Commit graph

439 commits

Author SHA1 Message Date
ibizaman
de013ce302 arr: bypass authentication for readarr when sso is enabled 2026-02-24 20:00:36 +01:00
ibizaman
6fb2250669 arr: make arr stack declare ldap groups 2026-02-24 20:00:36 +01:00
ibizaman
0d2a7c315f arr: add declarative api key 2026-02-24 20:00:36 +01:00
sitrius
70bf331c6a refactor: use cfg'.dataDir directly for consistency and add missing bazarr dataDir
- Replace shb.arr.<app>.dataDir with cfg'.dataDir for direct access
- Add missing dataDir configuration for bazarr service
- Update all resultPath references to use cfg'.dataDir
2026-02-22 10:04:13 +01:00
sitrius
5da47a77c7 fix: use configurable dataDir paths in arr stack and fix sops.secret references
- Replace hardcoded /var/lib/<app> paths with shb.arr.<app>.dataDir in arr.nix
- Fix bazarr config path in test to use cfg.dataDir
- Correct shb.sops.secrets → shb.sops.secret in documentation files
2026-02-22 10:04:13 +01:00
sivert
62ea06e57c Added Immich Public Proxy service for publically sharing photos
Requests to /share/* are optionally redirected to Immich Public Proxy
for public access without going through Authelia, and without exposing
the whole Immich service.

Fixes #656
2026-02-21 18:31:32 +01:00
ibizaman
1392295172 mailserver: update to follow nixpkgs 2026-02-02 12:47:33 +01:00
Cody Wright
09634f4530 fix: add OIDC scopes to Jellyfin service
Also adds <DisabledPushedAuthorization>true</DisablePushedAuthorization>, as
otherwise I get "Error preparing login: Unauthorized - Failed to push
authorization parameters"
2026-02-02 08:14:21 +01:00
ibizaman
aeff324fcf jellyfin: update jellyfin cli for 10.11.6 2026-02-02 08:14:21 +01:00
ibizaman
3f7e6852ce forgejo: update deprecated package 2026-02-02 08:14:21 +01:00
ibizaman
f39f0bd9bf mitmdump: use systemd-python after systemd got deprecated 2026-02-02 08:14:21 +01:00
ibizaman
7b58458270 nit: run linter after update 2026-02-02 08:14:21 +01:00
ibizaman
4b2021885b authelia: fix restartUnits service name 2026-01-25 12:22:52 +01:00
ibizaman
c28e2ae81c restic: fix restartUnits service name 2026-01-25 12:22:52 +01:00
ibizaman
a1b8fc758a mailserver: separate backup for dkim as it uses other user 2026-01-25 12:11:02 +01:00
ibizaman
6a74419271 monitoring: move dashboards into related modules 2026-01-22 12:07:58 +01:00
ibizaman
7787957488 monitoring: add module option to add dashboards to grafana 2026-01-22 12:07:58 +01:00
ibizaman
ef19e76b97 mailserver: init 2026-01-18 22:06:03 +01:00
ibizaman
cac0a5fbf9 nextcloud: accept users only part of the admin group 2026-01-12 09:50:31 +01:00
ibizaman
896246a187 forgejo: accept users only part of the admin group 2026-01-12 09:50:31 +01:00
ibizaman
a584decd52 nextcloud: test for all supported versions 2026-01-11 23:16:55 +01:00
ibizaman
78b5e59830 jellyfin: disable other plugin version 2026-01-11 22:17:37 +01:00
ibizaman
6ffa9127e2 jellyfin: move function to create plugins into lib 2026-01-11 22:17:37 +01:00
ibizaman
f39865391e doc: increase indentation for some firefly-iii subsections 2026-01-11 22:17:37 +01:00
ibizaman
f19d14c509 jellyfin: append version to plugin name 2026-01-10 19:17:50 +01:00
ibizaman
a5b9a62f73 jellyfin: declarative plugins, ldap and sso 2026-01-10 18:18:43 +01:00
ibizaman
6d9831e4f8 authelia: revert do not use dots in systemd service name
The issue is the fqdn is used to setup the nginx virtual host
2026-01-08 21:20:13 +01:00
sivert
e3ed7cd976 firefly-iii: allow admin group access 2026-01-08 20:22:18 +01:00
Piotr Gaczkowski
7ceb03dd78 Update nextcloud-server.nix 2026-01-07 23:36:29 +01:00
ibizaman
3b9c1622e1 firefly-iii: also add sso to data importer 2026-01-07 22:07:32 +01:00
ibizaman
9152a082bf firefly-iii: add info about data importer in the doc preamble 2025-12-31 09:09:39 +01:00
ibizaman
ffb34bb6bc firefly-iii: init 2025-12-31 09:00:23 +01:00
ibizaman
0d47a24342 nginx: nit change null comparison 2025-12-30 09:49:31 +01:00
ibizaman
50877bfe4c nginx: add phpForwardAuth 2025-12-30 09:49:31 +01:00
ibizaman
edce2b26ad nginx: allow null upstream option 2025-12-30 09:49:31 +01:00
ibizaman
f48048a4f6 nginx: add documentation 2025-12-30 09:49:31 +01:00
ibizaman
f204c98230 postgresql: add usage documentation 2025-12-29 23:26:30 +01:00
ibizaman
7c457c7226 postgresql: fix setting password for username with special chars 2025-12-29 23:26:30 +01:00
ibizaman
21bf3dad20 jellyfin: add instructions about installing plugins 2025-12-29 23:04:36 +01:00
ibizaman
7c260a0b85 nextcloud: fix option documentation 2025-12-29 23:04:36 +01:00
ibizaman
a4144d6cf8 monitoring: try late backup rule without false positive 2025-12-26 22:45:09 +01:00
Piotr Gaczkowski
f17e9885d2 fix: Properly handle Authelia email 2025-12-23 22:33:43 +01:00
Piotr Gaczkowski
f5edf1b339 Update authelia.nix
Fixes #603
2025-12-22 09:01:09 +01:00
ibizaman
0c1d5ca455 forgejo: use secrets contract for smtp password 2025-12-17 23:21:47 +01:00
ibizaman
328a27d89e monitoring: do not alert of all backups succeed 2025-12-17 23:21:47 +01:00
ibizaman
1aea0300e3 authelia: fix deprecated env var 2025-12-17 23:21:47 +01:00
ibizaman
a512378553 authelia: do not use dots in systemd service name 2025-12-17 23:21:47 +01:00
ibizaman
e2f5ffb8d2 ssl: add assertion to catch duplicate domain names 2025-12-08 11:39:35 +01:00
ibizaman
8acea12e8a backup: avoid erroneous templating in alert name 2025-12-08 11:39:35 +01:00
ibizaman
21d0cc11d0 ssl: update documentation 2025-12-08 11:39:35 +01:00