feat(x509-exporter): update x509-exporter version from 3.19.1 to 3.21.0

update note:
- https upstream Host rewrite is automated
- Caddyfile already defines Host rewrite explicitly

ansible/inventory/group_vars/all.yaml

@@ -158,11 +158,11 @@ version:
     alloy: "1.13.0"
   containers:
     # common
-    caddy: "2.10.2"
+    caddy: "2.11.2"
     # infra
     step: "0.29.0"
     ldap: "v0.6.2"
-    x509-exporter: "3.19.1"
+    x509-exporter: "3.21.0"
     prometheus: "v3.9.1"
     loki: "3.6.5"
     grafana: "12.3.3"
@@ -172,14 +172,14 @@ version:
 #    pgvector: "v0.8.1"
     vectorchord: "0.5.3"
     # Auth
-    authelia: "4.39.15"
+    authelia: "4.39.19"
     # App
     vaultwarden: "1.35.4"
-    gitea: "1.25.5"
+    gitea: "1.26.1"
     redis: "8.6.1"
     immich: "v2.7.5"
     actualbudget: "26.3.0"
-    paperless: "2.20.13"
+    paperless: "2.20.15"
     vikunja: "2.2.2"
     opencloud: "4.0.6"
     manticore: "25.0.0"

ansible/roles/infra/handlers/main.yaml

@@ -73,10 +73,10 @@
   listen: "notification_restart_grafana"
   ignore_errors: true # noqa: ignore-errors
 
-- name: Enable x509-exporter.service
+- name: Restart x509-exporter.service
   ansible.builtin.systemd:
     name: "x509-exporter.service"
-    state: "started"
+    state: "restarted"
     enabled: true
     daemon_reload: true
     scope: "user"