Commit graph

42 commits

Author SHA1 Message Date
ibizaman
23d3a59172 authelia: update test now that authelia forbids http 2026-05-11 01:27:27 +02:00
ibizaman
0c5116ee21 authelia: add info on secrets length 2026-03-14 23:13:36 +01:00
ibizaman
f485cc60fe homepage: init with dashboard contract 2026-02-24 20:00:36 +01:00
ibizaman
4b2021885b authelia: fix restartUnits service name 2026-01-25 12:22:52 +01:00
ibizaman
6d9831e4f8 authelia: revert do not use dots in systemd service name
The issue is the fqdn is used to setup the nginx virtual host
2026-01-08 21:20:13 +01:00
Piotr Gaczkowski
f17e9885d2 fix: Properly handle Authelia email 2025-12-23 22:33:43 +01:00
Piotr Gaczkowski
f5edf1b339 Update authelia.nix
Fixes #603
2025-12-22 09:01:09 +01:00
ibizaman
1aea0300e3 authelia: fix deprecated env var 2025-12-17 23:21:47 +01:00
ibizaman
a512378553 authelia: do not use dots in systemd service name 2025-12-17 23:21:47 +01:00
ibizaman
c10cab627f mod: use explicit shb argument to pass lib 2025-12-03 22:19:45 +01:00
ibizaman
48802553de chore: format all files 2025-10-28 22:17:00 +01:00
ibizaman
139ceca768 authelia: add extraOidcAuthorizationPolicies option
This is needed for example to only authorize users of a given group to access a service.
Usually, the application itself enforces this but some don't.
2025-10-22 03:33:17 +02:00
ibizaman
6e64c7f8cf mod: merge shb functions into lib 2025-10-15 01:20:00 +02:00
ibizaman
9892f55ae2 mod: make imports explicit and remove system 2025-10-12 00:24:52 +02:00
ibizaman
12721fea39 authelia: add target to wait for 2025-08-25 11:50:06 +02:00
ibizaman
7ff2cfa642 authelia: allow password change 2025-08-25 11:50:06 +02:00
ibizaman
ebd39bbe73 nextcloud: fix ldap and sso integration and add playwright tests 2025-08-25 11:50:06 +02:00
ibizaman
5f995e82df add back info into authelia id token 2025-08-19 15:09:37 +02:00
ibizaman
b2c5637cfc add debug output to authelia with mitmdump module 2025-08-19 13:36:46 +02:00
ibizaman
cf944bee37 add assertion to avoid issue with authelia and ldap 2025-03-17 23:07:21 +01:00
ibizaman
a784c08761 add domain and hostname labels 2024-12-25 13:05:59 +01:00
Pierre Penninckx
5056d203d9
update secret contract and add sops module (#356)
I find these `mkProvider` and `mkRequester` functions really nice.

Also fixes doc generation related to  https://github.com/NixOS/nixpkgs/pull/353513
2024-11-21 12:51:57 -08:00
ibizaman
b85705ab74 switch authelia to new secrets contract 2024-10-24 22:27:47 +02:00
Pierre Penninckx
e5b76e4183
Revert: make sure fox nginx to wait on authelia (#293)
This was not the root cause of Nginx not starting.
The root cause was the DNS server was restarting at the same time as
Nginx and wasn't ready yet.
There is no DNS block yet in Self Host Blocks so the code is removed for
now.
2024-09-02 06:56:02 +00:00
Pierre Penninckx
84e4893665
Make sure fox nginx to wait on authelia (#292) 2024-09-02 06:51:06 +00:00
Pierre Penninckx
d711e59f91
Wait actively on ldap being ready (#286)
Looks like this is needed in the end, other we get into some flaky
situations
2024-09-01 06:36:53 +00:00
Pierre Penninckx
eb791b3019
flake.lock: Update (#244)
Automated changes by the
[update-flake-lock](https://github.com/DeterminateSystems/update-flake-lock)
GitHub Action.

```
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/9ca3f649614213b2aaf5f1e16ec06952fe4c2632?narHash=sha256-7EXDb5WBw%2Bd004Agt%2BJHC/Oyh/KTUglOaQ4MNjBbo5w%3D' (2024-05-27)
  → 'github:nixos/nixpkgs/71e91c409d1e654808b2621f28a327acfdad8dc2?narHash=sha256-GnR7/ibgIH1vhoy8cYdmXE6iyZqKqFxQSVkFgosBh6w%3D' (2024-08-28)
```

### Running GitHub Actions on this PR

GitHub Actions will not run workflows on pull requests which are opened
by a GitHub Action.

To run GitHub Actions workflows on this PR, run:

```sh
git branch -D update_flake_lock_action
git fetch origin
git checkout update_flake_lock_action
git commit --amend --no-edit
git push origin update_flake_lock_action --force
```

---------

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2024-08-31 07:57:21 +00:00
ibizaman
896c376b6d add mount contract to authelia block 2024-08-12 06:51:24 -07:00
ibizaman
7020786c41 add default dummy oidc authelia client to satisfy authelia 2024-05-27 17:13:05 -07:00
ibizaman
8ec12338fd make config with secrets correctly generated 2024-05-27 17:13:05 -07:00
Pierre Penninckx
26f406db5f
fix arr setup (#224) 2024-04-10 23:52:24 -07:00
ibizaman
fa206d0e15 move templating code to lib file 2024-02-29 20:30:47 -08:00
ibizaman
059bfea86a move template function into lib 2024-02-09 21:20:13 -08:00
ibizaman
1cf6d264e4 add declarative sso integration for nextcloud 2024-01-22 16:44:10 -08:00
sivert
8a5f4e3bf2 Combine authelia client YAML's into one YAML file
- Fixes #126
  - Generate a single oidc_clients.yaml to define all clients
  - `public` property of OIDC clients is now a bool (as it should be), not a string.
  - sed pattern changed to allow multiple replacements
2024-01-22 13:50:11 -08:00
ibizaman
adc09acc49 use contract for ssl block 2024-01-19 10:48:10 -08:00
ibizaman
9a5a10a824 add test for authelia 2023-12-11 00:28:30 -08:00
Pierre Penninckx
a63b0a6e2e
switch to nixos-render-docs (#34)
fixes #33
2023-12-04 00:33:16 -08:00
Pierre Penninckx
0014e5c2f7
avoid some impossible states in authelia and nginx 2023-11-30 22:49:34 -08:00
Pierre Penninckx
4a8a7d686c
build docs and deploy to github pages 2023-11-30 10:38:35 -08:00
Pierre Penninckx
52b9233a6c
add postgresql vm test that runs in CI (#19)
Fixes #14 

The tests actually showed a flaw in the implementation, we needed
"password" and not "trust" in the auth file.

Also, having the port defined at the same time as enabling listening for
TCP/IP connection made no sense.
2023-11-23 01:03:33 -08:00
Pierre Penninckx
eae5eade56
distinguish building blocks and provided services
I want to show how composable this project is. For example, you could
just use the Authelia module to add SSO to any service, not just those
provided here.
2023-11-20 22:20:19 -08:00
Renamed from modules/authelia.nix (Browse further)