danvics/selfhostblocks
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1
1111 commits 7 branches 29 tags 13 MiB
Commit graph

488 commits

Author SHA1 Message Date
ibizaman
b46a227b5b monitoring: add doc on retention time 2025-09-27 21:25:40 +02:00
ibizaman
1c2ff3e381 monitoring: update docs to use secrets contract 2025-09-27 21:25:40 +02:00
ibizaman
771e9758b0 lldap: update deprecated option 2025-09-27 21:25:40 +02:00
ibizaman
c0ab22eebd pinchflat: update docs 2025-09-27 21:25:40 +02:00
ibizaman
c6ad91fb35 pinchflat: use temp dir to store secret 2025-09-27 21:25:40 +02:00
sivert
2f785919d9 #100 Immich service 
- Declarative SSO setup via json config file
- roleClaim via LDAP groups to automatically set admin privileges
- SSO tested manually, but not yet in playwright test
- Storage quota claim not yet implemented
- Authelia rule prevents access by non-members of
userGroup/adminUserGroup
 2025-09-20 14:43:38 +02:00
ibizaman
6f74d4c56c docs: fix typos in forgejo documentation 2025-09-17 10:59:12 +02:00
ibizaman
98b4cc32b6 pinchflat: init 2025-09-17 10:59:12 +02:00
ibizaman
b24eed9a86 lib: add toEnvVar function 2025-09-17 10:59:12 +02:00
ibizaman
6f27de81d2 forgejo: clean backup dumps 
This assumes the dumps are moved elsewhere.
 2025-09-09 17:03:30 +02:00
ibizaman
95873d84e9 nextcloud: fix permission on nextcloud server 
nextcloud-occ is a wrapper around systemd-run so we must be root to run it.
 2025-09-02 00:20:55 +02:00
sivert
ef99755ad9 Added role claim to Audiobookshelf's OIDC client config 2025-08-31 19:14:58 +02:00
ibizaman
12721fea39 authelia: add target to wait for 2025-08-25 11:50:06 +02:00
ibizaman
7ff2cfa642 authelia: allow password change 2025-08-25 11:50:06 +02:00
ibizaman
ebd39bbe73 nextcloud: fix ldap and sso integration and add playwright tests 2025-08-25 11:50:06 +02:00
ibizaman
682a01488b postgresql: fix password setup 2025-08-25 10:00:30 +02:00
ibizaman
60039df698 homeassistant: fix wyoming build with latest nixpkgs 2025-08-25 10:00:30 +02:00
ibizaman
8221d4fe9a postgresql: update reference to psql binary 2025-08-25 10:00:30 +02:00
ibizaman
5f995e82df add back info into authelia id token 2025-08-19 15:09:37 +02:00
ibizaman
b2c5637cfc add debug output to authelia with mitmdump module 2025-08-19 13:36:46 +02:00
ibizaman
3184015d67 add debug output to lldap with mitmdump module 2025-08-19 13:36:46 +02:00
ibizaman
d824da617c lldap: explain ensure behavior in docs 2025-08-19 13:03:06 +02:00
ibizaman
485e7474c4 lldap: only enforce groups 2025-08-19 00:55:07 +02:00
sivert
b4b70b175e Update SSO setup for Audiobookshelf 
More or less copied from jellyfin.
 2025-08-18 23:22:04 +02:00
ibizaman
b8b940e9ff add renamed options for guided migration 2025-08-18 12:57:44 +02:00
Sam Grayson
133ddbbd7b correct broken link typo 2025-08-10 16:47:01 +02:00
ibizaman
c9ee41b1d4 fine grained logging with mitmdump logger addon 2025-08-04 01:22:25 +02:00
ibizaman
9a135523d2 fix link in mitmdump documentation 2025-07-31 23:30:57 +02:00
ibizaman
67c2705f98 add mitmdump block 2025-07-31 23:21:57 +02:00
ibizaman
91580421be add playwright test with ldap for forgejo 2025-07-24 23:12:33 +02:00
ibizaman
12f2b4f49e update lldap patches 2025-07-24 20:41:12 +02:00
ibizaman
b50f45e17e add declarative lldap using secrets contract 2025-07-18 23:51:27 +02:00
ibizaman
af8e8bf582 expose fine grained modules and overlay 2025-07-14 00:41:37 +02:00
ibizaman
d78d0912ac add documentation for jellyfin 2025-07-12 23:11:02 +02:00
ibizaman
41d037206d add documentation for lldap and authelia blocks 2025-07-12 22:50:41 +02:00
ibizaman
13f4064e93 rename ldap block to lldap 2025-07-12 21:47:55 +02:00
ibizaman
0648b8a13c fix urls in documentation 2025-07-12 21:29:02 +02:00
ibizaman
82977bd239 declarative jellyfin setup with tests 2025-07-12 00:01:41 +02:00
ibizaman
1ec2c11009 allow to choose jellyfin port 2025-07-12 00:01:41 +02:00
ibizaman
38dfb0fd0b reference dataDir in jellyfin module 2025-07-12 00:01:41 +02:00
ibizaman
b603156930 add debug logging option to jellyfin 2025-07-12 00:01:41 +02:00
ibizaman
94474145be fix redirect uri for jellyfin 2025-07-12 00:01:41 +02:00
ibizaman
7f4c107949 inherit types in jellyfin module 2025-07-12 00:01:41 +02:00
ibizaman
53dde94d98 explicitly disable memories app in nextcloud 
Until https://github.com/ibizaman/selfhostblocks/issues/476 is fixed
 2025-06-25 00:21:27 +02:00
ibizaman
56e837aaa0 fix sso setup for nextcloud 
We need to switch to a systemd service running before nextcloud-setup
because the secret file is now loaded with LoadCredential, which
means it must exist before the systemd service starts
 2025-06-24 23:03:17 +02:00
ibizaman
574a566b97 fix voice test for home-assistant 2025-06-24 23:03:17 +02:00
ibizaman
5a1e9809bc fix playwright test for home-assistant 2025-06-24 23:03:17 +02:00
ibizaman
4fbdff8b6d remove unsupported nextcloud version 2025-06-24 23:03:17 +02:00
ibizaman
9af3f2b942 add extra config param for nginx 2025-06-23 23:40:14 +02:00
ibizaman
4047321f81 add wip documentation for arr service 2025-06-09 00:31:00 +02:00
ibizaman
7dd7f41622 add documentation for home-assistant 2025-06-09 00:31:00 +02:00
ibizaman
1ce11b99ad fix typos in forgejo manual 2025-06-09 00:31:00 +02:00
Armin Fröhlich
1d0b49f959 nextcloud-server externalStorage.userLocalMount config existing check 
use `--output=json` and jq to check for existence of mount
 2025-06-08 10:59:26 +02:00
Piotr Gaczkowski
d9a149eca2 Fix Grafana SMTP from_name 2025-06-04 00:54:57 +02:00
ibizaman
ad33980d9a fix jellyfin SSO plugin 2025-04-09 22:53:26 +02:00
Eric Ahlberg
95a4f7987e Fix typo in monitoring docs 2025-03-24 21:45:38 +01:00
ibizaman
c7a915a9a6 fix home-assistant basic login test 2025-03-19 16:40:11 +01:00
ibizaman
e3a03c5df6 default version of nextcloud is now 29 2025-03-19 16:40:11 +01:00
ibizaman
543f9540bd add assertion to avoid issue with sso without ssl 2025-03-17 23:07:21 +01:00
ibizaman
cf944bee37 add assertion to avoid issue with authelia and ldap 2025-03-17 23:07:21 +01:00
ibizaman
0c64452d07 add playwright test for home-assistant 2025-02-12 00:18:10 +01:00
ibizaman
5a6be171b3 add option to add extra args to hledger 2025-02-09 17:37:45 +01:00
ibizaman
82426a4f1f add playwright test for grocy 2025-01-31 22:39:30 +01:00
ibizaman
d13ed1c0ef update forgejo documentation 2025-01-26 23:04:24 +01:00
ibizaman
d5293825e9 add option to create forgejo users declaratively 2025-01-26 22:39:27 +01:00
ibizaman
2c713ae9ad add playwright test for forgejo 2025-01-26 22:39:27 +01:00
ibizaman
441907b134 refactor base module in tests 2025-01-23 21:14:50 +01:00
ibizaman
5c36deccae fix internal url for voice assistant 2025-01-16 20:40:47 +01:00
ibizaman
af123bc52d make nextcloud create external storage 2025-01-16 20:23:26 +01:00
ibizaman
bf73cb69a4 add documentation for nextcloud memories and recognize apps 2025-01-10 00:00:05 +01:00
ibizaman
83a3d54cf7 add recognize nextcloud app 2025-01-09 23:23:32 +01:00
ibizaman
3a1f94b596 add memories nextcloud app 2025-01-09 23:23:32 +01:00
ibizaman
4d1e3930c0 remove support for old postgresql version 2025-01-03 00:40:40 +01:00
ibizaman
2d63ef8e19 enable php-fpm exporter only when needed 2025-01-02 19:17:23 +01:00
ibizaman
16f305b9f4 add alert when certs are close to expiring 2024-12-27 22:54:45 +01:00
ibizaman
0ef061f4d6 add nextcloud dashboard 2024-12-25 13:05:59 +01:00
ibizaman
538c0a08cd fix phpfpm prometheus exporter 2024-12-25 13:05:59 +01:00
ibizaman
a784c08761 add domain and hostname labels 2024-12-25 13:05:59 +01:00
ibizaman
9a7bcd374b add phpfpm prometheus exporter 2024-12-23 01:20:05 +01:00
ibizaman
ab6de8de90 fix nextcloud ldap test 2024-12-17 21:57:20 +01:00
ibizaman
a8b29b243c add voice option to home-assistant 2024-12-17 21:57:20 +01:00
Pierre Penninckx
2f4bbdd061
improve documentation (#392) 
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
 2024-12-05 22:37:45 +00:00
Pierre Penninckx
ab86c6e133
add dashboard for deluge (#389) 
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
 2024-12-02 22:02:04 +00:00
Pierre Penninckx
30aa5dcc11
fix modules using backup contract (#386) 
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
 2024-11-30 01:07:08 +00:00
Pierre Penninckx
34c4b75871
add test for all modules using backup contract (#383) 
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
 2024-11-28 21:17:14 +00:00
Pierre Penninckx
bab4b251eb
add default needed for one way backup contracts (#381) 
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
 2024-11-26 22:32:49 +00:00
Pierre Penninckx
3e63cb2e12
switch databasebackup contract to new contract style (#372) 
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
 2024-11-26 20:07:36 +00:00
Pierre Penninckx
47dffd2a2f
switch backup contract to new contract style (#367) 
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
 2024-11-26 19:59:07 +00:00
Pierre Penninckx
ba1e60a45e
rename backup hook attributes (#371) 
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
 2024-11-26 19:15:36 +00:00
Pierre Penninckx
b3e7552b88
[doc] add forgotten example in sops module documentation (#366) 2024-11-23 21:56:22 +00:00
Pierre Penninckx
dde0d49a84
improve contract documentation (#365) 2024-11-23 21:34:26 +00:00
Pierre Penninckx
b80c840743
have actual implementation for sops secrets (#363) 2024-11-22 23:24:47 +00:00
Pierre Penninckx
9ecbbde35a
Update remaining services to secret contract (#358) 2024-11-21 13:45:35 -08:00
Pierre Penninckx
5056d203d9
update secret contract and add sops module (#356) 
I find these `mkProvider` and `mkRequester` functions really nice.

Also fixes doc generation related to  https://github.com/NixOS/nixpkgs/pull/353513
 2024-11-21 12:51:57 -08:00
Pierre Penninckx
a04dca9973
use secrets contract for restic (#349) 2024-11-17 21:12:14 +00:00
Pierre Penninckx
4726593ea9
Do not use activation script for script with dependencies (#348) 
The issue with activation script is the order is alphabetical, meaning
the order the script is assembled is not really set in stone.

Here, because the script had a name starting with `restic`, it was ran
before the `sops` secret generation script. And since the restic script
was trying to use the secrets, it failed.

And if the activation script fails, you get a kernel panic.
 2024-11-15 21:05:01 +00:00
Pierre Penninckx
442c948a1a
more contracts usage in Nextcloud and docs enhancement (#345) 2024-11-13 21:43:12 +00:00
Pierre Penninckx
431dd058c5
Backup contracts for files and databases (#344) 
This PR continues the work started in
https://github.com/ibizaman/selfhostblocks/pull/314

I had to create my own PR since I couldn't add commits on the fork.

---------

Co-authored-by: sivertism <10866270+sivertism@users.noreply.github.com>
 2024-11-12 20:40:52 +00:00
ibizaman
a589a9fe00 add contract test for secret contract 2024-10-24 22:27:47 +02:00
ibizaman
b134abeb6d switch forgejo to new secrets contract 2024-10-24 22:27:47 +02:00
ibizaman
b85705ab74 switch authelia to new secrets contract 2024-10-24 22:27:47 +02:00
ibizaman
fa87855ee5 switch jellyfin to new secrets contract 
This rabbit hole of a task lead me to:
- Introduce a hardcoded secret module that is a secret provider
  for tests.
- Update LDAP and SSO modules to use the secret contract.
- Refactor the replaceSecrets library function to correctly fail
  when a secret file could not be read.
 2024-10-24 22:27:47 +02:00
Pierre Penninckx
b405988e60
fix lldap backup (#323) 
closes #319
 2024-10-24 21:21:01 +02:00
Pierre Penninckx
5a0ae36c85
update secret contract (#311) 
This makes the secret contract better (IMNSHO):

- Improves documentation, explains better the reasoning behind the
contract.
- Makes it easier to create an option implementing the secret contract.
 2024-10-01 21:01:00 +00:00
ibizaman
f75a01ee2c revert hotfix for vpn 2024-09-22 00:36:54 -07:00
ibizaman
a262940a81 fix let's encrypt ssl block for host verification 2024-09-21 23:59:10 -07:00
ibizaman
7610097a74 add secret contract and use it in ldap block 2024-09-21 23:57:19 -07:00
Pierre Penninckx
7ad3e4c5a4
allow to customize forgejo runner host packages (#304) 2024-09-14 06:56:05 +00:00
ibizaman
f8edf51207 fix issue with openvpn extraArgs after update 2024-09-13 20:40:35 -07:00
ibizaman
253ec980d9 add forgejo service 2024-09-12 13:10:20 -07:00
ibizaman
adbeef3289 reduce alerting time for 5XX error 
It's alerting for too long, even after it recovered.
We'll probably need to something more appropriate than an error budget but it'll do for now.
 2024-09-07 11:06:36 -07:00
ibizaman
ff5a13c6ce fix davfs gid 2024-09-03 09:37:16 -07:00
Pierre Penninckx
3a44530844
apply Nextcloud expensive migrations on service start (#294) 2024-09-03 03:22:53 +00:00
Pierre Penninckx
e5b76e4183
Revert: make sure fox nginx to wait on authelia (#293) 
This was not the root cause of Nginx not starting.
The root cause was the DNS server was restarting at the same time as
Nginx and wasn't ready yet.
There is no DNS block yet in Self Host Blocks so the code is removed for
now.
 2024-09-02 06:56:02 +00:00
Pierre Penninckx
84e4893665
Make sure fox nginx to wait on authelia (#292) 2024-09-02 06:51:06 +00:00
ibizaman
1bd5810a6d apply nextcloud test fix to all configs 2024-09-01 22:15:07 -07:00
ibizaman
35bfb01848 fix nextcloud test when nextcloud is not enabled 2024-09-01 22:10:23 -07:00
Pierre Penninckx
04a3a06730
Switch to not deprecated mkPackageOption (#288) 2024-09-02 01:17:38 +00:00
ibizaman
6da0a4b988 disable nextcloud maintenance mode on service restart 2024-09-01 17:23:04 -07:00
Pierre Penninckx
d711e59f91
Wait actively on ldap being ready (#286) 
Looks like this is needed in the end, other we get into some flaky
situations
 2024-09-01 06:36:53 +00:00
Pierre Penninckx
8db61af6b3
respect stateVersion in vaultwarden (#285) 2024-08-31 09:22:30 +00:00
Pierre Penninckx
eb791b3019
flake.lock: Update (#244) 
Automated changes by the
[update-flake-lock](https://github.com/DeterminateSystems/update-flake-lock)
GitHub Action.

```
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/9ca3f649614213b2aaf5f1e16ec06952fe4c2632?narHash=sha256-7EXDb5WBw%2Bd004Agt%2BJHC/Oyh/KTUglOaQ4MNjBbo5w%3D' (2024-05-27)
  → 'github:nixos/nixpkgs/71e91c409d1e654808b2621f28a327acfdad8dc2?narHash=sha256-GnR7/ibgIH1vhoy8cYdmXE6iyZqKqFxQSVkFgosBh6w%3D' (2024-08-28)
```

### Running GitHub Actions on this PR

GitHub Actions will not run workflows on pull requests which are opened
by a GitHub Action.

To run GitHub Actions workflows on this PR, run:

```sh
git branch -D update_flake_lock_action
git fetch origin
git checkout update_flake_lock_action
git commit --amend --no-edit
git push origin update_flake_lock_action --force
```

---------

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
 2024-08-31 07:57:21 +00:00
Pierre Penninckx
1774b61cfe
Make backup cli tool correctly use secrets (#284) 2024-08-29 07:12:45 +00:00
ibizaman
e6c56891e1 still enable rollback tool even for disabled restic instances 2024-08-25 13:07:21 -07:00
ibizaman
a753254c0e add option restic backup args to limit bandwidth usage 2024-08-25 09:21:14 -07:00
Pierre Penninckx
f8fdf2f704
more fixes to the backup contract (#281) 
This PR irons out the last issues with the backup contract and the
Restic implementation.
I could check it works backing up files to a local folder and to
Backblaze on my server.
 2024-08-24 05:37:18 +00:00
Pierre Penninckx
10dea06ec1
Fix backup contract secrets (#280) 2024-08-22 19:48:36 +00:00
Pierre Penninckx
0fa4a42be7
switch all modules to backup block (#279) 2024-08-20 14:33:13 +00:00
ibizaman
6aed5ee6a5 add backup contract 2024-08-20 00:33:26 -07:00
ibizaman
6235b2f414 always restart postgresql service 
For example, it can be killed by systemd-oom but it's such a foundational service that we should
always restart it.
 2024-08-13 03:45:05 +02:00
ibizaman
3824e07ae9 fix link in nextcloud service doc 2024-08-12 06:51:24 -07:00
ibizaman
d2a018ceec add docs for vaultwarden service 2024-08-12 06:51:24 -07:00
ibizaman
6b55db7d9c add mount contract to vaultwarden service 2024-08-12 06:51:24 -07:00
ibizaman
896c376b6d add mount contract to authelia block 2024-08-12 06:51:24 -07:00
ibizaman
01eb07a6d2 add mount contract to ldap block 2024-08-12 06:51:24 -07:00
ibizaman
56c06b4404 add mount contract implemented by zfs 2024-08-12 06:51:24 -07:00
ibizaman
13ba38a993 do not set serverAliases for dns 
Otherwise, those server aliases take precedence over actual virtual hosts that serve those subdomain.
 2024-08-11 14:59:31 -07:00
ibizaman
6b17ff858e add host provider for ssl letsencrypt block 2024-08-10 19:51:46 -07:00
ibizaman
0f2f69f7a1 refactor tests to use common blocks 2024-07-16 10:53:29 +02:00
ibizaman
308db5fe6b export all torrent metrics 2024-06-10 22:43:37 -07:00
ibizaman
72818c0d79 bump chunkSize in nextcloud to boost performance for small files 
From https://help.nextcloud.com/t/very-slow-sync-for-small-files/11064/13 Not sure it works.
 2024-06-10 08:37:45 -07:00
ibizaman
d8ba5f97b8 set ldapExpertUsernameAttr to user_id in nextcloud ldap app 
https://github.com/lldap/lldap/pull/907
 2024-06-10 08:37:45 -07:00
ibizaman
e6b11a5acb configure nextcloud sso app with same variable 2024-06-10 08:37:45 -07:00
ibizaman
f9cb785cf8 use hardcoded configID for nextcloud LDAP configuration 
This makes more sense and is less brittle.
 2024-06-10 08:37:45 -07:00
ibizaman
a4c4ee1670 add prometheus deluge exporter 2024-06-09 23:47:31 -07:00
ibizaman
848083dacc break authFile for deluge into user and password attrset 2024-06-09 23:43:46 -07:00
ibizaman
faaa0e2263 bump minimal version of Nextcloud to 28 2024-05-29 15:26:04 -07:00
ibizaman
ebbd19c7fd add vm test for home-assistant 2024-05-27 17:13:05 -07:00
ibizaman
97285e1833 add vm test for vaultwarden 2024-05-27 17:13:05 -07:00
ibizaman
8ebb3af1f0 rename autheliaProtect to vhosts 2024-05-27 17:13:05 -07:00
ibizaman
7020786c41 add default dummy oidc authelia client to satisfy authelia 2024-05-27 17:13:05 -07:00
ibizaman
8ec12338fd make config with secrets correctly generated 2024-05-27 17:13:05 -07:00
Pierre Penninckx
dc46ec8eda
Fix prometheus exporter not accessing nvme hard drives (#238) 2024-05-13 09:00:38 -07:00
Pierre Penninckx
222dfa755c
Revert to loki v2 (#230) 
This is needed because v3 requires manual intervention to upgrade
otherwise Loki refuses to start. So until there's a fix, reverting is
the easiest fix.
 2024-04-21 23:07:32 -07:00
Pierre Penninckx
425e511792
flake.lock: Update (#226) 
Automated changes by the
[update-flake-lock](https://github.com/DeterminateSystems/update-flake-lock)
GitHub Action.

```
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/b06025f1533a1e07b6db3e75151caa155d1c7eb3?narHash=sha256-qrxvLS888pNJFwJdK%2Bhf1wpRCSQcqA6W5%2BOx202NDa0%3D' (2024-03-19)
  → 'github:nixos/nixpkgs/5672bc9dbf9d88246ddab5ac454e82318d094bb8?narHash=sha256-NLznXB5AOnniUtZsyy/aPWOk8ussTuePp2acb9U%2BISA%3D' (2024-04-16)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/83b68a0e8c94b72cdd0a6e547a14ca7eb1c03616?narHash=sha256-RquCuzxfy4Nr8DPbdp3D/AsbYep21JgQzG8aMH9jJ4A%3D' (2024-03-17)
  → 'github:Mic92/sops-nix/cc535d07cbcdd562bcca418e475c7b1959cefa4b?narHash=sha256-APoDs2GtzVrsE%2BZ9w72qpHzEtEDfuinWcNTN7zhwLxg%3D' (2024-04-15)
• Updated input 'sops-nix/nixpkgs':
    'github:NixOS/nixpkgs/9af9c1c87ed3e3ed271934cb896e0cdd33dae212?narHash=sha256-huQT4Xs0y4EeFKn2BTBVYgEwJSv8SDlm82uWgMnCMmI%3D' (2024-03-15)
  → 'github:NixOS/nixpkgs/a0c9e3aee1000ac2bfb0e5b98c94c946a5d180a9?narHash=sha256-icE1IJE9fHcbDfJ0%2BqWoDdcBXUoZCcIJxME4lMHwvSM%3D' (2024-04-12)
• Updated input 'sops-nix/nixpkgs-stable':
    'github:NixOS/nixpkgs/6dc11d9859d6a18ab0c5e5829a5b8e4810658de3?narHash=sha256-y%2Bl3eH53UlENaYa1lmnCBHusZb1kxBEFd2/c7lDsGpw%3D' (2024-03-16)
  → 'github:NixOS/nixpkgs/c27f3b6d8e29346af16eecc0e9d54b1071eae27e?narHash=sha256-RifMwYuKu5v6x6O65msKDTqKkQ9crGwOB7yr20qMEuE%3D' (2024-04-13)
```

### Running GitHub Actions on this PR

GitHub Actions will not run workflows on pull requests which are opened
by a GitHub Action.

To run GitHub Actions workflows on this PR, run:

```sh
git branch -D update_flake_lock_action
git fetch origin
git checkout update_flake_lock_action
git commit --amend --no-edit
git push origin update_flake_lock_action --force
```

---------

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
 2024-04-17 16:06:29 -07:00
Pierre Penninckx
ab1bd23b51
fix hledger options (#228) 2024-04-17 09:03:29 -07:00
Pierre Penninckx
43f19a871a
add contract documentation (#225) 2024-04-14 15:21:20 -07:00
Pierre Penninckx
26f406db5f
fix arr setup (#224) 2024-04-10 23:52:24 -07:00
Pierre Penninckx
b9db764a8b
Disable auth in arr suite if SSO is enabled (#221) 2024-04-09 07:16:50 -07:00
Pierre Penninckx
5179f7fc90
Add external storage app to Nextcloud (#222) 2024-04-08 22:41:52 -07:00
Pierre Penninckx
c488bb5bda
Add scripts to update postgresql (#219) 2024-04-02 22:17:29 -07:00
Pierre Penninckx
482b187621
Fix user in vaulwarden module (#218) 2024-04-02 21:04:10 -07:00
Pierre Penninckx
c75daa23c0
move CI to garnix (#210) 2024-03-19 22:50:41 -07:00
Pierre Penninckx
589e2c936f
add tests for arr services and some more options (#205) 2024-03-13 05:40:32 +00:00
Sivert Sliper
64f9c051b9
Grocy service (#195) 
PR to add grocy as a service.

I think LDAP should be [relatively
simple](https://www.reddit.com/r/grocy/comments/18avtb7/sso_tutorial/)
to add, but couldn't find good information on SSO.

Will test this out for a while to make sure it really works before this
can be merged.

---------

Co-authored-by: ibizaman <ibizapeanut@gmail.com>
Co-authored-by: Pierre Penninckx <github@pierre.tiserbox.com>
 2024-03-04 01:25:26 +00:00
Sivert Sliper
ee68e27f15
Audiobookshelf service (#123) 
Hi,

I tried adding [Audiobookshelf](https://www.audiobookshelf.org/) as a
new service to SHB.

Not sure whether you want this service in SHB at all, but thought I'd
create a PR just in case.

The service runs, but seemingly fails to add an entry to the nginx
config, so it is not reachable. I created the service by basically just
copying deluge and then adapting. Any idea why the nginx subdomain isn't
being created?

The config I used to add this to my SHB server is:

```nix
shb.audiobookshelf = {
  enable = true;
  domain = "sliper.xyz";
  subdomain = "abs";
  dataDir = "audiobookshelf"; #turns out this is actually the working dir of the service (/var/lib/<dataDir>)
  authEndpoint = "https://auth.sliper.xyz";
};
 // ... in shb.authelia.oidcClients
redirect_uris = [ "https://deluge.sliper.xyz" "https://abs.sliper.xyz" ];
```

ps. I also need to fix tabs->spaces. Forgot to set up nvim.

---------

Co-authored-by: sivert <nei@nei.nei>
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
Co-authored-by: Pierre Penninckx <github@pierre.tiserbox.com>
 2024-03-04 01:01:00 +00:00
ibizaman
e80cc0d3aa add vm tests for jellyfin and regroup ldap and sso options 2024-03-02 23:03:49 -08:00
ibizaman
046ae67083 optionally make nextcloud systemd services depend on mount point 2024-02-29 22:16:01 -08:00
ibizaman
8c2373430d fix jellyfin and nextcloud-server after changes to lib 2024-02-29 22:13:30 -08:00
ibizaman
937902a7f0 add section about nextcloud appdata folder 2024-02-29 21:00:55 -08:00
ibizaman
d0d94e61c8 use better defaults for nextcloud preview app 2024-02-29 21:00:55 -08:00
ibizaman
fa206d0e15 move templating code to lib file 2024-02-29 20:30:47 -08:00
ibizaman
5288d5f825 fix link 2024-02-11 20:04:42 -08:00
ibizaman
059bfea86a move template function into lib 2024-02-09 21:20:13 -08:00
ibizaman
0500096b45 remove dependency of jellyfin.nix on sops-nix 
part of #24
 2024-02-07 23:37:47 -08:00
ibizaman
228f7e8b46 remove dependency of deluge.nix on sops-nix 
part of #24
 2024-02-07 23:13:47 -08:00
ibizaman
f56f997307 remove dependency of vpn.nix on sops-nix 
part of #24
 2024-02-07 22:57:58 -08:00
ibizaman
7d0276e9f2 fix some deprecated options 2024-02-07 22:33:25 -08:00
ibizaman
a2921edcbd allow to pick nextcloud package version 
refs #131
 2024-01-30 22:51:34 -08:00
ibizaman
bccd6a1181 add more info for nextcloud 2024-01-28 22:37:30 -08:00
ibizaman
e00a41b086 add group and reloadServices options to ssl block 2024-01-24 22:45:51 -08:00
ibizaman
0bfa15fd3c add extraDomains options for cert generation 
fixes #133
 2024-01-24 18:46:42 -08:00
ibizaman
43beb92ed2 do not create unrelated groups when login in to nextcloud 2024-01-23 22:07:18 -08:00
ibizaman
56dece4190 fix nextcloud openssl path 
I don't remember why I hardcoded this, but the default works fine.
 2024-01-22 23:17:08 -08:00
ibizaman
1cf6d264e4 add declarative sso integration for nextcloud 2024-01-22 16:44:10 -08:00
sivert
8a5f4e3bf2 Combine authelia client YAML's into one YAML file 
- Fixes #126
  - Generate a single oidc_clients.yaml to define all clients
  - `public` property of OIDC clients is now a bool (as it should be), not a string.
  - sed pattern changed to allow multiple replacements
 2024-01-22 13:50:11 -08:00
ibizaman
7e2f76e7f9 improve ssl block 2024-01-20 20:19:44 -08:00
ibizaman
adc09acc49 use contract for ssl block 2024-01-19 10:48:10 -08:00
ibizaman
a5e9af27b5 make home-assistant service work without ldap integration 2024-01-08 00:35:06 -08:00
ibizaman
0a34140e34 add nextcloud integration with ldap to the manual and nextcloud demo. 
refs #17
 2024-01-06 09:48:12 -08:00
ibizaman
4a7e42abaa add declarative configuration of LDAP in Nextcloud 
refs #17
 2024-01-06 00:12:48 -08:00
ibizaman
db6d8f7f38 fix nextcloud apps config 2024-01-05 16:24:43 -08:00
ibizaman
8bd2e047b0 add default for nextcloud apps config 2024-01-05 16:24:43 -08:00
ibizaman
6f28a72035 talk about extraApps in manual 2024-01-05 16:24:43 -08:00
ibizaman
1581f054aa add declarative configuration of nextcloud preview generator app 
fixes #65
 2024-01-05 16:24:43 -08:00
ibizaman
3f83285759 rewrite nextcloud server module manual 2024-01-05 16:24:43 -08:00
ibizaman
021c465fd6 make onlyoffice config a bit nicer 2024-01-05 16:24:43 -08:00
ibizaman
bbe18df58f make onlyoffice app through nix 2024-01-05 16:24:43 -08:00
ibizaman
99f0f51406 move onlyoffice to new apps section 2024-01-05 16:24:43 -08:00
ibizaman
4a1291c075 allow extra apps in Nextcloud 2024-01-05 16:24:43 -08:00