Commit graph

202 commits

Author SHA1 Message Date
ibizaman
b24eed9a86 lib: add toEnvVar function 2025-09-17 10:59:12 +02:00
ibizaman
6f27de81d2 forgejo: clean backup dumps
This assumes the dumps are moved elsewhere.
2025-09-09 17:03:30 +02:00
ibizaman
95873d84e9 nextcloud: fix permission on nextcloud server
nextcloud-occ is a wrapper around systemd-run so we must be root to run it.
2025-09-02 00:20:55 +02:00
sivert
ef99755ad9 Added role claim to Audiobookshelf's OIDC client config 2025-08-31 19:14:58 +02:00
ibizaman
ebd39bbe73 nextcloud: fix ldap and sso integration and add playwright tests 2025-08-25 11:50:06 +02:00
ibizaman
60039df698 homeassistant: fix wyoming build with latest nixpkgs 2025-08-25 10:00:30 +02:00
sivert
b4b70b175e Update SSO setup for Audiobookshelf
More or less copied from jellyfin.
2025-08-18 23:22:04 +02:00
ibizaman
b8b940e9ff add renamed options for guided migration 2025-08-18 12:57:44 +02:00
ibizaman
91580421be add playwright test with ldap for forgejo 2025-07-24 23:12:33 +02:00
ibizaman
af8e8bf582 expose fine grained modules and overlay 2025-07-14 00:41:37 +02:00
ibizaman
d78d0912ac add documentation for jellyfin 2025-07-12 23:11:02 +02:00
ibizaman
41d037206d add documentation for lldap and authelia blocks 2025-07-12 22:50:41 +02:00
ibizaman
13f4064e93 rename ldap block to lldap 2025-07-12 21:47:55 +02:00
ibizaman
0648b8a13c fix urls in documentation 2025-07-12 21:29:02 +02:00
ibizaman
82977bd239 declarative jellyfin setup with tests 2025-07-12 00:01:41 +02:00
ibizaman
1ec2c11009 allow to choose jellyfin port 2025-07-12 00:01:41 +02:00
ibizaman
38dfb0fd0b reference dataDir in jellyfin module 2025-07-12 00:01:41 +02:00
ibizaman
b603156930 add debug logging option to jellyfin 2025-07-12 00:01:41 +02:00
ibizaman
94474145be fix redirect uri for jellyfin 2025-07-12 00:01:41 +02:00
ibizaman
7f4c107949 inherit types in jellyfin module 2025-07-12 00:01:41 +02:00
ibizaman
53dde94d98 explicitly disable memories app in nextcloud
Until https://github.com/ibizaman/selfhostblocks/issues/476 is fixed
2025-06-25 00:21:27 +02:00
ibizaman
56e837aaa0 fix sso setup for nextcloud
We need to switch to a systemd service running before nextcloud-setup
because the secret file is now loaded with LoadCredential, which
means it must exist before the systemd service starts
2025-06-24 23:03:17 +02:00
ibizaman
574a566b97 fix voice test for home-assistant 2025-06-24 23:03:17 +02:00
ibizaman
5a1e9809bc fix playwright test for home-assistant 2025-06-24 23:03:17 +02:00
ibizaman
4fbdff8b6d remove unsupported nextcloud version 2025-06-24 23:03:17 +02:00
ibizaman
4047321f81 add wip documentation for arr service 2025-06-09 00:31:00 +02:00
ibizaman
7dd7f41622 add documentation for home-assistant 2025-06-09 00:31:00 +02:00
ibizaman
1ce11b99ad fix typos in forgejo manual 2025-06-09 00:31:00 +02:00
Armin Fröhlich
1d0b49f959 nextcloud-server externalStorage.userLocalMount config existing check
use `--output=json` and jq to check for existence of mount
2025-06-08 10:59:26 +02:00
ibizaman
ad33980d9a fix jellyfin SSO plugin 2025-04-09 22:53:26 +02:00
ibizaman
c7a915a9a6 fix home-assistant basic login test 2025-03-19 16:40:11 +01:00
ibizaman
e3a03c5df6 default version of nextcloud is now 29 2025-03-19 16:40:11 +01:00
ibizaman
543f9540bd add assertion to avoid issue with sso without ssl 2025-03-17 23:07:21 +01:00
ibizaman
0c64452d07 add playwright test for home-assistant 2025-02-12 00:18:10 +01:00
ibizaman
5a6be171b3 add option to add extra args to hledger 2025-02-09 17:37:45 +01:00
ibizaman
82426a4f1f add playwright test for grocy 2025-01-31 22:39:30 +01:00
ibizaman
d13ed1c0ef update forgejo documentation 2025-01-26 23:04:24 +01:00
ibizaman
d5293825e9 add option to create forgejo users declaratively 2025-01-26 22:39:27 +01:00
ibizaman
2c713ae9ad add playwright test for forgejo 2025-01-26 22:39:27 +01:00
ibizaman
5c36deccae fix internal url for voice assistant 2025-01-16 20:40:47 +01:00
ibizaman
af123bc52d make nextcloud create external storage 2025-01-16 20:23:26 +01:00
ibizaman
bf73cb69a4 add documentation for nextcloud memories and recognize apps 2025-01-10 00:00:05 +01:00
ibizaman
83a3d54cf7 add recognize nextcloud app 2025-01-09 23:23:32 +01:00
ibizaman
3a1f94b596 add memories nextcloud app 2025-01-09 23:23:32 +01:00
ibizaman
0ef061f4d6 add nextcloud dashboard 2024-12-25 13:05:59 +01:00
ibizaman
538c0a08cd fix phpfpm prometheus exporter 2024-12-25 13:05:59 +01:00
ibizaman
a784c08761 add domain and hostname labels 2024-12-25 13:05:59 +01:00
ibizaman
9a7bcd374b add phpfpm prometheus exporter 2024-12-23 01:20:05 +01:00
ibizaman
ab6de8de90 fix nextcloud ldap test 2024-12-17 21:57:20 +01:00
ibizaman
a8b29b243c add voice option to home-assistant 2024-12-17 21:57:20 +01:00
Pierre Penninckx
ab86c6e133
add dashboard for deluge (#389)
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-12-02 22:02:04 +00:00
Pierre Penninckx
30aa5dcc11
fix modules using backup contract (#386)
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-11-30 01:07:08 +00:00
Pierre Penninckx
34c4b75871
add test for all modules using backup contract (#383)
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-11-28 21:17:14 +00:00
Pierre Penninckx
bab4b251eb
add default needed for one way backup contracts (#381)
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-11-26 22:32:49 +00:00
Pierre Penninckx
3e63cb2e12
switch databasebackup contract to new contract style (#372)
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-11-26 20:07:36 +00:00
Pierre Penninckx
47dffd2a2f
switch backup contract to new contract style (#367)
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-11-26 19:59:07 +00:00
Pierre Penninckx
9ecbbde35a
Update remaining services to secret contract (#358) 2024-11-21 13:45:35 -08:00
Pierre Penninckx
5056d203d9
update secret contract and add sops module (#356)
I find these `mkProvider` and `mkRequester` functions really nice.

Also fixes doc generation related to  https://github.com/NixOS/nixpkgs/pull/353513
2024-11-21 12:51:57 -08:00
Pierre Penninckx
442c948a1a
more contracts usage in Nextcloud and docs enhancement (#345) 2024-11-13 21:43:12 +00:00
Pierre Penninckx
431dd058c5
Backup contracts for files and databases (#344)
This PR continues the work started in
https://github.com/ibizaman/selfhostblocks/pull/314

I had to create my own PR since I couldn't add commits on the fork.

---------

Co-authored-by: sivertism <10866270+sivertism@users.noreply.github.com>
2024-11-12 20:40:52 +00:00
ibizaman
b134abeb6d switch forgejo to new secrets contract 2024-10-24 22:27:47 +02:00
ibizaman
fa87855ee5 switch jellyfin to new secrets contract
This rabbit hole of a task lead me to:
- Introduce a hardcoded secret module that is a secret provider
  for tests.
- Update LDAP and SSO modules to use the secret contract.
- Refactor the replaceSecrets library function to correctly fail
  when a secret file could not be read.
2024-10-24 22:27:47 +02:00
Pierre Penninckx
7ad3e4c5a4
allow to customize forgejo runner host packages (#304) 2024-09-14 06:56:05 +00:00
ibizaman
253ec980d9 add forgejo service 2024-09-12 13:10:20 -07:00
Pierre Penninckx
3a44530844
apply Nextcloud expensive migrations on service start (#294) 2024-09-03 03:22:53 +00:00
ibizaman
1bd5810a6d apply nextcloud test fix to all configs 2024-09-01 22:15:07 -07:00
ibizaman
35bfb01848 fix nextcloud test when nextcloud is not enabled 2024-09-01 22:10:23 -07:00
ibizaman
6da0a4b988 disable nextcloud maintenance mode on service restart 2024-09-01 17:23:04 -07:00
Pierre Penninckx
d711e59f91
Wait actively on ldap being ready (#286)
Looks like this is needed in the end, other we get into some flaky
situations
2024-09-01 06:36:53 +00:00
Pierre Penninckx
8db61af6b3
respect stateVersion in vaultwarden (#285) 2024-08-31 09:22:30 +00:00
Pierre Penninckx
eb791b3019
flake.lock: Update (#244)
Automated changes by the
[update-flake-lock](https://github.com/DeterminateSystems/update-flake-lock)
GitHub Action.

```
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/9ca3f649614213b2aaf5f1e16ec06952fe4c2632?narHash=sha256-7EXDb5WBw%2Bd004Agt%2BJHC/Oyh/KTUglOaQ4MNjBbo5w%3D' (2024-05-27)
  → 'github:nixos/nixpkgs/71e91c409d1e654808b2621f28a327acfdad8dc2?narHash=sha256-GnR7/ibgIH1vhoy8cYdmXE6iyZqKqFxQSVkFgosBh6w%3D' (2024-08-28)
```

### Running GitHub Actions on this PR

GitHub Actions will not run workflows on pull requests which are opened
by a GitHub Action.

To run GitHub Actions workflows on this PR, run:

```sh
git branch -D update_flake_lock_action
git fetch origin
git checkout update_flake_lock_action
git commit --amend --no-edit
git push origin update_flake_lock_action --force
```

---------

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2024-08-31 07:57:21 +00:00
Pierre Penninckx
f8fdf2f704
more fixes to the backup contract (#281)
This PR irons out the last issues with the backup contract and the
Restic implementation.
I could check it works backing up files to a local folder and to
Backblaze on my server.
2024-08-24 05:37:18 +00:00
Pierre Penninckx
10dea06ec1
Fix backup contract secrets (#280) 2024-08-22 19:48:36 +00:00
Pierre Penninckx
0fa4a42be7
switch all modules to backup block (#279) 2024-08-20 14:33:13 +00:00
ibizaman
6aed5ee6a5 add backup contract 2024-08-20 00:33:26 -07:00
ibizaman
3824e07ae9 fix link in nextcloud service doc 2024-08-12 06:51:24 -07:00
ibizaman
d2a018ceec add docs for vaultwarden service 2024-08-12 06:51:24 -07:00
ibizaman
6b55db7d9c add mount contract to vaultwarden service 2024-08-12 06:51:24 -07:00
ibizaman
0f2f69f7a1 refactor tests to use common blocks 2024-07-16 10:53:29 +02:00
ibizaman
308db5fe6b export all torrent metrics 2024-06-10 22:43:37 -07:00
ibizaman
72818c0d79 bump chunkSize in nextcloud to boost performance for small files
From https://help.nextcloud.com/t/very-slow-sync-for-small-files/11064/13 Not sure it works.
2024-06-10 08:37:45 -07:00
ibizaman
d8ba5f97b8 set ldapExpertUsernameAttr to user_id in nextcloud ldap app
https://github.com/lldap/lldap/pull/907
2024-06-10 08:37:45 -07:00
ibizaman
e6b11a5acb configure nextcloud sso app with same variable 2024-06-10 08:37:45 -07:00
ibizaman
f9cb785cf8 use hardcoded configID for nextcloud LDAP configuration
This makes more sense and is less brittle.
2024-06-10 08:37:45 -07:00
ibizaman
a4c4ee1670 add prometheus deluge exporter 2024-06-09 23:47:31 -07:00
ibizaman
848083dacc break authFile for deluge into user and password attrset 2024-06-09 23:43:46 -07:00
ibizaman
faaa0e2263 bump minimal version of Nextcloud to 28 2024-05-29 15:26:04 -07:00
ibizaman
ebbd19c7fd add vm test for home-assistant 2024-05-27 17:13:05 -07:00
ibizaman
97285e1833 add vm test for vaultwarden 2024-05-27 17:13:05 -07:00
ibizaman
8ebb3af1f0 rename autheliaProtect to vhosts 2024-05-27 17:13:05 -07:00
ibizaman
8ec12338fd make config with secrets correctly generated 2024-05-27 17:13:05 -07:00
Pierre Penninckx
425e511792
flake.lock: Update (#226)
Automated changes by the
[update-flake-lock](https://github.com/DeterminateSystems/update-flake-lock)
GitHub Action.

```
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/b06025f1533a1e07b6db3e75151caa155d1c7eb3?narHash=sha256-qrxvLS888pNJFwJdK%2Bhf1wpRCSQcqA6W5%2BOx202NDa0%3D' (2024-03-19)
  → 'github:nixos/nixpkgs/5672bc9dbf9d88246ddab5ac454e82318d094bb8?narHash=sha256-NLznXB5AOnniUtZsyy/aPWOk8ussTuePp2acb9U%2BISA%3D' (2024-04-16)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/83b68a0e8c94b72cdd0a6e547a14ca7eb1c03616?narHash=sha256-RquCuzxfy4Nr8DPbdp3D/AsbYep21JgQzG8aMH9jJ4A%3D' (2024-03-17)
  → 'github:Mic92/sops-nix/cc535d07cbcdd562bcca418e475c7b1959cefa4b?narHash=sha256-APoDs2GtzVrsE%2BZ9w72qpHzEtEDfuinWcNTN7zhwLxg%3D' (2024-04-15)
• Updated input 'sops-nix/nixpkgs':
    'github:NixOS/nixpkgs/9af9c1c87ed3e3ed271934cb896e0cdd33dae212?narHash=sha256-huQT4Xs0y4EeFKn2BTBVYgEwJSv8SDlm82uWgMnCMmI%3D' (2024-03-15)
  → 'github:NixOS/nixpkgs/a0c9e3aee1000ac2bfb0e5b98c94c946a5d180a9?narHash=sha256-icE1IJE9fHcbDfJ0%2BqWoDdcBXUoZCcIJxME4lMHwvSM%3D' (2024-04-12)
• Updated input 'sops-nix/nixpkgs-stable':
    'github:NixOS/nixpkgs/6dc11d9859d6a18ab0c5e5829a5b8e4810658de3?narHash=sha256-y%2Bl3eH53UlENaYa1lmnCBHusZb1kxBEFd2/c7lDsGpw%3D' (2024-03-16)
  → 'github:NixOS/nixpkgs/c27f3b6d8e29346af16eecc0e9d54b1071eae27e?narHash=sha256-RifMwYuKu5v6x6O65msKDTqKkQ9crGwOB7yr20qMEuE%3D' (2024-04-13)
```

### Running GitHub Actions on this PR

GitHub Actions will not run workflows on pull requests which are opened
by a GitHub Action.

To run GitHub Actions workflows on this PR, run:

```sh
git branch -D update_flake_lock_action
git fetch origin
git checkout update_flake_lock_action
git commit --amend --no-edit
git push origin update_flake_lock_action --force
```

---------

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2024-04-17 16:06:29 -07:00
Pierre Penninckx
ab1bd23b51
fix hledger options (#228) 2024-04-17 09:03:29 -07:00
Pierre Penninckx
26f406db5f
fix arr setup (#224) 2024-04-10 23:52:24 -07:00
Pierre Penninckx
b9db764a8b
Disable auth in arr suite if SSO is enabled (#221) 2024-04-09 07:16:50 -07:00
Pierre Penninckx
5179f7fc90
Add external storage app to Nextcloud (#222) 2024-04-08 22:41:52 -07:00
Pierre Penninckx
482b187621
Fix user in vaulwarden module (#218) 2024-04-02 21:04:10 -07:00
Pierre Penninckx
c75daa23c0
move CI to garnix (#210) 2024-03-19 22:50:41 -07:00
Pierre Penninckx
589e2c936f
add tests for arr services and some more options (#205) 2024-03-13 05:40:32 +00:00
Sivert Sliper
64f9c051b9
Grocy service (#195)
PR to add grocy as a service.

I think LDAP should be [relatively
simple](https://www.reddit.com/r/grocy/comments/18avtb7/sso_tutorial/)
to add, but couldn't find good information on SSO.

Will test this out for a while to make sure it really works before this
can be merged.

---------

Co-authored-by: ibizaman <ibizapeanut@gmail.com>
Co-authored-by: Pierre Penninckx <github@pierre.tiserbox.com>
2024-03-04 01:25:26 +00:00