Update helm chart authentik to v2026.5.3

actual-budget/helm-actual-budget.yaml

@@ -12,14 +12,14 @@ spec:
   project: default
   source:
     repoURL: https://community-charts.github.io/helm-charts
-    targetRevision: 1.8.7
+    targetRevision: 1.8.9
     chart: actualbudget
     helm:
       values: |
         # Actual Budget configuration
 
         image:
-          tag: "26.3.0"
+          tag: "26.6.0"
 
         # Authentication configuration
         login:

apps/templates/authentik-helm.yaml

@@ -16,7 +16,7 @@ spec:
   sources:
     - chart: authentik
       repoURL: https://charts.goauthentik.io
-      targetRevision: 2026.2.1
+      targetRevision: 2026.5.3
       helm:
         values: |
           authentik:

dns/domains/rubenhensen.nl.yaml

@@ -10,7 +10,7 @@ records:
   - name: "phocaslustrum"
     expire: 300
     type: A
-    content: "62.41.87.114"
+    content: "62.41.86.27"
   - name: "ynab"
     expire: 300
     type: A
@@ -22,7 +22,7 @@ records:
   - name: "ldap"
     expire: 300
     type: A
-    content: "62.41.87.114"
+    content: "62.41.86.27"
   - name: "argocd"
     expire: 300
     type: A

nix-infra-machine/nodes/node001.nix

@@ -2,7 +2,7 @@
 let
   # Public IP of the home network where the k8s cluster ingress lives.
   # Keep in sync with dns/domains/rubenhensen.nl.yaml.
-  homeIP = "62.41.87.114";
+  homeIP = "62.41.86.27";
 
   # Hosts tunneled to the home k8s cluster. Each entry gets:
   #   * an SNI map entry for TCP passthrough on :443