ibizaman
6fb2250669
arr: make arr stack declare ldap groups
2026-02-24 20:00:36 +01:00
ibizaman
0d2a7c315f
arr: add declarative api key
2026-02-24 20:00:36 +01:00
sitrius
70bf331c6a
refactor: use cfg'.dataDir directly for consistency and add missing bazarr dataDir
...
- Replace shb.arr.<app>.dataDir with cfg'.dataDir for direct access
- Add missing dataDir configuration for bazarr service
- Update all resultPath references to use cfg'.dataDir
2026-02-22 10:04:13 +01:00
sitrius
5da47a77c7
fix: use configurable dataDir paths in arr stack and fix sops.secret references
...
- Replace hardcoded /var/lib/<app> paths with shb.arr.<app>.dataDir in arr.nix
- Fix bazarr config path in test to use cfg.dataDir
- Correct shb.sops.secrets → shb.sops.secret in documentation files
2026-02-22 10:04:13 +01:00
sivert
62ea06e57c
Added Immich Public Proxy service for publically sharing photos
...
Requests to /share/* are optionally redirected to Immich Public Proxy
for public access without going through Authelia, and without exposing
the whole Immich service.
Fixes #656
2026-02-21 18:31:32 +01:00
ibizaman
1392295172
mailserver: update to follow nixpkgs
2026-02-02 12:47:33 +01:00
Cody Wright
09634f4530
fix: add OIDC scopes to Jellyfin service
...
Also adds <DisabledPushedAuthorization>true</DisablePushedAuthorization>, as
otherwise I get "Error preparing login: Unauthorized - Failed to push
authorization parameters"
2026-02-02 08:14:21 +01:00
ibizaman
aeff324fcf
jellyfin: update jellyfin cli for 10.11.6
2026-02-02 08:14:21 +01:00
ibizaman
3f7e6852ce
forgejo: update deprecated package
2026-02-02 08:14:21 +01:00
ibizaman
f39f0bd9bf
mitmdump: use systemd-python after systemd got deprecated
2026-02-02 08:14:21 +01:00
ibizaman
7b58458270
nit: run linter after update
2026-02-02 08:14:21 +01:00
ibizaman
4b2021885b
authelia: fix restartUnits service name
2026-01-25 12:22:52 +01:00
ibizaman
c28e2ae81c
restic: fix restartUnits service name
2026-01-25 12:22:52 +01:00
ibizaman
a1b8fc758a
mailserver: separate backup for dkim as it uses other user
2026-01-25 12:11:02 +01:00
ibizaman
6a74419271
monitoring: move dashboards into related modules
2026-01-22 12:07:58 +01:00
ibizaman
7787957488
monitoring: add module option to add dashboards to grafana
2026-01-22 12:07:58 +01:00
ibizaman
ef19e76b97
mailserver: init
2026-01-18 22:06:03 +01:00
ibizaman
cac0a5fbf9
nextcloud: accept users only part of the admin group
2026-01-12 09:50:31 +01:00
ibizaman
896246a187
forgejo: accept users only part of the admin group
2026-01-12 09:50:31 +01:00
ibizaman
a584decd52
nextcloud: test for all supported versions
2026-01-11 23:16:55 +01:00
ibizaman
78b5e59830
jellyfin: disable other plugin version
2026-01-11 22:17:37 +01:00
ibizaman
6ffa9127e2
jellyfin: move function to create plugins into lib
2026-01-11 22:17:37 +01:00
ibizaman
f39865391e
doc: increase indentation for some firefly-iii subsections
2026-01-11 22:17:37 +01:00
ibizaman
f19d14c509
jellyfin: append version to plugin name
2026-01-10 19:17:50 +01:00
ibizaman
a5b9a62f73
jellyfin: declarative plugins, ldap and sso
2026-01-10 18:18:43 +01:00
ibizaman
6d9831e4f8
authelia: revert do not use dots in systemd service name
...
The issue is the fqdn is used to setup the nginx virtual host
2026-01-08 21:20:13 +01:00
sivert
e3ed7cd976
firefly-iii: allow admin group access
2026-01-08 20:22:18 +01:00
Piotr Gaczkowski
7ceb03dd78
Update nextcloud-server.nix
2026-01-07 23:36:29 +01:00
ibizaman
3b9c1622e1
firefly-iii: also add sso to data importer
2026-01-07 22:07:32 +01:00
ibizaman
9152a082bf
firefly-iii: add info about data importer in the doc preamble
2025-12-31 09:09:39 +01:00
ibizaman
ffb34bb6bc
firefly-iii: init
2025-12-31 09:00:23 +01:00
ibizaman
0d47a24342
nginx: nit change null comparison
2025-12-30 09:49:31 +01:00
ibizaman
50877bfe4c
nginx: add phpForwardAuth
2025-12-30 09:49:31 +01:00
ibizaman
edce2b26ad
nginx: allow null upstream option
2025-12-30 09:49:31 +01:00
ibizaman
f48048a4f6
nginx: add documentation
2025-12-30 09:49:31 +01:00
ibizaman
f204c98230
postgresql: add usage documentation
2025-12-29 23:26:30 +01:00
ibizaman
7c457c7226
postgresql: fix setting password for username with special chars
2025-12-29 23:26:30 +01:00
ibizaman
21bf3dad20
jellyfin: add instructions about installing plugins
2025-12-29 23:04:36 +01:00
ibizaman
7c260a0b85
nextcloud: fix option documentation
2025-12-29 23:04:36 +01:00
ibizaman
a4144d6cf8
monitoring: try late backup rule without false positive
2025-12-26 22:45:09 +01:00
Piotr Gaczkowski
f17e9885d2
fix: Properly handle Authelia email
2025-12-23 22:33:43 +01:00
Piotr Gaczkowski
f5edf1b339
Update authelia.nix
...
Fixes #603
2025-12-22 09:01:09 +01:00
ibizaman
0c1d5ca455
forgejo: use secrets contract for smtp password
2025-12-17 23:21:47 +01:00
ibizaman
328a27d89e
monitoring: do not alert of all backups succeed
2025-12-17 23:21:47 +01:00
ibizaman
1aea0300e3
authelia: fix deprecated env var
2025-12-17 23:21:47 +01:00
ibizaman
a512378553
authelia: do not use dots in systemd service name
2025-12-17 23:21:47 +01:00
ibizaman
e2f5ffb8d2
ssl: add assertion to catch duplicate domain names
2025-12-08 11:39:35 +01:00
ibizaman
8acea12e8a
backup: avoid erroneous templating in alert name
2025-12-08 11:39:35 +01:00
ibizaman
21d0cc11d0
ssl: update documentation
2025-12-08 11:39:35 +01:00
ibizaman
73f2076000
ssl: fix renewal for domain name without subdomain
2025-12-08 11:39:35 +01:00
ibizaman
248317adb5
doc: fix grammar in monitoring chapter
2025-12-08 11:39:35 +01:00
ibizaman
1105fccc2d
ssl: add graphs to dashboard and show logs
2025-12-08 11:39:35 +01:00
ibizaman
79d3782412
ssl: reduce number of redundant alerts
2025-12-08 11:39:35 +01:00
ibizaman
113ca40c5f
doc: add links to monitoring dashboard from backup doc
2025-12-08 11:39:35 +01:00
cinereal
7d398c769e
docs: distinguish description for contract databasebackup from backup's
...
Signed-off-by: cinereal <cinereal@riseup.net>
2025-12-06 23:00:49 +01:00
ibizaman
80b4388044
mod: simplify by moving overlay to corresponding module
2025-12-03 22:19:45 +01:00
ibizaman
c10cab627f
mod: use explicit shb argument to pass lib
2025-12-03 22:19:45 +01:00
ibizaman
34e54408f0
nextcloud: only setup php-fpm exporter if nextcloud is enabled
2025-12-03 22:19:45 +01:00
ibizaman
6f92c457a2
monitoring: fix link
2025-12-03 22:19:45 +01:00
ibizaman
e0055e97e9
monitoring: ensure admin group
2025-12-03 22:19:45 +01:00
sivert
d655655e0c
#587 Implement SHB module for paperless service
2025-11-24 23:01:46 +01:00
ibizaman
403fb20c1b
tests: remove more implicit imports
2025-11-21 09:52:13 +01:00
ibizaman
1cf6f6a2fe
monitoring: add sso integration
2025-11-21 09:52:13 +01:00
ibizaman
9677691b2d
docs: use better names for secrets
2025-11-21 09:52:13 +01:00
ibizaman
583b562ec2
monitoring: fix app name
2025-11-21 09:52:13 +01:00
ibizaman
061c194b1b
docs: remove misleading comment
2025-11-21 09:52:13 +01:00
ibizaman
0071c8120d
docs: add monitoring dashboard
2025-11-17 21:58:38 +01:00
ibizaman
29f2248681
forgejo: update deprecated options
2025-11-17 21:58:38 +01:00
ibizaman
bd286e6423
karakeep: update deprecated options
2025-11-17 21:58:38 +01:00
ibizaman
aa2622847e
monitoring: add late backups alert
2025-11-17 21:58:38 +01:00
ibizaman
f93de0420f
monitoring: add backup dashboard
2025-11-17 21:58:38 +01:00
ibizaman
693541e78f
monitoring: add backup scheduling
2025-11-17 21:58:38 +01:00
ibizaman
42a8b2eebc
monitoring: add logs to scraping job dashboard
2025-11-17 21:58:38 +01:00
ibizaman
e04ea6cb24
monitoring: surround with mkMerge
2025-11-17 21:58:38 +01:00
sivert
6e2cf2d035
#585 Immich: allow large uploads from mobile app
2025-11-15 20:48:52 +01:00
sivert
5287f42316
#583 Immich: add authelia bypass for mobile app
...
Adds bypasses for /api and /.well-known/immich so that the mobile app
authentication works.
2025-11-12 12:36:07 +01:00
ibizaman
a875835638
fmt: run formatter
2025-11-01 15:37:58 +01:00
ibizaman
e74e71ccef
borgbackup: use backup and databasebackup contracts
2025-11-01 15:19:54 +01:00
ibizaman
08b0b52cfe
restic: fix doc section level
2025-11-01 15:19:54 +01:00
ibizaman
f37a9fbb9c
monitoring: enable erroneously disabled scrapers
2025-10-29 23:49:07 +01:00
ibizaman
48802553de
chore: format all files
2025-10-28 22:17:00 +01:00
ibizaman
f62d2889c1
mod: only import hardcodedsecret from tests
2025-10-25 10:18:12 +02:00
ibizaman
5022bb5886
karakeep: fix meilisearch secret
2025-10-24 02:15:22 +02:00
ibizaman
6b7a6c6748
karakeep: configure meilisearch with master key and auto update
2025-10-24 01:54:26 +02:00
ibizaman
7ebe421fa0
nextcloud: bump default version from 30 to 31
2025-10-23 03:05:12 +02:00
ibizaman
63b7b09a0f
karakeep: init
2025-10-22 03:33:17 +02:00
ibizaman
139ceca768
authelia: add extraOidcAuthorizationPolicies option
...
This is needed for example to only authorize users of a given group to access a service.
Usually, the application itself enforces this but some don't.
2025-10-22 03:33:17 +02:00
ibizaman
2cc2ab5195
mod: use more callPackage now that is passes shb lib too
2025-10-15 01:38:35 +02:00
ibizaman
6e64c7f8cf
mod: merge shb functions into lib
2025-10-15 01:20:00 +02:00
ibizaman
283e12d87d
test: merge functions into lib and set backdoor everywhere
2025-10-15 01:20:00 +02:00
ibizaman
9892f55ae2
mod: make imports explicit and remove system
2025-10-12 00:24:52 +02:00
ibizaman
6d0ee7494f
nextcloud: allow to set sso integration without ldap
2025-10-09 02:04:20 +02:00
ibizaman
a536ee141e
open-webui: do not login when not belonging to user or admin group
2025-10-09 02:04:20 +02:00
ibizaman
969630c22b
revert added tests
...
This reverts commit ffa918aec6
2025-10-05 00:08:32 +02:00
ibizaman
ffa918aec6
tests: assert user with unknown group cannot login with sso or ldap
2025-10-04 23:52:14 +02:00
ibizaman
01d8f735ae
open-webui: show how to clone a secret in the docs
2025-10-04 23:24:23 +02:00
ibizaman
b840c404ab
open-webui: fix giving environment to the upstream service
2025-10-04 23:24:23 +02:00
ibizaman
f938528ba6
open-webui: add missing authorization_policy
2025-09-27 22:44:15 +02:00
ibizaman
32d643d13f
open-webui: fix documentation
2025-09-27 22:06:43 +02:00
ibizaman
02b73d2dce
open-webui: init
2025-09-27 21:25:40 +02:00
