Commit graph

181 commits

Author SHA1 Message Date
sivert
b98703cd70 Added options to make LAN access possible
The immich app has a feature to switch to another URL when on a specific
wifi network (e.g. home network). This change adds an option for listen
address so that the server can listen on LAN traffic. For this to work
with authelia, we need to add the appropriate redirect URL as well.

This is very handy for those of us who are using a proxy which blocks
large file uploads -- large files will then get synced automatically
when connecting to the home network.
2025-11-21 20:42:27 +01:00
ibizaman
9677691b2d docs: use better names for secrets 2025-11-21 09:52:13 +01:00
ibizaman
061c194b1b docs: remove misleading comment 2025-11-21 09:52:13 +01:00
ibizaman
29f2248681 forgejo: update deprecated options 2025-11-17 21:58:38 +01:00
ibizaman
bd286e6423 karakeep: update deprecated options 2025-11-17 21:58:38 +01:00
sivert
6e2cf2d035 #585 Immich: allow large uploads from mobile app 2025-11-15 20:48:52 +01:00
sivert
5287f42316 #583 Immich: add authelia bypass for mobile app
Adds bypasses for /api and /.well-known/immich so that the mobile app
authentication works.
2025-11-12 12:36:07 +01:00
ibizaman
48802553de chore: format all files 2025-10-28 22:17:00 +01:00
ibizaman
5022bb5886 karakeep: fix meilisearch secret 2025-10-24 02:15:22 +02:00
ibizaman
6b7a6c6748 karakeep: configure meilisearch with master key and auto update 2025-10-24 01:54:26 +02:00
ibizaman
7ebe421fa0 nextcloud: bump default version from 30 to 31 2025-10-23 03:05:12 +02:00
ibizaman
63b7b09a0f karakeep: init 2025-10-22 03:33:17 +02:00
ibizaman
6e64c7f8cf mod: merge shb functions into lib 2025-10-15 01:20:00 +02:00
ibizaman
9892f55ae2 mod: make imports explicit and remove system 2025-10-12 00:24:52 +02:00
ibizaman
6d0ee7494f nextcloud: allow to set sso integration without ldap 2025-10-09 02:04:20 +02:00
ibizaman
a536ee141e open-webui: do not login when not belonging to user or admin group 2025-10-09 02:04:20 +02:00
ibizaman
969630c22b revert added tests
This reverts commit ffa918aec6.
It was merged incorrectly because I tricked the tests to succeed by accident.
2025-10-05 00:08:32 +02:00
ibizaman
ffa918aec6 tests: assert user with unknown group cannot login with sso or ldap 2025-10-04 23:52:14 +02:00
ibizaman
01d8f735ae open-webui: show how to clone a secret in the docs 2025-10-04 23:24:23 +02:00
ibizaman
b840c404ab open-webui: fix giving environment to the upstream service 2025-10-04 23:24:23 +02:00
ibizaman
f938528ba6 open-webui: add missing authorization_policy 2025-09-27 22:44:15 +02:00
ibizaman
32d643d13f open-webui: fix documentation 2025-09-27 22:06:43 +02:00
ibizaman
02b73d2dce open-webui: init 2025-09-27 21:25:40 +02:00
ibizaman
771e9758b0 lldap: update deprecated option 2025-09-27 21:25:40 +02:00
ibizaman
c0ab22eebd pinchflat: update docs 2025-09-27 21:25:40 +02:00
ibizaman
c6ad91fb35 pinchflat: use temp dir to store secret 2025-09-27 21:25:40 +02:00
sivert
2f785919d9 #100 Immich service
- Declarative SSO setup via json config file
- roleClaim via LDAP groups to automatically set admin privileges
- SSO tested manually, but not yet in playwright test
- Storage quota claim not yet implemented
- Authelia rule prevents access by non-members of
userGroup/adminUserGroup
2025-09-20 14:43:38 +02:00
ibizaman
6f74d4c56c docs: fix typos in forgejo documentation 2025-09-17 10:59:12 +02:00
ibizaman
98b4cc32b6 pinchflat: init 2025-09-17 10:59:12 +02:00
ibizaman
b24eed9a86 lib: add toEnvVar function 2025-09-17 10:59:12 +02:00
ibizaman
6f27de81d2 forgejo: clean backup dumps
This assumes the dumps are moved elsewhere.
2025-09-09 17:03:30 +02:00
ibizaman
95873d84e9 nextcloud: fix permission on nextcloud server
nextcloud-occ is a wrapper around systemd-run so we must be root to run it.
2025-09-02 00:20:55 +02:00
sivert
ef99755ad9 Added role claim to Audiobookshelf's OIDC client config 2025-08-31 19:14:58 +02:00
ibizaman
ebd39bbe73 nextcloud: fix ldap and sso integration and add playwright tests 2025-08-25 11:50:06 +02:00
ibizaman
60039df698 homeassistant: fix wyoming build with latest nixpkgs 2025-08-25 10:00:30 +02:00
sivert
b4b70b175e Update SSO setup for Audiobookshelf
More or less copied from jellyfin.
2025-08-18 23:22:04 +02:00
ibizaman
b8b940e9ff add renamed options for guided migration 2025-08-18 12:57:44 +02:00
ibizaman
91580421be add playwright test with ldap for forgejo 2025-07-24 23:12:33 +02:00
ibizaman
af8e8bf582 expose fine grained modules and overlay 2025-07-14 00:41:37 +02:00
ibizaman
d78d0912ac add documentation for jellyfin 2025-07-12 23:11:02 +02:00
ibizaman
41d037206d add documentation for lldap and authelia blocks 2025-07-12 22:50:41 +02:00
ibizaman
13f4064e93 rename ldap block to lldap 2025-07-12 21:47:55 +02:00
ibizaman
0648b8a13c fix urls in documentation 2025-07-12 21:29:02 +02:00
ibizaman
82977bd239 declarative jellyfin setup with tests 2025-07-12 00:01:41 +02:00
ibizaman
1ec2c11009 allow to choose jellyfin port 2025-07-12 00:01:41 +02:00
ibizaman
38dfb0fd0b reference dataDir in jellyfin module 2025-07-12 00:01:41 +02:00
ibizaman
b603156930 add debug logging option to jellyfin 2025-07-12 00:01:41 +02:00
ibizaman
94474145be fix redirect uri for jellyfin 2025-07-12 00:01:41 +02:00
ibizaman
7f4c107949 inherit types in jellyfin module 2025-07-12 00:01:41 +02:00
ibizaman
53dde94d98 explicitly disable memories app in nextcloud
Until https://github.com/ibizaman/selfhostblocks/issues/476 is fixed
2025-06-25 00:21:27 +02:00