Commit graph

850 commits

Author SHA1 Message Date
ibizaman
6e64c7f8cf mod: merge shb functions into lib 2025-10-15 01:20:00 +02:00
ibizaman
283e12d87d test: merge functions into lib and set backdoor everywhere 2025-10-15 01:20:00 +02:00
ibizaman
9892f55ae2 mod: make imports explicit and remove system 2025-10-12 00:24:52 +02:00
ibizaman
bd0bd713fd test: remove some tests that are annoying 2025-10-12 00:24:52 +02:00
ibizaman
3de3dad405 tests: assert user with unknown group cannot login with sso or ldap 2025-10-09 02:04:20 +02:00
ibizaman
9fc3df8e10 ci: remove unneeded args since they get inherited from nix config 2025-10-09 02:04:20 +02:00
ibizaman
e2b13aa1d8 ci: always upload playwright trace 2025-10-09 02:04:20 +02:00
ibizaman
6d0ee7494f nextcloud: allow to set sso integration without ldap 2025-10-09 02:04:20 +02:00
ibizaman
a536ee141e open-webui: do not login when not belonging to user or admin group 2025-10-09 02:04:20 +02:00
ibizaman
81dc4f280d switch to cachix nix installer
The determinate one is deprecating the installation of the official nix.
2025-10-08 12:15:34 +02:00
ibizaman
969630c22b revert added tests
This reverts commit ffa918aec6.
It was merged incorrectly because I tricked the tests to succeed by accident.
2025-10-05 00:08:32 +02:00
ibizaman
56b937741a debug 2025-10-04 23:52:14 +02:00
ibizaman
1f38d42f19 open-webui: fix test in ci 2025-10-04 23:52:14 +02:00
ibizaman
b6b23541a0 ci: debug 2025-10-04 23:52:14 +02:00
ibizaman
ffa918aec6 tests: assert user with unknown group cannot login with sso or ldap 2025-10-04 23:52:14 +02:00
ibizaman
01d8f735ae open-webui: show how to clone a secret in the docs 2025-10-04 23:24:23 +02:00
ibizaman
b840c404ab open-webui: fix giving environment to the upstream service 2025-10-04 23:24:23 +02:00
ibizaman
a0f5497e25 ci: only upload artifacts for vm checks 2025-10-04 23:09:55 +02:00
ibizaman
cc6776ec1b ci: do not warn if no artifact is found 2025-10-04 23:09:55 +02:00
ibizaman
77e4aa0a7d ci: only keep traces as artifacts 2025-10-04 23:09:55 +02:00
ibizaman
f2429c4221 ci: let all tests finish even if one has an error 2025-10-04 23:09:55 +02:00
ibizaman
f938528ba6 open-webui: add missing authorization_policy 2025-09-27 22:44:15 +02:00
ibizaman
32d643d13f open-webui: fix documentation 2025-09-27 22:06:43 +02:00
ibizaman
02b73d2dce open-webui: init 2025-09-27 21:25:40 +02:00
ibizaman
b46a227b5b monitoring: add doc on retention time 2025-09-27 21:25:40 +02:00
ibizaman
1c2ff3e381 monitoring: update docs to use secrets contract 2025-09-27 21:25:40 +02:00
ibizaman
771e9758b0 lldap: update deprecated option 2025-09-27 21:25:40 +02:00
ibizaman
c0ab22eebd pinchflat: update docs 2025-09-27 21:25:40 +02:00
ibizaman
c6ad91fb35 pinchflat: use temp dir to store secret 2025-09-27 21:25:40 +02:00
ibizaman
5b31645afa docs: sort order 2025-09-27 21:25:40 +02:00
ibizaman
07c700f69b home-assistant: fix module name 2025-09-27 21:25:40 +02:00
github-actions[bot]
28f8230ec8 flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/0147c2f1d54b30b5dd6d4a8c8542e8d7edf93b5d?narHash=sha256-7To75JlpekfUmdkUZewnT6MoBANS0XVypW6kjUOXQwc%3D' (2025-09-18)
  → 'github:nixos/nixpkgs/554be6495561ff07b6c724047bdd7e0716aa7b46?narHash=sha256-pHpxZ/IyCwoTQPtFIAG2QaxuSm8jWzrzBGjwQZIttJc%3D' (2025-09-21)
2025-09-24 22:33:48 +02:00
sivert
2f785919d9 #100 Immich service
- Declarative SSO setup via json config file
- roleClaim via LDAP groups to automatically set admin privileges
- SSO tested manually, but not yet in playwright test
- Storage quota claim not yet implemented
- Authelia rule prevents access by non-members of
userGroup/adminUserGroup
2025-09-20 14:43:38 +02:00
github-actions[bot]
4621a02dff flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/8d4ddb19d03c65a36ad8d189d001dc32ffb0306b?narHash=sha256-qqIJ3yxPiB0ZQTT9//nFGQYn8X/PBoJbofA7hRKZnmE%3D' (2025-09-16)
  → 'github:nixos/nixpkgs/0147c2f1d54b30b5dd6d4a8c8542e8d7edf93b5d?narHash=sha256-7To75JlpekfUmdkUZewnT6MoBANS0XVypW6kjUOXQwc%3D' (2025-09-18)
2025-09-20 03:46:54 +02:00
github-actions[bot]
a571125ebf flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/c23193b943c6c689d70ee98ce3128239ed9e32d1?narHash=sha256-hLEO2TPj55KcUFUU1vgtHE9UEIOjRcH/4QbmfHNF820%3D' (2025-09-13)
  → 'github:nixos/nixpkgs/8d4ddb19d03c65a36ad8d189d001dc32ffb0306b?narHash=sha256-qqIJ3yxPiB0ZQTT9//nFGQYn8X/PBoJbofA7hRKZnmE%3D' (2025-09-16)
2025-09-19 04:04:02 +02:00
ibizaman
3a5186942f docs: do not ask when generating redirects
We have git to back us up.
2025-09-17 10:59:12 +02:00
ibizaman
6f74d4c56c docs: fix typos in forgejo documentation 2025-09-17 10:59:12 +02:00
ibizaman
98b4cc32b6 pinchflat: init 2025-09-17 10:59:12 +02:00
ibizaman
3f74b4ecc4 test: add dns record for authelia service 2025-09-17 10:59:12 +02:00
ibizaman
f38993bf32 ops: ignore more files 2025-09-17 10:59:12 +02:00
ibizaman
b24eed9a86 lib: add toEnvVar function 2025-09-17 10:59:12 +02:00
dependabot[bot]
9dfb82a0cf build(deps): bump tj-actions/changed-files from 46 to 47
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 46 to 47.
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](https://github.com/tj-actions/changed-files/compare/v46...v47)

---
updated-dependencies:
- dependency-name: tj-actions/changed-files
  dependency-version: '47'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-15 17:33:55 +02:00
github-actions[bot]
d4099b1d48 flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/8eb28adfa3dc4de28e792e3bf49fcf9007ca8ac9?narHash=sha256-NOrUtIhTkIIumj1E/Rsv1J37Yi3xGStISEo8tZm3KW4%3D' (2025-09-05)
  → 'github:nixos/nixpkgs/c23193b943c6c689d70ee98ce3128239ed9e32d1?narHash=sha256-hLEO2TPj55KcUFUU1vgtHE9UEIOjRcH/4QbmfHNF820%3D' (2025-09-13)
2025-09-14 04:09:09 +02:00
ibizaman
efef2fcb88 docs: add what is SHB section 2025-09-13 12:17:33 +02:00
ibizaman
6f27de81d2 forgejo: clean backup dumps
This assumes the dumps are moved elsewhere.
2025-09-09 17:03:30 +02:00
github-actions[bot]
ee5f379953 flake.lock: Update
Flake lock file updates:

• Updated input 'nmdsrc':
    'git+https://git.sr.ht/~rycee/nmd?ref=refs/heads/master&rev=66d9334933119c36f91a78d565c152a4fdc8d3d3' (2024-01-12)
  → 'git+https://git.sr.ht/~rycee/nmd?ref=refs/heads/master&rev=055e814ac35379dece164a8413d336b57c5d2e0c' (2025-09-07)
2025-09-08 03:49:51 +02:00
github-actions[bot]
9ac5263511 flake.lock: Update
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/d7600c775f877cd87b4f5a831c28aa94137377aa?narHash=sha256-tlOn88coG5fzdyqz6R93SQL5Gpq%2Bm/DsWpekNFhqPQk%3D' (2025-08-30)
  → 'github:nixos/nixpkgs/8eb28adfa3dc4de28e792e3bf49fcf9007ca8ac9?narHash=sha256-NOrUtIhTkIIumj1E/Rsv1J37Yi3xGStISEo8tZm3KW4%3D' (2025-09-05)
2025-09-07 04:10:16 +02:00
ibizaman
95873d84e9 nextcloud: fix permission on nextcloud server
nextcloud-occ is a wrapper around systemd-run so we must be root to run it.
2025-09-02 00:20:55 +02:00
ibizaman
45c366c14c wyoming-piper: fix voice test 2025-09-01 22:08:41 +02:00
ibizaman
74917217ab wyoming-piper: fix compilation with patch 2025-09-01 22:08:41 +02:00