Cody Wright
15613b2eaf
fix: add OIDC scopes to Jellyfin service
...
Also adds <DisabledPushedAuthorization>true</DisablePushedAuthorization>, as
otherwise I get "Error preparing login: Unauthorized - Failed to push
authorization parameters"
2025-12-26 22:45:56 +01:00
Piotr Gaczkowski
f17e9885d2
fix: Properly handle Authelia email
2025-12-23 22:33:43 +01:00
Piotr Gaczkowski
f5edf1b339
Update authelia.nix
...
Fixes #603
2025-12-22 09:01:09 +01:00
ibizaman
0c1d5ca455
forgejo: use secrets contract for smtp password
2025-12-17 23:21:47 +01:00
ibizaman
328a27d89e
monitoring: do not alert of all backups succeed
2025-12-17 23:21:47 +01:00
ibizaman
1aea0300e3
authelia: fix deprecated env var
2025-12-17 23:21:47 +01:00
ibizaman
a512378553
authelia: do not use dots in systemd service name
2025-12-17 23:21:47 +01:00
ibizaman
e2f5ffb8d2
ssl: add assertion to catch duplicate domain names
2025-12-08 11:39:35 +01:00
ibizaman
8acea12e8a
backup: avoid erroneous templating in alert name
2025-12-08 11:39:35 +01:00
ibizaman
21d0cc11d0
ssl: update documentation
2025-12-08 11:39:35 +01:00
ibizaman
73f2076000
ssl: fix renewal for domain name without subdomain
2025-12-08 11:39:35 +01:00
ibizaman
248317adb5
doc: fix grammar in monitoring chapter
2025-12-08 11:39:35 +01:00
ibizaman
1105fccc2d
ssl: add graphs to dashboard and show logs
2025-12-08 11:39:35 +01:00
ibizaman
79d3782412
ssl: reduce number of redundant alerts
2025-12-08 11:39:35 +01:00
ibizaman
113ca40c5f
doc: add links to monitoring dashboard from backup doc
2025-12-08 11:39:35 +01:00
cinereal
7d398c769e
docs: distinguish description for contract databasebackup from backup's
...
Signed-off-by: cinereal <cinereal@riseup.net>
2025-12-06 23:00:49 +01:00
ibizaman
80b4388044
mod: simplify by moving overlay to corresponding module
2025-12-03 22:19:45 +01:00
ibizaman
c10cab627f
mod: use explicit shb argument to pass lib
2025-12-03 22:19:45 +01:00
ibizaman
34e54408f0
nextcloud: only setup php-fpm exporter if nextcloud is enabled
2025-12-03 22:19:45 +01:00
ibizaman
6f92c457a2
monitoring: fix link
2025-12-03 22:19:45 +01:00
ibizaman
e0055e97e9
monitoring: ensure admin group
2025-12-03 22:19:45 +01:00
sivert
d655655e0c
#587 Implement SHB module for paperless service
2025-11-24 23:01:46 +01:00
ibizaman
403fb20c1b
tests: remove more implicit imports
2025-11-21 09:52:13 +01:00
ibizaman
1cf6f6a2fe
monitoring: add sso integration
2025-11-21 09:52:13 +01:00
ibizaman
9677691b2d
docs: use better names for secrets
2025-11-21 09:52:13 +01:00
ibizaman
583b562ec2
monitoring: fix app name
2025-11-21 09:52:13 +01:00
ibizaman
061c194b1b
docs: remove misleading comment
2025-11-21 09:52:13 +01:00
ibizaman
0071c8120d
docs: add monitoring dashboard
2025-11-17 21:58:38 +01:00
ibizaman
29f2248681
forgejo: update deprecated options
2025-11-17 21:58:38 +01:00
ibizaman
bd286e6423
karakeep: update deprecated options
2025-11-17 21:58:38 +01:00
ibizaman
aa2622847e
monitoring: add late backups alert
2025-11-17 21:58:38 +01:00
ibizaman
f93de0420f
monitoring: add backup dashboard
2025-11-17 21:58:38 +01:00
ibizaman
693541e78f
monitoring: add backup scheduling
2025-11-17 21:58:38 +01:00
ibizaman
42a8b2eebc
monitoring: add logs to scraping job dashboard
2025-11-17 21:58:38 +01:00
ibizaman
e04ea6cb24
monitoring: surround with mkMerge
2025-11-17 21:58:38 +01:00
sivert
6e2cf2d035
#585 Immich: allow large uploads from mobile app
2025-11-15 20:48:52 +01:00
sivert
5287f42316
#583 Immich: add authelia bypass for mobile app
...
Adds bypasses for /api and /.well-known/immich so that the mobile app
authentication works.
2025-11-12 12:36:07 +01:00
ibizaman
a875835638
fmt: run formatter
2025-11-01 15:37:58 +01:00
ibizaman
e74e71ccef
borgbackup: use backup and databasebackup contracts
2025-11-01 15:19:54 +01:00
ibizaman
08b0b52cfe
restic: fix doc section level
2025-11-01 15:19:54 +01:00
ibizaman
f37a9fbb9c
monitoring: enable erroneously disabled scrapers
2025-10-29 23:49:07 +01:00
ibizaman
48802553de
chore: format all files
2025-10-28 22:17:00 +01:00
ibizaman
f62d2889c1
mod: only import hardcodedsecret from tests
2025-10-25 10:18:12 +02:00
ibizaman
5022bb5886
karakeep: fix meilisearch secret
2025-10-24 02:15:22 +02:00
ibizaman
6b7a6c6748
karakeep: configure meilisearch with master key and auto update
2025-10-24 01:54:26 +02:00
ibizaman
7ebe421fa0
nextcloud: bump default version from 30 to 31
2025-10-23 03:05:12 +02:00
ibizaman
63b7b09a0f
karakeep: init
2025-10-22 03:33:17 +02:00
ibizaman
139ceca768
authelia: add extraOidcAuthorizationPolicies option
...
This is needed for example to only authorize users of a given group to access a service.
Usually, the application itself enforces this but some don't.
2025-10-22 03:33:17 +02:00
ibizaman
2cc2ab5195
mod: use more callPackage now that is passes shb lib too
2025-10-15 01:38:35 +02:00
ibizaman
6e64c7f8cf
mod: merge shb functions into lib
2025-10-15 01:20:00 +02:00
