diff --git a/.woodpecker/alertmanager-ntfy.yaml b/.woodpecker/alertmanager-ntfy.yaml
new file mode 100644
index 0000000..e424ecd
--- /dev/null
+++ b/.woodpecker/alertmanager-ntfy.yaml
@@ -0,0 +1,36 @@
+when:
+  - event: push
+    path:
+      - 'alertmanager-ntfy/**'
+      - '.woodpecker/alertmanager-ntfy.yaml'
+  - event: cron
+
+workspace:
+  path: src
+  
+matrix:
+  VERSION:
+    - 76d5f772f70d6915c89da00414c20009b03cc361
+  IMAGE_NAME:
+    - git.hamburg.ccc.de/ccchh/oci-images/alertmanager-ntfy
+
+
+steps:
+  - name: setup
+    image: alpine
+    commands:
+      - ls
+      - apk -u add git
+      - mkdir /woodpecker/images
+      - git clone https://github.com/alexbakker/alertmanager-ntfy.git alertmanager-ntfy/src
+      - cd alertmanager-ntfy/src && git checkout ${VERSION} && cd ..
+
+  - name: build-image
+    image: gcr.io/kaniko-project/executor
+    entrypoint:
+      - /kaniko/executor
+      - --context=dir:///woodpecker/src/alertmanager-ntfy
+      - --dockerfile=./Containerfile
+      - --destination=git.hamburg.ccc.de/ccchh/oci-images/alertmanager-ntfy:${VERSION}
+      - --no-push
+      - --tar-path=/woodpecker/images/alertmanager-ntfy.tar
\ No newline at end of file
diff --git a/.woodpecker/keycloak.yaml b/.woodpecker/keycloak.yaml
index 2f76bd8..dc64f11 100644
--- a/.woodpecker/keycloak.yaml
+++ b/.woodpecker/keycloak.yaml
@@ -19,8 +19,9 @@ workspace:
 # Also because global environment variables aren't a thing.
 matrix:
   KEYCLOAK_VERSION:
-    # renovate: datasource=docker depName=quay.io/keycloak/keycloak
-    - 26.6.0
+    - 26.0
+    - 26.1
+    - 26.2
   IMAGE_NAME:
   - git.hamburg.ccc.de/ccchh/oci-images/keycloak
 
@@ -30,15 +31,6 @@ steps:
     commands:
       - mkdir /woodpecker/images
 
-  - name: build-attribute-endpoints-provider
-    image: alpine
-    commands:
-      - apk -u add maven git
-      - git clone https://git.hamburg.ccc.de/CCCHH/keycloak-attribute-endpoints-provider.git
-      - cd keycloak-attribute-endpoints-provider
-      - mvn -f attribute-endpoints-provider verify
-      - cp attribute-endpoints-provider/target/attribute-endpoints-provider-1.0-SNAPSHOT.jar /woodpecker/src/keycloak/attribute-endpoints-provider.jar
-
   - name: build-image
     image: gcr.io/kaniko-project/executor
     entrypoint:
@@ -76,6 +68,7 @@ steps:
     image: alpine
     when:
       - branch: main
+        evaluate: 'KEYCLOAK_VERSION == "26.0"'
     environment:
       GIT_API_TOKEN:
         from_secret: GIT_API_TOKEN
diff --git a/.woodpecker/nextcloud.yaml b/.woodpecker/nextcloud.yaml
index 4639448..a9b3fa2 100644
--- a/.woodpecker/nextcloud.yaml
+++ b/.woodpecker/nextcloud.yaml
@@ -19,9 +19,9 @@ workspace:
 # Also because global environment variables aren't a thing.
 matrix:
   NEXTCLOUD_VERSION:
+    - 29
     - 30
     - 31
-    - 32
   IMAGE_NAME:
     - git.hamburg.ccc.de/ccchh/oci-images/nextcloud
 
diff --git a/alertmanager-ntfy/Containerfile b/alertmanager-ntfy/Containerfile
new file mode 100644
index 0000000..1e14244
--- /dev/null
+++ b/alertmanager-ntfy/Containerfile
@@ -0,0 +1,11 @@
+FROM docker.io/library/golang:1 as builder
+ARG CGO_ENABLED=0
+WORKDIR /usr/src/app
+
+COPY src/go.mod src/go.sum ./
+RUN go mod download
+COPY src/. .
+
+RUN go build -v -o /usr/local/bin/app ./...
+
+CMD ["app"]
\ No newline at end of file
diff --git a/keycloak/Containerfile b/keycloak/Containerfile
index f3f6c1e..7f5fa4c 100644
--- a/keycloak/Containerfile
+++ b/keycloak/Containerfile
@@ -2,10 +2,8 @@ ARG TAG=latest
 FROM quay.io/keycloak/keycloak:${TAG} as builder
 
 ENV KC_DB=postgres
-ENV KC_FEATURES=declarative-ui
 
 WORKDIR /opt/keycloak
-ADD --chown=keycloak:keycloak --chmod=644 attribute-endpoints-provider.jar /opt/keycloak/providers/attribute-endpoints-provider.jar
 RUN /opt/keycloak/bin/kc.sh build
 
 FROM quay.io/keycloak/keycloak:${TAG}
diff --git a/.woodpecker/penpot.yaml b/penpot.yaml
similarity index 94%
rename from .woodpecker/penpot.yaml
rename to penpot.yaml
index 8cedcbe..9e79d1b 100644
--- a/.woodpecker/penpot.yaml
+++ b/penpot.yaml
@@ -64,9 +64,8 @@ steps:
 
   - name: publish-image
     image: docker.io/library/alpine
-    environment:
-      GIT_API_TOKEN:
-        from_secret: GIT_API_TOKEN
+    secrets:
+      - GIT_API_TOKEN
     commands:
       - apk -u add crane
       - crane auth login git.hamburg.ccc.de -u woodpecker -p $GIT_API_TOKEN
@@ -76,9 +75,8 @@ steps:
     image: docker.io/library/alpine
     when:
       - branch: main
-    environment:
-      GIT_API_TOKEN:
-        from_secret: GIT_API_TOKEN
+    secrets:
+      - GIT_API_TOKEN
     commands:
       - apk -u add crane
       - crane auth login git.hamburg.ccc.de -u woodpecker -p $GIT_API_TOKEN
@@ -89,9 +87,8 @@ steps:
     when:
       - branch: main
         evaluate: 'PENPOT_VERSION == "2.1.2"'
-    environment:
-      GIT_API_TOKEN:
-        from_secret: GIT_API_TOKEN
+    secrets:
+      - GIT_API_TOKEN
     commands:
       - apk -u add crane
       - crane auth login git.hamburg.ccc.de -u woodpecker -p $GIT_API_TOKEN
diff --git a/renovate.json b/renovate.json
deleted file mode 100644
index 7f0cc8d..0000000
--- a/renovate.json
+++ /dev/null
@@ -1,18 +0,0 @@
-{
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": [
-    "config:recommended"
-  ],
-  "customManagers": [
-    // Custom manager using regex for letting Renovate find dependencies in woodpecker Matrix variables.
-    {
-      "customType": "regex",
-      "managerFilePatterns": [
-        "/^\\.woodpecker/.*\\.ya?ml$/"
-      ],
-      "matchStrings": [
-        "# renovate: datasource=(?<datasource>[a-zA-Z0-9-._]+?) depName=(?<depName>[^\\s]+?)(?: packageName=(?<packageName>[^\\s]+?))?(?: versioning=(?<versioning>[^\\s]+?))?\\s*-\\s*[\"']?(?<currentValue>.+?)[\"']?\\s"
-      ]
-    }
-  ]
-}