ibizaman
5022bb5886
karakeep: fix meilisearch secret
2025-10-24 02:15:22 +02:00
ibizaman
6b7a6c6748
karakeep: configure meilisearch with master key and auto update
2025-10-24 01:54:26 +02:00
ibizaman
7ebe421fa0
nextcloud: bump default version from 30 to 31
2025-10-23 03:05:12 +02:00
ibizaman
63b7b09a0f
karakeep: init
2025-10-22 03:33:17 +02:00
ibizaman
139ceca768
authelia: add extraOidcAuthorizationPolicies option
...
This is needed for example to only authorize users of a given group to access a service.
Usually, the application itself enforces this but some don't.
2025-10-22 03:33:17 +02:00
ibizaman
2cc2ab5195
mod: use more callPackage now that is passes shb lib too
2025-10-15 01:38:35 +02:00
ibizaman
6e64c7f8cf
mod: merge shb functions into lib
2025-10-15 01:20:00 +02:00
ibizaman
283e12d87d
test: merge functions into lib and set backdoor everywhere
2025-10-15 01:20:00 +02:00
ibizaman
9892f55ae2
mod: make imports explicit and remove system
2025-10-12 00:24:52 +02:00
ibizaman
6d0ee7494f
nextcloud: allow to set sso integration without ldap
2025-10-09 02:04:20 +02:00
ibizaman
a536ee141e
open-webui: do not login when not belonging to user or admin group
2025-10-09 02:04:20 +02:00
ibizaman
969630c22b
revert added tests
...
This reverts commit ffa918aec6
2025-10-05 00:08:32 +02:00
ibizaman
ffa918aec6
tests: assert user with unknown group cannot login with sso or ldap
2025-10-04 23:52:14 +02:00
ibizaman
01d8f735ae
open-webui: show how to clone a secret in the docs
2025-10-04 23:24:23 +02:00
ibizaman
b840c404ab
open-webui: fix giving environment to the upstream service
2025-10-04 23:24:23 +02:00
ibizaman
f938528ba6
open-webui: add missing authorization_policy
2025-09-27 22:44:15 +02:00
ibizaman
32d643d13f
open-webui: fix documentation
2025-09-27 22:06:43 +02:00
ibizaman
02b73d2dce
open-webui: init
2025-09-27 21:25:40 +02:00
ibizaman
b46a227b5b
monitoring: add doc on retention time
2025-09-27 21:25:40 +02:00
ibizaman
1c2ff3e381
monitoring: update docs to use secrets contract
2025-09-27 21:25:40 +02:00
ibizaman
771e9758b0
lldap: update deprecated option
2025-09-27 21:25:40 +02:00
ibizaman
c0ab22eebd
pinchflat: update docs
2025-09-27 21:25:40 +02:00
ibizaman
c6ad91fb35
pinchflat: use temp dir to store secret
2025-09-27 21:25:40 +02:00
sivert
2f785919d9
#100 Immich service
...
- Declarative SSO setup via json config file
- roleClaim via LDAP groups to automatically set admin privileges
- SSO tested manually, but not yet in playwright test
- Storage quota claim not yet implemented
- Authelia rule prevents access by non-members of
userGroup/adminUserGroup
2025-09-20 14:43:38 +02:00
ibizaman
6f74d4c56c
docs: fix typos in forgejo documentation
2025-09-17 10:59:12 +02:00
ibizaman
98b4cc32b6
pinchflat: init
2025-09-17 10:59:12 +02:00
ibizaman
b24eed9a86
lib: add toEnvVar function
2025-09-17 10:59:12 +02:00
ibizaman
6f27de81d2
forgejo: clean backup dumps
...
This assumes the dumps are moved elsewhere.
2025-09-09 17:03:30 +02:00
ibizaman
95873d84e9
nextcloud: fix permission on nextcloud server
...
nextcloud-occ is a wrapper around systemd-run so we must be root to run it.
2025-09-02 00:20:55 +02:00
sivert
ef99755ad9
Added role claim to Audiobookshelf's OIDC client config
2025-08-31 19:14:58 +02:00
ibizaman
12721fea39
authelia: add target to wait for
2025-08-25 11:50:06 +02:00
ibizaman
7ff2cfa642
authelia: allow password change
2025-08-25 11:50:06 +02:00
ibizaman
ebd39bbe73
nextcloud: fix ldap and sso integration and add playwright tests
2025-08-25 11:50:06 +02:00
ibizaman
682a01488b
postgresql: fix password setup
2025-08-25 10:00:30 +02:00
ibizaman
60039df698
homeassistant: fix wyoming build with latest nixpkgs
2025-08-25 10:00:30 +02:00
ibizaman
8221d4fe9a
postgresql: update reference to psql binary
2025-08-25 10:00:30 +02:00
ibizaman
5f995e82df
add back info into authelia id token
2025-08-19 15:09:37 +02:00
ibizaman
b2c5637cfc
add debug output to authelia with mitmdump module
2025-08-19 13:36:46 +02:00
ibizaman
3184015d67
add debug output to lldap with mitmdump module
2025-08-19 13:36:46 +02:00
ibizaman
d824da617c
lldap: explain ensure behavior in docs
2025-08-19 13:03:06 +02:00
ibizaman
485e7474c4
lldap: only enforce groups
2025-08-19 00:55:07 +02:00
sivert
b4b70b175e
Update SSO setup for Audiobookshelf
...
More or less copied from jellyfin.
2025-08-18 23:22:04 +02:00
ibizaman
b8b940e9ff
add renamed options for guided migration
2025-08-18 12:57:44 +02:00
Sam Grayson
133ddbbd7b
correct broken link typo
2025-08-10 16:47:01 +02:00
ibizaman
c9ee41b1d4
fine grained logging with mitmdump logger addon
2025-08-04 01:22:25 +02:00
ibizaman
9a135523d2
fix link in mitmdump documentation
2025-07-31 23:30:57 +02:00
ibizaman
67c2705f98
add mitmdump block
2025-07-31 23:21:57 +02:00
ibizaman
91580421be
add playwright test with ldap for forgejo
2025-07-24 23:12:33 +02:00
ibizaman
12f2b4f49e
update lldap patches
2025-07-24 20:41:12 +02:00
ibizaman
b50f45e17e
add declarative lldap using secrets contract
2025-07-18 23:51:27 +02:00
ibizaman
af8e8bf582
expose fine grained modules and overlay
2025-07-14 00:41:37 +02:00
ibizaman
d78d0912ac
add documentation for jellyfin
2025-07-12 23:11:02 +02:00
ibizaman
41d037206d
add documentation for lldap and authelia blocks
2025-07-12 22:50:41 +02:00
ibizaman
13f4064e93
rename ldap block to lldap
2025-07-12 21:47:55 +02:00
ibizaman
0648b8a13c
fix urls in documentation
2025-07-12 21:29:02 +02:00
ibizaman
82977bd239
declarative jellyfin setup with tests
2025-07-12 00:01:41 +02:00
ibizaman
1ec2c11009
allow to choose jellyfin port
2025-07-12 00:01:41 +02:00
ibizaman
38dfb0fd0b
reference dataDir in jellyfin module
2025-07-12 00:01:41 +02:00
ibizaman
b603156930
add debug logging option to jellyfin
2025-07-12 00:01:41 +02:00
ibizaman
94474145be
fix redirect uri for jellyfin
2025-07-12 00:01:41 +02:00
ibizaman
7f4c107949
inherit types in jellyfin module
2025-07-12 00:01:41 +02:00
ibizaman
53dde94d98
explicitly disable memories app in nextcloud
...
Until https://github.com/ibizaman/selfhostblocks/issues/476 is fixed
2025-06-25 00:21:27 +02:00
ibizaman
56e837aaa0
fix sso setup for nextcloud
...
We need to switch to a systemd service running before nextcloud-setup
because the secret file is now loaded with LoadCredential, which
means it must exist before the systemd service starts
2025-06-24 23:03:17 +02:00
ibizaman
574a566b97
fix voice test for home-assistant
2025-06-24 23:03:17 +02:00
ibizaman
5a1e9809bc
fix playwright test for home-assistant
2025-06-24 23:03:17 +02:00
ibizaman
4fbdff8b6d
remove unsupported nextcloud version
2025-06-24 23:03:17 +02:00
ibizaman
9af3f2b942
add extra config param for nginx
2025-06-23 23:40:14 +02:00
ibizaman
4047321f81
add wip documentation for arr service
2025-06-09 00:31:00 +02:00
ibizaman
7dd7f41622
add documentation for home-assistant
2025-06-09 00:31:00 +02:00
ibizaman
1ce11b99ad
fix typos in forgejo manual
2025-06-09 00:31:00 +02:00
Armin Fröhlich
1d0b49f959
nextcloud-server externalStorage.userLocalMount config existing check
...
use `--output=json` and jq to check for existence of mount
2025-06-08 10:59:26 +02:00
Piotr Gaczkowski
d9a149eca2
Fix Grafana SMTP from_name
2025-06-04 00:54:57 +02:00
ibizaman
ad33980d9a
fix jellyfin SSO plugin
2025-04-09 22:53:26 +02:00
Eric Ahlberg
95a4f7987e
Fix typo in monitoring docs
2025-03-24 21:45:38 +01:00
ibizaman
c7a915a9a6
fix home-assistant basic login test
2025-03-19 16:40:11 +01:00
ibizaman
e3a03c5df6
default version of nextcloud is now 29
2025-03-19 16:40:11 +01:00
ibizaman
543f9540bd
add assertion to avoid issue with sso without ssl
2025-03-17 23:07:21 +01:00
ibizaman
cf944bee37
add assertion to avoid issue with authelia and ldap
2025-03-17 23:07:21 +01:00
ibizaman
0c64452d07
add playwright test for home-assistant
2025-02-12 00:18:10 +01:00
ibizaman
5a6be171b3
add option to add extra args to hledger
2025-02-09 17:37:45 +01:00
ibizaman
82426a4f1f
add playwright test for grocy
2025-01-31 22:39:30 +01:00
ibizaman
d13ed1c0ef
update forgejo documentation
2025-01-26 23:04:24 +01:00
ibizaman
d5293825e9
add option to create forgejo users declaratively
2025-01-26 22:39:27 +01:00
ibizaman
2c713ae9ad
add playwright test for forgejo
2025-01-26 22:39:27 +01:00
ibizaman
441907b134
refactor base module in tests
2025-01-23 21:14:50 +01:00
ibizaman
5c36deccae
fix internal url for voice assistant
2025-01-16 20:40:47 +01:00
ibizaman
af123bc52d
make nextcloud create external storage
2025-01-16 20:23:26 +01:00
ibizaman
bf73cb69a4
add documentation for nextcloud memories and recognize apps
2025-01-10 00:00:05 +01:00
ibizaman
83a3d54cf7
add recognize nextcloud app
2025-01-09 23:23:32 +01:00
ibizaman
3a1f94b596
add memories nextcloud app
2025-01-09 23:23:32 +01:00
ibizaman
4d1e3930c0
remove support for old postgresql version
2025-01-03 00:40:40 +01:00
ibizaman
2d63ef8e19
enable php-fpm exporter only when needed
2025-01-02 19:17:23 +01:00
ibizaman
16f305b9f4
add alert when certs are close to expiring
2024-12-27 22:54:45 +01:00
ibizaman
0ef061f4d6
add nextcloud dashboard
2024-12-25 13:05:59 +01:00
ibizaman
538c0a08cd
fix phpfpm prometheus exporter
2024-12-25 13:05:59 +01:00
ibizaman
a784c08761
add domain and hostname labels
2024-12-25 13:05:59 +01:00
ibizaman
9a7bcd374b
add phpfpm prometheus exporter
2024-12-23 01:20:05 +01:00
ibizaman
ab6de8de90
fix nextcloud ldap test
2024-12-17 21:57:20 +01:00
ibizaman
a8b29b243c
add voice option to home-assistant
2024-12-17 21:57:20 +01:00
Pierre Penninckx
2f4bbdd061
improve documentation ( #392 )
...
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-12-05 22:37:45 +00:00
