ibizaman
682a01488b
postgresql: fix password setup
2025-08-25 10:00:30 +02:00
ibizaman
8221d4fe9a
postgresql: update reference to psql binary
2025-08-25 10:00:30 +02:00
ibizaman
5f995e82df
add back info into authelia id token
2025-08-19 15:09:37 +02:00
ibizaman
b2c5637cfc
add debug output to authelia with mitmdump module
2025-08-19 13:36:46 +02:00
ibizaman
3184015d67
add debug output to lldap with mitmdump module
2025-08-19 13:36:46 +02:00
ibizaman
d824da617c
lldap: explain ensure behavior in docs
2025-08-19 13:03:06 +02:00
ibizaman
485e7474c4
lldap: only enforce groups
2025-08-19 00:55:07 +02:00
ibizaman
b8b940e9ff
add renamed options for guided migration
2025-08-18 12:57:44 +02:00
Sam Grayson
133ddbbd7b
correct broken link typo
2025-08-10 16:47:01 +02:00
ibizaman
c9ee41b1d4
fine grained logging with mitmdump logger addon
2025-08-04 01:22:25 +02:00
ibizaman
9a135523d2
fix link in mitmdump documentation
2025-07-31 23:30:57 +02:00
ibizaman
67c2705f98
add mitmdump block
2025-07-31 23:21:57 +02:00
ibizaman
91580421be
add playwright test with ldap for forgejo
2025-07-24 23:12:33 +02:00
ibizaman
12f2b4f49e
update lldap patches
2025-07-24 20:41:12 +02:00
ibizaman
b50f45e17e
add declarative lldap using secrets contract
2025-07-18 23:51:27 +02:00
ibizaman
41d037206d
add documentation for lldap and authelia blocks
2025-07-12 22:50:41 +02:00
ibizaman
13f4064e93
rename ldap block to lldap
2025-07-12 21:47:55 +02:00
ibizaman
9af3f2b942
add extra config param for nginx
2025-06-23 23:40:14 +02:00
Piotr Gaczkowski
d9a149eca2
Fix Grafana SMTP from_name
2025-06-04 00:54:57 +02:00
Eric Ahlberg
95a4f7987e
Fix typo in monitoring docs
2025-03-24 21:45:38 +01:00
ibizaman
cf944bee37
add assertion to avoid issue with authelia and ldap
2025-03-17 23:07:21 +01:00
ibizaman
4d1e3930c0
remove support for old postgresql version
2025-01-03 00:40:40 +01:00
ibizaman
2d63ef8e19
enable php-fpm exporter only when needed
2025-01-02 19:17:23 +01:00
ibizaman
16f305b9f4
add alert when certs are close to expiring
2024-12-27 22:54:45 +01:00
ibizaman
0ef061f4d6
add nextcloud dashboard
2024-12-25 13:05:59 +01:00
ibizaman
a784c08761
add domain and hostname labels
2024-12-25 13:05:59 +01:00
Pierre Penninckx
2f4bbdd061
improve documentation ( #392 )
...
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-12-05 22:37:45 +00:00
Pierre Penninckx
ab86c6e133
add dashboard for deluge ( #389 )
...
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-12-02 22:02:04 +00:00
Pierre Penninckx
bab4b251eb
add default needed for one way backup contracts ( #381 )
...
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-11-26 22:32:49 +00:00
Pierre Penninckx
3e63cb2e12
switch databasebackup contract to new contract style ( #372 )
...
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-11-26 20:07:36 +00:00
Pierre Penninckx
47dffd2a2f
switch backup contract to new contract style ( #367 )
...
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-11-26 19:59:07 +00:00
Pierre Penninckx
ba1e60a45e
rename backup hook attributes ( #371 )
...
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-11-26 19:15:36 +00:00
Pierre Penninckx
b3e7552b88
[doc] add forgotten example in sops module documentation ( #366 )
2024-11-23 21:56:22 +00:00
Pierre Penninckx
b80c840743
have actual implementation for sops secrets ( #363 )
2024-11-22 23:24:47 +00:00
Pierre Penninckx
5056d203d9
update secret contract and add sops module ( #356 )
...
I find these `mkProvider` and `mkRequester` functions really nice.
Also fixes doc generation related to https://github.com/NixOS/nixpkgs/pull/353513
2024-11-21 12:51:57 -08:00
Pierre Penninckx
a04dca9973
use secrets contract for restic ( #349 )
2024-11-17 21:12:14 +00:00
Pierre Penninckx
4726593ea9
Do not use activation script for script with dependencies ( #348 )
...
The issue with activation script is the order is alphabetical, meaning
the order the script is assembled is not really set in stone.
Here, because the script had a name starting with `restic`, it was ran
before the `sops` secret generation script. And since the restic script
was trying to use the secrets, it failed.
And if the activation script fails, you get a kernel panic.
2024-11-15 21:05:01 +00:00
Pierre Penninckx
431dd058c5
Backup contracts for files and databases ( #344 )
...
This PR continues the work started in
https://github.com/ibizaman/selfhostblocks/pull/314
I had to create my own PR since I couldn't add commits on the fork.
---------
Co-authored-by: sivertism <10866270+sivertism@users.noreply.github.com>
2024-11-12 20:40:52 +00:00
ibizaman
a589a9fe00
add contract test for secret contract
2024-10-24 22:27:47 +02:00
ibizaman
b85705ab74
switch authelia to new secrets contract
2024-10-24 22:27:47 +02:00
ibizaman
fa87855ee5
switch jellyfin to new secrets contract
...
This rabbit hole of a task lead me to:
- Introduce a hardcoded secret module that is a secret provider
for tests.
- Update LDAP and SSO modules to use the secret contract.
- Refactor the replaceSecrets library function to correctly fail
when a secret file could not be read.
2024-10-24 22:27:47 +02:00
Pierre Penninckx
b405988e60
fix lldap backup ( #323 )
...
closes #319
2024-10-24 21:21:01 +02:00
Pierre Penninckx
5a0ae36c85
update secret contract ( #311 )
...
This makes the secret contract better (IMNSHO):
- Improves documentation, explains better the reasoning behind the
contract.
- Makes it easier to create an option implementing the secret contract.
2024-10-01 21:01:00 +00:00
ibizaman
f75a01ee2c
revert hotfix for vpn
2024-09-22 00:36:54 -07:00
ibizaman
a262940a81
fix let's encrypt ssl block for host verification
2024-09-21 23:59:10 -07:00
ibizaman
7610097a74
add secret contract and use it in ldap block
2024-09-21 23:57:19 -07:00
ibizaman
f8edf51207
fix issue with openvpn extraArgs after update
2024-09-13 20:40:35 -07:00
ibizaman
253ec980d9
add forgejo service
2024-09-12 13:10:20 -07:00
ibizaman
adbeef3289
reduce alerting time for 5XX error
...
It's alerting for too long, even after it recovered.
We'll probably need to something more appropriate than an error budget but it'll do for now.
2024-09-07 11:06:36 -07:00
ibizaman
ff5a13c6ce
fix davfs gid
2024-09-03 09:37:16 -07:00