Update redis Docker tag to v22

apps/immich/redis.yaml

@@ -19,7 +19,7 @@ spec:
   chart:
     spec:
       chart: redis
-      version: 21.2.13
+      version: 22.0.4
       sourceRef:
         kind: HelmRepository
         name: bitnami

apps/kustomization.yaml

@@ -9,3 +9,4 @@ resources:
   - frigate
   - llama
   - immich
+  - searxng

apps/librechat/release.yaml

@@ -72,12 +72,14 @@ spec:
                   "gemma3-12b-q2",
                   "gemma3-12b-novision",
                   "gemma3-4b",
-                  "gemma3-4b-novision"
+                  "gemma3-4b-novision",
+                  "Qwen3-4B-Thinking-2507",
+                  "Qwen3-4B-Thinking-2507-long-ctx"
                 ]
               titleConvo: true
-              titleModel: "current_model"
+              titleModel: "gemma3-4b-novision"
               summarize: false
-              summaryModel: "current_model"
+              summaryModel: "gemma3-4b-novision"
               forcePrompt: false
               modelDisplayLabel: "Llama.cpp"
       imageVolume:

apps/llama/configs/config.yaml

@@ -26,7 +26,7 @@ models:
       --jinja --chat-template-file /config/qwen_nothink_chat_template.jinja
       --no-warmup
       --port ${PORT}
-  "gemma3n-e3b":
+  "gemma3n-e4b":
     ttl: 600
     cmd: |
       /app/llama-server
@@ -119,3 +119,59 @@ models:
       --no-mmproj
       --no-warmup
       --port ${PORT}
+  "Qwen3-4B-Thinking-2507":
+    ttl: 600
+    cmd: |
+      /app/llama-server
+      -hf unsloth/Qwen3-4B-Thinking-2507-GGUF:Q4_K_M
+      -ngl 99 -c 16384 --predict 8192
+      --temp 0.6
+      --min-p 0.00
+      --top-p 0.95
+      --top-k 20
+      --repeat-penalty 1.0
+      --no-warmup
+      --port ${PORT}
+  "Qwen3-4B-Thinking-2507-long-ctx":
+    ttl: 600
+    cmd: |
+      /app/llama-server
+      -hf unsloth/Qwen3-4B-Thinking-2507-GGUF:Q4_K_M
+      -ngl 99 -c 262144 --predict 81920
+      --temp 0.6
+      --min-p 0.00
+      --top-p 0.95
+      --top-k 20
+      --repeat-penalty 1.0
+      --no-warmup
+      --flash-attn
+      --cache-type-k q8_0 --cache-type-v q8_0
+      --port ${PORT}
+  "Qwen3-4B-Instruct-2507":
+    ttl: 600
+    cmd: |
+      /app/llama-server
+      -hf unsloth/Qwen3-4B-Instruct-2507-GGUF:Q4_K_M
+      -ngl 99 -c 16384 --predict 8192
+      --temp 0.7
+      --min-p 0.00
+      --top-p 0.8
+      --top-k 20
+      --repeat-penalty 1.0
+      --no-warmup
+      --port ${PORT}
+  "Qwen3-4B-Instruct-2507-long-ctx":
+    ttl: 600
+    cmd: |
+      /app/llama-server
+      -hf unsloth/Qwen3-4B-Instruct-2507-GGUF:Q4_K_M
+      -ngl 99 -c 262144 --predict 81920
+      --temp 0.7
+      --min-p 0.00
+      --top-p 0.8
+      --top-k 20
+      --repeat-penalty 1.0
+      --no-warmup
+      --flash-attn
+      --cache-type-k q8_0 --cache-type-v q8_0
+      --port ${PORT}

apps/searxng/configs/settings.yml

@@ -0,0 +1 @@
+use_default_settings: true

apps/searxng/deployment.yaml

@@ -0,0 +1,42 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: searxng
+  namespace: searxng
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: searxng
+  template:
+    metadata:
+      labels:
+        app: searxng
+    spec:
+      containers:
+        - name: searxng
+          image: searxng/searxng:2025.8.12-6b1516d
+          ports:
+            - containerPort: 8080
+          env:
+            - name: SEARXNG_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: searxng-secret
+                  key: SEARXNG_SECRET
+                  optional: false
+          volumeMounts:
+            - name: config-volume
+              mountPath: /etc/searxng/settings.yml
+              subPath: settings.yml
+              readOnly: true
+            - name: searxng-persistent-data
+              mountPath: /var/cache/searxng
+      volumes:
+        - name: config-volume
+          configMap:
+            name: searxng-config
+        - name: searxng-persistent-data
+          persistentVolumeClaim:
+            claimName: searxng-persistent-data

apps/searxng/ingress.yaml

@@ -0,0 +1,25 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  namespace: searxng
+  name: searxng
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt
+spec:
+  ingressClassName: nginx-ingress
+  rules:
+    - host: searxng.lumpiasty.xyz
+      http:
+        paths:
+          - backend:
+              service:
+                name: searxng
+                port:
+                  number: 8080
+            path: /
+            pathType: Prefix
+  tls:
+    - hosts:
+        - searxng.lumpiasty.xyz
+      secretName: searxng-ingress

apps/searxng/kustomization.yaml

@@ -0,0 +1,13 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - namespace.yaml
+  - pvc.yaml
+  - deployment.yaml
+  - service.yaml
+  - ingress.yaml
+configMapGenerator:
+  - name: searxng-config
+    namespace: searxng
+    files:
+      - settings.yml=configs/settings.yml

apps/searxng/namespace.yaml

@@ -0,0 +1,5 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: searxng

apps/searxng/pvc.yaml

@@ -0,0 +1,13 @@
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  namespace: searxng
+  name: searxng-persistent-data
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 1Gi
+  storageClassName: mayastor-single-ssd

apps/searxng/service.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: searxng
+  namespace: searxng
+spec:
+  selector:
+    app: searxng
+  ports:
+    - protocol: TCP
+      port: 8080
+      targetPort: 8080
+  type: ClusterIP

talos/patches/anapistula-delrosalae.patch

@@ -10,7 +10,7 @@ machine:
             gateway: 2001:470:61a3:100:ffff:ffff:ffff:ffff
           - network: 0.0.0.0/0
             gateway: 192.168.1.1
-        mtu: 1500
+        mtu: 1280
 
   install:
     diskSelector: