ibizaman
403fb20c1b
tests: remove more implicit imports
2025-11-21 09:52:13 +01:00
ibizaman
1cf6f6a2fe
monitoring: add sso integration
2025-11-21 09:52:13 +01:00
ibizaman
9677691b2d
docs: use better names for secrets
2025-11-21 09:52:13 +01:00
ibizaman
583b562ec2
monitoring: fix app name
2025-11-21 09:52:13 +01:00
ibizaman
061c194b1b
docs: remove misleading comment
2025-11-21 09:52:13 +01:00
ibizaman
0071c8120d
docs: add monitoring dashboard
2025-11-17 21:58:38 +01:00
ibizaman
29f2248681
forgejo: update deprecated options
2025-11-17 21:58:38 +01:00
ibizaman
bd286e6423
karakeep: update deprecated options
2025-11-17 21:58:38 +01:00
ibizaman
aa2622847e
monitoring: add late backups alert
2025-11-17 21:58:38 +01:00
ibizaman
f93de0420f
monitoring: add backup dashboard
2025-11-17 21:58:38 +01:00
ibizaman
693541e78f
monitoring: add backup scheduling
2025-11-17 21:58:38 +01:00
ibizaman
42a8b2eebc
monitoring: add logs to scraping job dashboard
2025-11-17 21:58:38 +01:00
ibizaman
e04ea6cb24
monitoring: surround with mkMerge
2025-11-17 21:58:38 +01:00
sivert
6e2cf2d035
#585 Immich: allow large uploads from mobile app
2025-11-15 20:48:52 +01:00
sivert
5287f42316
#583 Immich: add authelia bypass for mobile app
...
Adds bypasses for /api and /.well-known/immich so that the mobile app
authentication works.
2025-11-12 12:36:07 +01:00
ibizaman
a875835638
fmt: run formatter
2025-11-01 15:37:58 +01:00
ibizaman
e74e71ccef
borgbackup: use backup and databasebackup contracts
2025-11-01 15:19:54 +01:00
ibizaman
08b0b52cfe
restic: fix doc section level
2025-11-01 15:19:54 +01:00
ibizaman
f37a9fbb9c
monitoring: enable erroneously disabled scrapers
2025-10-29 23:49:07 +01:00
ibizaman
48802553de
chore: format all files
2025-10-28 22:17:00 +01:00
ibizaman
f62d2889c1
mod: only import hardcodedsecret from tests
2025-10-25 10:18:12 +02:00
ibizaman
5022bb5886
karakeep: fix meilisearch secret
2025-10-24 02:15:22 +02:00
ibizaman
6b7a6c6748
karakeep: configure meilisearch with master key and auto update
2025-10-24 01:54:26 +02:00
ibizaman
7ebe421fa0
nextcloud: bump default version from 30 to 31
2025-10-23 03:05:12 +02:00
ibizaman
63b7b09a0f
karakeep: init
2025-10-22 03:33:17 +02:00
ibizaman
139ceca768
authelia: add extraOidcAuthorizationPolicies option
...
This is needed for example to only authorize users of a given group to access a service.
Usually, the application itself enforces this but some don't.
2025-10-22 03:33:17 +02:00
ibizaman
2cc2ab5195
mod: use more callPackage now that is passes shb lib too
2025-10-15 01:38:35 +02:00
ibizaman
6e64c7f8cf
mod: merge shb functions into lib
2025-10-15 01:20:00 +02:00
ibizaman
283e12d87d
test: merge functions into lib and set backdoor everywhere
2025-10-15 01:20:00 +02:00
ibizaman
9892f55ae2
mod: make imports explicit and remove system
2025-10-12 00:24:52 +02:00
ibizaman
6d0ee7494f
nextcloud: allow to set sso integration without ldap
2025-10-09 02:04:20 +02:00
ibizaman
a536ee141e
open-webui: do not login when not belonging to user or admin group
2025-10-09 02:04:20 +02:00
ibizaman
969630c22b
revert added tests
...
This reverts commit ffa918aec6
2025-10-05 00:08:32 +02:00
ibizaman
ffa918aec6
tests: assert user with unknown group cannot login with sso or ldap
2025-10-04 23:52:14 +02:00
ibizaman
01d8f735ae
open-webui: show how to clone a secret in the docs
2025-10-04 23:24:23 +02:00
ibizaman
b840c404ab
open-webui: fix giving environment to the upstream service
2025-10-04 23:24:23 +02:00
ibizaman
f938528ba6
open-webui: add missing authorization_policy
2025-09-27 22:44:15 +02:00
ibizaman
32d643d13f
open-webui: fix documentation
2025-09-27 22:06:43 +02:00
ibizaman
02b73d2dce
open-webui: init
2025-09-27 21:25:40 +02:00
ibizaman
b46a227b5b
monitoring: add doc on retention time
2025-09-27 21:25:40 +02:00
ibizaman
1c2ff3e381
monitoring: update docs to use secrets contract
2025-09-27 21:25:40 +02:00
ibizaman
771e9758b0
lldap: update deprecated option
2025-09-27 21:25:40 +02:00
ibizaman
c0ab22eebd
pinchflat: update docs
2025-09-27 21:25:40 +02:00
ibizaman
c6ad91fb35
pinchflat: use temp dir to store secret
2025-09-27 21:25:40 +02:00
sivert
2f785919d9
#100 Immich service
...
- Declarative SSO setup via json config file
- roleClaim via LDAP groups to automatically set admin privileges
- SSO tested manually, but not yet in playwright test
- Storage quota claim not yet implemented
- Authelia rule prevents access by non-members of
userGroup/adminUserGroup
2025-09-20 14:43:38 +02:00
ibizaman
6f74d4c56c
docs: fix typos in forgejo documentation
2025-09-17 10:59:12 +02:00
ibizaman
98b4cc32b6
pinchflat: init
2025-09-17 10:59:12 +02:00
ibizaman
b24eed9a86
lib: add toEnvVar function
2025-09-17 10:59:12 +02:00
ibizaman
6f27de81d2
forgejo: clean backup dumps
...
This assumes the dumps are moved elsewhere.
2025-09-09 17:03:30 +02:00
ibizaman
95873d84e9
nextcloud: fix permission on nextcloud server
...
nextcloud-occ is a wrapper around systemd-run so we must be root to run it.
2025-09-02 00:20:55 +02:00
sivert
ef99755ad9
Added role claim to Audiobookshelf's OIDC client config
2025-08-31 19:14:58 +02:00
ibizaman
12721fea39
authelia: add target to wait for
2025-08-25 11:50:06 +02:00
ibizaman
7ff2cfa642
authelia: allow password change
2025-08-25 11:50:06 +02:00
ibizaman
ebd39bbe73
nextcloud: fix ldap and sso integration and add playwright tests
2025-08-25 11:50:06 +02:00
ibizaman
682a01488b
postgresql: fix password setup
2025-08-25 10:00:30 +02:00
ibizaman
60039df698
homeassistant: fix wyoming build with latest nixpkgs
2025-08-25 10:00:30 +02:00
ibizaman
8221d4fe9a
postgresql: update reference to psql binary
2025-08-25 10:00:30 +02:00
ibizaman
5f995e82df
add back info into authelia id token
2025-08-19 15:09:37 +02:00
ibizaman
b2c5637cfc
add debug output to authelia with mitmdump module
2025-08-19 13:36:46 +02:00
ibizaman
3184015d67
add debug output to lldap with mitmdump module
2025-08-19 13:36:46 +02:00
ibizaman
d824da617c
lldap: explain ensure behavior in docs
2025-08-19 13:03:06 +02:00
ibizaman
485e7474c4
lldap: only enforce groups
2025-08-19 00:55:07 +02:00
sivert
b4b70b175e
Update SSO setup for Audiobookshelf
...
More or less copied from jellyfin.
2025-08-18 23:22:04 +02:00
ibizaman
b8b940e9ff
add renamed options for guided migration
2025-08-18 12:57:44 +02:00
Sam Grayson
133ddbbd7b
correct broken link typo
2025-08-10 16:47:01 +02:00
ibizaman
c9ee41b1d4
fine grained logging with mitmdump logger addon
2025-08-04 01:22:25 +02:00
ibizaman
9a135523d2
fix link in mitmdump documentation
2025-07-31 23:30:57 +02:00
ibizaman
67c2705f98
add mitmdump block
2025-07-31 23:21:57 +02:00
ibizaman
91580421be
add playwright test with ldap for forgejo
2025-07-24 23:12:33 +02:00
ibizaman
12f2b4f49e
update lldap patches
2025-07-24 20:41:12 +02:00
ibizaman
b50f45e17e
add declarative lldap using secrets contract
2025-07-18 23:51:27 +02:00
ibizaman
af8e8bf582
expose fine grained modules and overlay
2025-07-14 00:41:37 +02:00
ibizaman
d78d0912ac
add documentation for jellyfin
2025-07-12 23:11:02 +02:00
ibizaman
41d037206d
add documentation for lldap and authelia blocks
2025-07-12 22:50:41 +02:00
ibizaman
13f4064e93
rename ldap block to lldap
2025-07-12 21:47:55 +02:00
ibizaman
0648b8a13c
fix urls in documentation
2025-07-12 21:29:02 +02:00
ibizaman
82977bd239
declarative jellyfin setup with tests
2025-07-12 00:01:41 +02:00
ibizaman
1ec2c11009
allow to choose jellyfin port
2025-07-12 00:01:41 +02:00
ibizaman
38dfb0fd0b
reference dataDir in jellyfin module
2025-07-12 00:01:41 +02:00
ibizaman
b603156930
add debug logging option to jellyfin
2025-07-12 00:01:41 +02:00
ibizaman
94474145be
fix redirect uri for jellyfin
2025-07-12 00:01:41 +02:00
ibizaman
7f4c107949
inherit types in jellyfin module
2025-07-12 00:01:41 +02:00
ibizaman
53dde94d98
explicitly disable memories app in nextcloud
...
Until https://github.com/ibizaman/selfhostblocks/issues/476 is fixed
2025-06-25 00:21:27 +02:00
ibizaman
56e837aaa0
fix sso setup for nextcloud
...
We need to switch to a systemd service running before nextcloud-setup
because the secret file is now loaded with LoadCredential, which
means it must exist before the systemd service starts
2025-06-24 23:03:17 +02:00
ibizaman
574a566b97
fix voice test for home-assistant
2025-06-24 23:03:17 +02:00
ibizaman
5a1e9809bc
fix playwright test for home-assistant
2025-06-24 23:03:17 +02:00
ibizaman
4fbdff8b6d
remove unsupported nextcloud version
2025-06-24 23:03:17 +02:00
ibizaman
9af3f2b942
add extra config param for nginx
2025-06-23 23:40:14 +02:00
ibizaman
4047321f81
add wip documentation for arr service
2025-06-09 00:31:00 +02:00
ibizaman
7dd7f41622
add documentation for home-assistant
2025-06-09 00:31:00 +02:00
ibizaman
1ce11b99ad
fix typos in forgejo manual
2025-06-09 00:31:00 +02:00
Armin Fröhlich
1d0b49f959
nextcloud-server externalStorage.userLocalMount config existing check
...
use `--output=json` and jq to check for existence of mount
2025-06-08 10:59:26 +02:00
Piotr Gaczkowski
d9a149eca2
Fix Grafana SMTP from_name
2025-06-04 00:54:57 +02:00
ibizaman
ad33980d9a
fix jellyfin SSO plugin
2025-04-09 22:53:26 +02:00
Eric Ahlberg
95a4f7987e
Fix typo in monitoring docs
2025-03-24 21:45:38 +01:00
ibizaman
c7a915a9a6
fix home-assistant basic login test
2025-03-19 16:40:11 +01:00
ibizaman
e3a03c5df6
default version of nextcloud is now 29
2025-03-19 16:40:11 +01:00
ibizaman
543f9540bd
add assertion to avoid issue with sso without ssl
2025-03-17 23:07:21 +01:00
ibizaman
cf944bee37
add assertion to avoid issue with authelia and ldap
2025-03-17 23:07:21 +01:00
ibizaman
0c64452d07
add playwright test for home-assistant
2025-02-12 00:18:10 +01:00
ibizaman
5a6be171b3
add option to add extra args to hledger
2025-02-09 17:37:45 +01:00
ibizaman
82426a4f1f
add playwright test for grocy
2025-01-31 22:39:30 +01:00
ibizaman
d13ed1c0ef
update forgejo documentation
2025-01-26 23:04:24 +01:00
ibizaman
d5293825e9
add option to create forgejo users declaratively
2025-01-26 22:39:27 +01:00
ibizaman
2c713ae9ad
add playwright test for forgejo
2025-01-26 22:39:27 +01:00
ibizaman
441907b134
refactor base module in tests
2025-01-23 21:14:50 +01:00
ibizaman
5c36deccae
fix internal url for voice assistant
2025-01-16 20:40:47 +01:00
ibizaman
af123bc52d
make nextcloud create external storage
2025-01-16 20:23:26 +01:00
ibizaman
bf73cb69a4
add documentation for nextcloud memories and recognize apps
2025-01-10 00:00:05 +01:00
ibizaman
83a3d54cf7
add recognize nextcloud app
2025-01-09 23:23:32 +01:00
ibizaman
3a1f94b596
add memories nextcloud app
2025-01-09 23:23:32 +01:00
ibizaman
4d1e3930c0
remove support for old postgresql version
2025-01-03 00:40:40 +01:00
ibizaman
2d63ef8e19
enable php-fpm exporter only when needed
2025-01-02 19:17:23 +01:00
ibizaman
16f305b9f4
add alert when certs are close to expiring
2024-12-27 22:54:45 +01:00
ibizaman
0ef061f4d6
add nextcloud dashboard
2024-12-25 13:05:59 +01:00
ibizaman
538c0a08cd
fix phpfpm prometheus exporter
2024-12-25 13:05:59 +01:00
ibizaman
a784c08761
add domain and hostname labels
2024-12-25 13:05:59 +01:00
ibizaman
9a7bcd374b
add phpfpm prometheus exporter
2024-12-23 01:20:05 +01:00
ibizaman
ab6de8de90
fix nextcloud ldap test
2024-12-17 21:57:20 +01:00
ibizaman
a8b29b243c
add voice option to home-assistant
2024-12-17 21:57:20 +01:00
Pierre Penninckx
2f4bbdd061
improve documentation ( #392 )
...
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-12-05 22:37:45 +00:00
Pierre Penninckx
ab86c6e133
add dashboard for deluge ( #389 )
...
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-12-02 22:02:04 +00:00
Pierre Penninckx
30aa5dcc11
fix modules using backup contract ( #386 )
...
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-11-30 01:07:08 +00:00
Pierre Penninckx
34c4b75871
add test for all modules using backup contract ( #383 )
...
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-11-28 21:17:14 +00:00
Pierre Penninckx
bab4b251eb
add default needed for one way backup contracts ( #381 )
...
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-11-26 22:32:49 +00:00
Pierre Penninckx
3e63cb2e12
switch databasebackup contract to new contract style ( #372 )
...
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-11-26 20:07:36 +00:00
Pierre Penninckx
47dffd2a2f
switch backup contract to new contract style ( #367 )
...
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-11-26 19:59:07 +00:00
Pierre Penninckx
ba1e60a45e
rename backup hook attributes ( #371 )
...
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-11-26 19:15:36 +00:00
Pierre Penninckx
b3e7552b88
[doc] add forgotten example in sops module documentation ( #366 )
2024-11-23 21:56:22 +00:00
Pierre Penninckx
dde0d49a84
improve contract documentation ( #365 )
2024-11-23 21:34:26 +00:00
Pierre Penninckx
b80c840743
have actual implementation for sops secrets ( #363 )
2024-11-22 23:24:47 +00:00
Pierre Penninckx
9ecbbde35a
Update remaining services to secret contract ( #358 )
2024-11-21 13:45:35 -08:00
Pierre Penninckx
5056d203d9
update secret contract and add sops module ( #356 )
...
I find these `mkProvider` and `mkRequester` functions really nice.
Also fixes doc generation related to https://github.com/NixOS/nixpkgs/pull/353513
2024-11-21 12:51:57 -08:00
Pierre Penninckx
a04dca9973
use secrets contract for restic ( #349 )
2024-11-17 21:12:14 +00:00
Pierre Penninckx
4726593ea9
Do not use activation script for script with dependencies ( #348 )
...
The issue with activation script is the order is alphabetical, meaning
the order the script is assembled is not really set in stone.
Here, because the script had a name starting with `restic`, it was ran
before the `sops` secret generation script. And since the restic script
was trying to use the secrets, it failed.
And if the activation script fails, you get a kernel panic.
2024-11-15 21:05:01 +00:00
Pierre Penninckx
442c948a1a
more contracts usage in Nextcloud and docs enhancement ( #345 )
2024-11-13 21:43:12 +00:00
Pierre Penninckx
431dd058c5
Backup contracts for files and databases ( #344 )
...
This PR continues the work started in
https://github.com/ibizaman/selfhostblocks/pull/314
I had to create my own PR since I couldn't add commits on the fork.
---------
Co-authored-by: sivertism <10866270+sivertism@users.noreply.github.com>
2024-11-12 20:40:52 +00:00
ibizaman
a589a9fe00
add contract test for secret contract
2024-10-24 22:27:47 +02:00
ibizaman
b134abeb6d
switch forgejo to new secrets contract
2024-10-24 22:27:47 +02:00
ibizaman
b85705ab74
switch authelia to new secrets contract
2024-10-24 22:27:47 +02:00
ibizaman
fa87855ee5
switch jellyfin to new secrets contract
...
This rabbit hole of a task lead me to:
- Introduce a hardcoded secret module that is a secret provider
for tests.
- Update LDAP and SSO modules to use the secret contract.
- Refactor the replaceSecrets library function to correctly fail
when a secret file could not be read.
2024-10-24 22:27:47 +02:00
Pierre Penninckx
b405988e60
fix lldap backup ( #323 )
...
closes #319
2024-10-24 21:21:01 +02:00
Pierre Penninckx
5a0ae36c85
update secret contract ( #311 )
...
This makes the secret contract better (IMNSHO):
- Improves documentation, explains better the reasoning behind the
contract.
- Makes it easier to create an option implementing the secret contract.
2024-10-01 21:01:00 +00:00
ibizaman
f75a01ee2c
revert hotfix for vpn
2024-09-22 00:36:54 -07:00
ibizaman
a262940a81
fix let's encrypt ssl block for host verification
2024-09-21 23:59:10 -07:00
ibizaman
7610097a74
add secret contract and use it in ldap block
2024-09-21 23:57:19 -07:00
Pierre Penninckx
7ad3e4c5a4
allow to customize forgejo runner host packages ( #304 )
2024-09-14 06:56:05 +00:00
ibizaman
f8edf51207
fix issue with openvpn extraArgs after update
2024-09-13 20:40:35 -07:00
ibizaman
253ec980d9
add forgejo service
2024-09-12 13:10:20 -07:00
ibizaman
adbeef3289
reduce alerting time for 5XX error
...
It's alerting for too long, even after it recovered.
We'll probably need to something more appropriate than an error budget but it'll do for now.
2024-09-07 11:06:36 -07:00
