app.kubernetes.io/component: notification-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
    control-plane: controller
  name: notification-controller
  namespace: flux-system
@@ -10123,7 +10121,7 @@ spec:
        app.kubernetes.io/component: notification-controller
        app.kubernetes.io/instance: flux-system
        app.kubernetes.io/part-of: flux
-        app.kubernetes.io/version: v2.7.5
+        app.kubernetes.io/version: v2.7.3
    spec:
      containers:
      - args:
@@ -10141,7 +10139,7 @@ spec:
            resourceFieldRef:
              containerName: manager
              resource: limits.memory
-        image: ghcr.io/fluxcd/notification-controller:v1.7.5
+        image: ghcr.io/fluxcd/notification-controller:v1.7.4
        imagePullPolicy: IfNotPresent
        livenessProbe:
          httpGet:
@@ -10203,7 +10201,7 @@ metadata:
    app.kubernetes.io/component: image-reflector-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: imagepolicies.image.toolkit.fluxcd.io
 spec:
  group: image.toolkit.fluxcd.io
@@ -10795,7 +10793,7 @@ metadata:
    app.kubernetes.io/component: image-reflector-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: imagerepositories.image.toolkit.fluxcd.io
 spec:
  group: image.toolkit.fluxcd.io
@@ -11405,7 +11403,7 @@ metadata:
    app.kubernetes.io/component: image-reflector-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: image-reflector-controller
  namespace: flux-system
 ---
@@ -11416,7 +11414,7 @@ metadata:
    app.kubernetes.io/component: image-reflector-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
    control-plane: controller
  name: image-reflector-controller
  namespace: flux-system
@@ -11435,7 +11433,7 @@ spec:
        app.kubernetes.io/component: image-reflector-controller
        app.kubernetes.io/instance: flux-system
        app.kubernetes.io/part-of: flux
-        app.kubernetes.io/version: v2.7.5
+        app.kubernetes.io/version: v2.7.3
    spec:
      containers:
      - args:
@@ -11454,7 +11452,7 @@ spec:
            resourceFieldRef:
              containerName: manager
              resource: limits.memory
-        image: ghcr.io/fluxcd/image-reflector-controller:v1.0.4
+        image: ghcr.io/fluxcd/image-reflector-controller:v1.0.3
        imagePullPolicy: IfNotPresent
        livenessProbe:
          httpGet:
@@ -11514,7 +11512,7 @@ metadata:
    app.kubernetes.io/component: image-automation-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: imageupdateautomations.image.toolkit.fluxcd.io
 spec:
  group: image.toolkit.fluxcd.io
@@ -12343,7 +12341,7 @@ metadata:
    app.kubernetes.io/component: image-automation-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
  name: image-automation-controller
  namespace: flux-system
 ---
@@ -12354,7 +12352,7 @@ metadata:
    app.kubernetes.io/component: image-automation-controller
    app.kubernetes.io/instance: flux-system
    app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v2.7.5
+    app.kubernetes.io/version: v2.7.3
    control-plane: controller
  name: image-automation-controller
  namespace: flux-system
@@ -12373,7 +12371,7 @@ spec:
        app.kubernetes.io/component: image-automation-controller
        app.kubernetes.io/instance: flux-system
        app.kubernetes.io/part-of: flux
-        app.kubernetes.io/version: v2.7.5
+        app.kubernetes.io/version: v2.7.3
    spec:
      containers:
      - args:
@@ -12392,7 +12390,7 @@ spec:
            resourceFieldRef:
              containerName: manager
              resource: limits.memory
-        image: ghcr.io/fluxcd/image-automation-controller:v1.0.4
+        image: ghcr.io/fluxcd/image-automation-controller:v1.0.3
        imagePullPolicy: IfNotPresent
        livenessProbe:
          httpGet:
--- a/infrastructure/controllers/cert-manager/release.yaml
+++ b/infrastructure/controllers/cert-manager/release.yaml
@@ -9,7 +9,7 @@ spec:
  chart:
    spec:
      chart: cert-manager
-      version: "v1.19.2"
+      version: "v1.19.1"
      sourceRef:
        kind: HelmRepository
        name: cert-manager
--- a/infrastructure/controllers/metallb/release.yaml
+++ b/infrastructure/controllers/metallb/release.yaml
@@ -9,7 +9,7 @@ spec:
  chart:
    spec:
      chart: metallb
-      version: "0.15.3"
+      version: "0.15.2"
      sourceRef:
        kind: HelmRepository
        name: metallb
--- a/infrastructure/controllers/tailscale/release.yaml
+++ b/infrastructure/controllers/tailscale/release.yaml
@@ -8,7 +8,7 @@ spec:
  chart:
    spec:
      chart: tailscale-operator
-      version: "1.92.4"
+      version: "1.90.6"
      sourceRef:
        kind: HelmRepository
        name: tailscale
--- a/infrastructure/controllers/traefik/crds.yaml
+++ b/infrastructure/controllers/traefik/crds.yaml
@@ -8,7 +8,7 @@ spec:
  interval: 30m
  url: https://github.com/traefik/traefik-helm-chart.git
  ref:
-    tag: v38.0.1
+    tag: v37.3.0
  ignore: |
    # exclude all
    /*
--- a/infrastructure/controllers/traefik/release.yaml
+++ b/infrastructure/controllers/traefik/release.yaml
@@ -9,7 +9,7 @@ spec:
  chart:
    spec:
      chart: traefik
-      version: 38.0.1
+      version: 37.3.0
      sourceRef:
        kind: HelmRepository
        name: traefik-helm-repo
--- a/provisioning/.terraform.lock.hcl
+++ b/provisioning/.terraform.lock.hcl
@@ -23,26 +23,26 @@ provider "registry.opentofu.org/carlpett/sops" {
 }

 provider "registry.opentofu.org/cloudflare/cloudflare" {
-  version     = "5.15.0"
-  constraints = "~> 5.15.0"
+  version     = "5.12.0"
+  constraints = "~> 5.12.0"
  hashes = [
-    "h1:BIyO+gxARWsAJ4EV8Q5x1N+lAoeXNk/Hh6cCZp6nP6o=",
-    "h1:EY8mWQO1NTqXuxnZxwVppF7AiLRdx7vRLYk6O7yzgPs=",
-    "h1:LZytTwtRYkXKX5kJ43GKqkP1NSqJMTrPET/A9s2Vd9s=",
-    "h1:ZpfZzvKX16IgFRhutTTy/pCqw1Yo4ms5XJB+EFAjGvA=",
-    "h1:kQILtdI9nMz2AYSgbp49LE1XrMfcF1/iuM76KrwJRqQ=",
-    "h1:prHyv+irfadmobKZm1LKEBgJKSpcdWQtjUhyJdC9R1E=",
-    "h1:t18NBiA0W2loZgd5MHGTtkNMBR6HAFe+o8FVeyhwLsw=",
-    "h1:zpZPqC4kr7WOyDLdbIb2FhlYLLc1ZU53KC+i1D+gKRg=",
-    "zh:20a72bdbb28435f11d165b367732369e8f8163100a214e89ad720dae03fafa0c",
-    "zh:2eabd7a51fd7aafcab9861631d85c895914857e4fcd6fe2dd80bac22e74a1f47",
-    "zh:62828afbc1ba0e0a64bbb7d5d42ae3c2fbbaabb793010b07eba770ba91bae94f",
-    "zh:6693f1021e52c34a629300fbcd91f8bd4ca386fda3b45aec746b9c200c28a42c",
-    "zh:6873a15454b289e5baecc1d36ce8997266438761386a320753c63f13407f4a6b",
-    "zh:afbf4e56b3a5e5950b35b02b553313e4a2008415920b23f536682269c64ca549",
-    "zh:db367612900bc2e5a01c6a325e4cff9b1b04960ce9de3dd41671dda5a627ca1d",
-    "zh:eb7365eafc6160c3b304a9ce6a598e5400a2e779e9e2bd27976df244f79f774f",
+    "h1:Eo6pSEPqJQ+j/lbQp7fsoiEnJ5OWNoiCixsTmfXokZE=",
+    "h1:F3+tCZyoldPT0xPPuZxLCvVKo3VlHFXnT1S9v7qNXms=",
+    "h1:IvMPMJrmyw6x+8GZklY7qb8VXrjr00zwsN+TFlxkCTM=",
+    "h1:Uv+BuJvfFb8Wv0RT15N3yMZe4xz30WWXw9/Kb1N0lX8=",
+    "h1:bgKFK8OhAQ32McGDsP2CGqXIlThXj4GPe/aC4Y/siKw=",
+    "h1:iTrWuV8S1Kau9qU8SX2vZKpK1/V1AEE4YFVipDxqtFg=",
+    "h1:vrbI9qWFMZPA47W+OLnqcBT7+3gk24vfqj5kzoOAyMU=",
+    "h1:xJHZg5hgx0CT/jdJWiKfQGxP9xAdtCW5GdC1SI9DH2w=",
+    "zh:06166a72e69eb712ad2c8b49c1ed060223b0d57bb95ce5f6c8440ce19253913e",
+    "zh:484c32dc4fbe1f7baaf00f8d0d1774d259e1a602aebf60b8dea8c6dd122c1d27",
+    "zh:914b4796a5f2c5914cb94864a7541ce132c0e287bf49a5328706d50152117bc4",
+    "zh:bbcf3effe11ad44988c2aa4482c3fd0089ca86527463a9a873cecda1a4a022bc",
+    "zh:c2a59f29b4b4c0344dbb9ab3d78ebcc1d32153f1fd7e919eba7edf7d825119c2",
+    "zh:d6900b39b9c58743e6b1f05b2db7c39276c94f74d501f23bebb88d413266c57c",
+    "zh:f000d33075c30e616df8e58e341614e958eed4a51f3427d2e1a18ea1b7e0c6c6",
    "zh:f809ab383cca0a5f83072981c64208cbd7fa67e986a86ee02dd2c82333221e32",
+    "zh:ff4fd5b3b0327f8f41fc65d909839288fb98ecfe32a9aff11d2e2638f2109302",
  ]
 }

@@ -64,34 +64,36 @@ provider "registry.opentofu.org/hashicorp/cloudinit" {
 }

 provider "registry.opentofu.org/hetznercloud/hcloud" {
-  version     = "1.57.0"
-  constraints = "~> 1.57.0"
+  version     = "1.56.0"
+  constraints = "~> 1.56.0"
  hashes = [
-    "h1:0zhuOTR/o5N1v3YhqAF+FV4zzAhf7u4daYeMjCSggTs=",
-    "h1:3L7tShwvc84Pq3x++t/eUOCpRj56+0zz0xXLSL0MzmM=",
-    "h1:4puV5dGyissHRQ8qxhxiFIFlk3/BDrIGBhjLTOOUCYI=",
-    "h1:6r1yJRzfDDyYi8HcFy+xn3/wEUF1Haelj0uitxzgyTE=",
-    "h1:868UK5UDkokWwcTEDe51zRkYm/fglnQmPQLz/KKWj50=",
-    "h1:90Awue4l5neJvyotgLRivOpDNGTP7dvrtaswrNhKZH8=",
-    "h1:NN5kxyHbylzToCBXaz+SOmbCAm0wImXaMfQa+nSDRL0=",
-    "h1:NgmyKBvR1DwY81s68oxD7PBG5ro2U7Buoqubyhjsq7w=",
-    "h1:TDdNxF3yyWkUqUg7eSSKtAzoQaH9OCUL9eg2Lh0Oh+0=",
-    "h1:Xk+Whn6wnhEJEeiO/mPII/mOL+buHLj05AKy4TbDz3U=",
-    "h1:qDj6odiMxH7GSJew6ThZdeGtkFnIK0zJavo022VBDLY=",
-    "h1:rACnAzPlfbR1zy3n+febsWuoWPvN1Tt+U9lyVDFRb4w=",
-    "h1:xpAcuja19Ts7bCpmULKdBw4dEBJhF/eL6AjM4xDBEAI=",
-    "zh:016ecc39328f34f6c0ffa413598f354824f7878c89cd031f123edb4bc8a687a2",
-    "zh:10b362dc0847200c987214b129b5f85e2f7d8ad417261a1d2dd04ab74de15603",
-    "zh:194647d9a61dca4f411f44580316b88a11095d7a99679d445f9b0f2c1ba976c4",
-    "zh:1d8aafe2ce7890696385bb3a0c3286e7ee3020416d337f59935406e4c6f91de6",
-    "zh:594585616210fb232fad4ebda2387ecd3f483931e00eff988fca83add6ce7cfc",
-    "zh:65e50be33ffb85580546f119839e1293591cc6d4db729d809931d0408b6ae408",
-    "zh:7d4ed5bd8c477ec304142e2160203a76a0d09c93d224950bda253172b2571038",
-    "zh:90a70a70a266b78c8216903e711904e6969b3957d182602b5d788602ec9ef323",
-    "zh:abb8e28e96fb8de270995873de980896b7cb53cfc550f02c50eaa42884624ba9",
-    "zh:bbf34dca2de6e105ca7204222162a0402d8e9e9a28e1de5ffbaa2c0d6270a059",
-    "zh:c1a9edb693d632dcb5c3c9ee84c97138e08eadb9354e28592efd581f68ac0385",
-    "zh:dadbf1368fae314fe8dcb99ebefbc78409f3fc0e3808cd92ea573b8eee1cae98",
-    "zh:e713e00ca27348abd18da2eeff861905e84050e3e7e008f14a0c63c70ab2ff84",
+    "h1:+4Qtwtrd3LVbfxYFDwBMH9WDZBJKKsbqHYXnprGUby4=",
+    "h1:05vLahDH6JGeRPvEFXlCooqNbtLO6Tkflc+N57aUIQo=",
+    "h1:2H1wnJ/4a6Bdozb2ghdVrAasAiU27cBo2XWK6zQW9xM=",
+    "h1:9XtTszjyt2FI7S6OpGBURMA2Vuc8WIlXnw/PuXY+Fvc=",
+    "h1:DkNOAPovq7bHzRdsLkO0Q8DJ98hBTihOOfALMQuncFM=",
+    "h1:IQNU+m7xwtnaMy6ZNQCB2AZ7cVb+GODCAzGeKJrME5o=",
+    "h1:Nr1/xrFr7MSF5h0cqLnr+eHrosAsNXDw7yBWlpKnF64=",
+    "h1:Y1oUxyPwoYFjsC4JrQ8pNY9oUaD4C8bN8l7DV4YScXg=",
+    "h1:clFcTVSFxny14+16ys7z7rwLuXjqBegC71VOFp/yAc8=",
+    "h1:e5beJALl2iuVt9kQcLG9EK5AfBqnfvsUsPxNMrtJzW8=",
+    "h1:fWOxAwlRmO/53Cc/8OhZcYrtY1doIwPxjZsqPp7Ed7s=",
+    "h1:fmMOaMk2Okn96zFiIKdiu3K5s7pfSY23Bn1KPbOoWBg=",
+    "h1:iqptB9j307n3Mp+Pn0tn8pSSC3pJvNCDA84ennuw320=",
+    "h1:nOUvAwDKAWqAsNe09IpAUJzWSD2HVRBX9XKF6h5Xr2U=",
+    "zh:01eaf9af844ba544b58180664a93d9ce7c058c72111f2fb4e0c48297e7bf7adf",
+    "zh:1cab6d661040321aeddeafcfba6594bac180d50ea65f68a942b8167897847a46",
+    "zh:24f7f6e55614fba0bfd30bbe10e74095f2ef49f726ec4bfd7f2ab3cea1bb5fd6",
+    "zh:2e957a02957190413cfd84468a08fbfd0ad58b9cb4d5f39b63a0f3670fe0f35b",
+    "zh:522665361563f87f9ee9aebfc298d7cc47013ddef37f05eda543e2e46cb60cb4",
+    "zh:5befd7a20ad903e60e76b2d2d24f59301392d4cc01b30596281585ba3dc036c4",
+    "zh:76a2c3b3aa0af51e1605cd7f331ff1106f1b2c992c4bd2ade7a71a1922bb3b99",
+    "zh:826bc65d7c57f7d329bb20c6c8980b8c04679a53c4839421053917156d56efb1",
+    "zh:9190e004f16625bf6eae15cce0a32823fc49d9e86434b115f63fa0b078dc3959",
+    "zh:9bab6067f45329d73bb56453feebee4bc61df592ff0123501b734714da6c205c",
+    "zh:9c1ed53070d624b2e75da150ce65a75339578f2c98b306d09b0bfbd94695b77d",
+    "zh:c8d07c46143e81f6400d143041b4ba9d94290856d749a328b3331b61cd4659bd",
+    "zh:cc10db1ef06a5dc5427317f2514ae709de46f8fcfacb82508a270618b39248a1",
+    "zh:d272a301eb80b65a66302612302c60f25bc7dd7a8490a603fb4b9e183b54017a",
  ]
 }
--- a/provisioning/main.tf
+++ b/provisioning/main.tf
@@ -3,7 +3,7 @@ terraform {
  required_providers {
    hcloud = {
      source  = "hetznercloud/hcloud"
-      version = "~> 1.57.0"
+      version = "~> 1.56.0"
    }
    sops = {
      source  = "carlpett/sops"
@@ -11,7 +11,7 @@ terraform {
    }
    cloudflare = {
      source  = "cloudflare/cloudflare"
-      version = "~> 5.15.0"
+      version = "~> 5.12.0"
    }
  }
  required_version = ">= 0.13"