Update renovate/renovate Docker tag to v43.204.0

.woodpecker/renovate.yaml

@@ -21,7 +21,7 @@ steps:
       - bao kv get -mount secret -field RENOVATE_TOKEN renovate > /woodpecker/renovate_token
       - bao kv get -mount secret -field GITHUB_COM_TOKEN renovate > /woodpecker/github_com_token
   - name: Run Renovate
-    image: renovate/renovate:43.205.2
+    image: renovate/renovate:43.204.0
     environment:
       RENOVATE_AUTODISCOVER: "true"
       RENOVATE_ENDPOINT: https://gitea.lumpiasty.xyz/api/v1

ansible/roles/routeros/tasks/firewall.yml

@@ -43,11 +43,6 @@
         comment: Allow from SRV to internet
         in-interface: vlan4
         out-interface-list: wan
-      - action: accept
-        chain: forward
-        comment: Allow from SRV to SRV
-        in-interface: vlan4
-        out-interface: vlan4
       - action: accept
         chain: forward
         comment: Allow from SRV to CAM
@@ -282,11 +277,6 @@
         in-interface: '!pppoe-gpon'
         protocol: tcp
         to-addresses: 128.0.70.5
-      - action: masquerade
-        chain: srcnat
-        comment: hairpin to LoadBalancer pool (vlan4 -> vlan4)
-        dst-address: 10.44.0.0/16
-        in-interface: vlan4
       - action: dst-nat
         chain: dstnat
         comment: HTTPS

apps/kaneo/release.yaml

@@ -8,7 +8,7 @@ spec:
   interval: 24h
   url: https://github.com/usekaneo/kaneo.git
   ref:
-    tag: v2.7.7
+    tag: v2.7.5
   ignore: |
     # exclude all
     /*

apps/llama/deployment.yaml

@@ -18,7 +18,7 @@ spec:
     spec:
       initContainers:
         - name: download-whisper
-          image: gitea.lumpiasty.xyz/lumpiasty/llama-swap:unified-vulkan-test
+          image: ghcr.io/mostlygeek/llama-swap:unified-vulkan-2026-05-28
           command:
             - sh
             - -c
@@ -48,7 +48,7 @@ spec:
               mountPath: /root/.cache
       containers:
         - name: llama-swap
-          image: gitea.lumpiasty.xyz/lumpiasty/llama-swap:unified-vulkan-test
+          image: ghcr.io/mostlygeek/llama-swap:unified-vulkan-2026-05-28
           imagePullPolicy: IfNotPresent
           command:
             - llama-swap