danvics/selfhostblocks
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1
1092 commits 7 branches 29 tags 13 MiB
Commit graph

199 commits

Author SHA1 Message Date
ibizaman
73f2076000 ssl: fix renewal for domain name without subdomain 2025-12-08 11:39:35 +01:00
ibizaman
248317adb5 doc: fix grammar in monitoring chapter 2025-12-08 11:39:35 +01:00
ibizaman
1105fccc2d ssl: add graphs to dashboard and show logs 2025-12-08 11:39:35 +01:00
ibizaman
79d3782412 ssl: reduce number of redundant alerts 2025-12-08 11:39:35 +01:00
ibizaman
113ca40c5f doc: add links to monitoring dashboard from backup doc 2025-12-08 11:39:35 +01:00
ibizaman
80b4388044 mod: simplify by moving overlay to corresponding module 2025-12-03 22:19:45 +01:00
ibizaman
c10cab627f mod: use explicit shb argument to pass lib 2025-12-03 22:19:45 +01:00
ibizaman
6f92c457a2 monitoring: fix link 2025-12-03 22:19:45 +01:00
ibizaman
e0055e97e9 monitoring: ensure admin group 2025-12-03 22:19:45 +01:00
ibizaman
403fb20c1b tests: remove more implicit imports 2025-11-21 09:52:13 +01:00
ibizaman
1cf6f6a2fe monitoring: add sso integration 2025-11-21 09:52:13 +01:00
ibizaman
583b562ec2 monitoring: fix app name 2025-11-21 09:52:13 +01:00
ibizaman
0071c8120d docs: add monitoring dashboard 2025-11-17 21:58:38 +01:00
ibizaman
29f2248681 forgejo: update deprecated options 2025-11-17 21:58:38 +01:00
ibizaman
aa2622847e monitoring: add late backups alert 2025-11-17 21:58:38 +01:00
ibizaman
f93de0420f monitoring: add backup dashboard 2025-11-17 21:58:38 +01:00
ibizaman
693541e78f monitoring: add backup scheduling 2025-11-17 21:58:38 +01:00
ibizaman
42a8b2eebc monitoring: add logs to scraping job dashboard 2025-11-17 21:58:38 +01:00
ibizaman
e04ea6cb24 monitoring: surround with mkMerge 2025-11-17 21:58:38 +01:00
ibizaman
a875835638 fmt: run formatter 2025-11-01 15:37:58 +01:00
ibizaman
e74e71ccef borgbackup: use backup and databasebackup contracts 2025-11-01 15:19:54 +01:00
ibizaman
08b0b52cfe restic: fix doc section level 2025-11-01 15:19:54 +01:00
ibizaman
f37a9fbb9c monitoring: enable erroneously disabled scrapers 2025-10-29 23:49:07 +01:00
ibizaman
48802553de chore: format all files 2025-10-28 22:17:00 +01:00
ibizaman
f62d2889c1 mod: only import hardcodedsecret from tests 2025-10-25 10:18:12 +02:00
ibizaman
139ceca768 authelia: add extraOidcAuthorizationPolicies option 
This is needed for example to only authorize users of a given group to access a service.
Usually, the application itself enforces this but some don't.
 2025-10-22 03:33:17 +02:00
ibizaman
2cc2ab5195 mod: use more callPackage now that is passes shb lib too 2025-10-15 01:38:35 +02:00
ibizaman
6e64c7f8cf mod: merge shb functions into lib 2025-10-15 01:20:00 +02:00
ibizaman
9892f55ae2 mod: make imports explicit and remove system 2025-10-12 00:24:52 +02:00
ibizaman
b46a227b5b monitoring: add doc on retention time 2025-09-27 21:25:40 +02:00
ibizaman
1c2ff3e381 monitoring: update docs to use secrets contract 2025-09-27 21:25:40 +02:00
ibizaman
771e9758b0 lldap: update deprecated option 2025-09-27 21:25:40 +02:00
ibizaman
b24eed9a86 lib: add toEnvVar function 2025-09-17 10:59:12 +02:00
ibizaman
12721fea39 authelia: add target to wait for 2025-08-25 11:50:06 +02:00
ibizaman
7ff2cfa642 authelia: allow password change 2025-08-25 11:50:06 +02:00
ibizaman
ebd39bbe73 nextcloud: fix ldap and sso integration and add playwright tests 2025-08-25 11:50:06 +02:00
ibizaman
682a01488b postgresql: fix password setup 2025-08-25 10:00:30 +02:00
ibizaman
8221d4fe9a postgresql: update reference to psql binary 2025-08-25 10:00:30 +02:00
ibizaman
5f995e82df add back info into authelia id token 2025-08-19 15:09:37 +02:00
ibizaman
b2c5637cfc add debug output to authelia with mitmdump module 2025-08-19 13:36:46 +02:00
ibizaman
3184015d67 add debug output to lldap with mitmdump module 2025-08-19 13:36:46 +02:00
ibizaman
d824da617c lldap: explain ensure behavior in docs 2025-08-19 13:03:06 +02:00
ibizaman
485e7474c4 lldap: only enforce groups 2025-08-19 00:55:07 +02:00
ibizaman
b8b940e9ff add renamed options for guided migration 2025-08-18 12:57:44 +02:00
Sam Grayson
133ddbbd7b correct broken link typo 2025-08-10 16:47:01 +02:00
ibizaman
c9ee41b1d4 fine grained logging with mitmdump logger addon 2025-08-04 01:22:25 +02:00
ibizaman
9a135523d2 fix link in mitmdump documentation 2025-07-31 23:30:57 +02:00
ibizaman
67c2705f98 add mitmdump block 2025-07-31 23:21:57 +02:00
ibizaman
91580421be add playwright test with ldap for forgejo 2025-07-24 23:12:33 +02:00
ibizaman
12f2b4f49e update lldap patches 2025-07-24 20:41:12 +02:00
ibizaman
b50f45e17e add declarative lldap using secrets contract 2025-07-18 23:51:27 +02:00
ibizaman
41d037206d add documentation for lldap and authelia blocks 2025-07-12 22:50:41 +02:00
ibizaman
13f4064e93 rename ldap block to lldap 2025-07-12 21:47:55 +02:00
ibizaman
9af3f2b942 add extra config param for nginx 2025-06-23 23:40:14 +02:00
Piotr Gaczkowski
d9a149eca2 Fix Grafana SMTP from_name 2025-06-04 00:54:57 +02:00
Eric Ahlberg
95a4f7987e Fix typo in monitoring docs 2025-03-24 21:45:38 +01:00
ibizaman
cf944bee37 add assertion to avoid issue with authelia and ldap 2025-03-17 23:07:21 +01:00
ibizaman
4d1e3930c0 remove support for old postgresql version 2025-01-03 00:40:40 +01:00
ibizaman
2d63ef8e19 enable php-fpm exporter only when needed 2025-01-02 19:17:23 +01:00
ibizaman
16f305b9f4 add alert when certs are close to expiring 2024-12-27 22:54:45 +01:00
ibizaman
0ef061f4d6 add nextcloud dashboard 2024-12-25 13:05:59 +01:00
ibizaman
a784c08761 add domain and hostname labels 2024-12-25 13:05:59 +01:00
Pierre Penninckx
2f4bbdd061
improve documentation (#392) 
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
 2024-12-05 22:37:45 +00:00
Pierre Penninckx
ab86c6e133
add dashboard for deluge (#389) 
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
 2024-12-02 22:02:04 +00:00
Pierre Penninckx
bab4b251eb
add default needed for one way backup contracts (#381) 
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
 2024-11-26 22:32:49 +00:00
Pierre Penninckx
3e63cb2e12
switch databasebackup contract to new contract style (#372) 
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
 2024-11-26 20:07:36 +00:00
Pierre Penninckx
47dffd2a2f
switch backup contract to new contract style (#367) 
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
 2024-11-26 19:59:07 +00:00
Pierre Penninckx
ba1e60a45e
rename backup hook attributes (#371) 
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
 2024-11-26 19:15:36 +00:00
Pierre Penninckx
b3e7552b88
[doc] add forgotten example in sops module documentation (#366) 2024-11-23 21:56:22 +00:00
Pierre Penninckx
b80c840743
have actual implementation for sops secrets (#363) 2024-11-22 23:24:47 +00:00
Pierre Penninckx
5056d203d9
update secret contract and add sops module (#356) 
I find these `mkProvider` and `mkRequester` functions really nice.

Also fixes doc generation related to  https://github.com/NixOS/nixpkgs/pull/353513
 2024-11-21 12:51:57 -08:00
Pierre Penninckx
a04dca9973
use secrets contract for restic (#349) 2024-11-17 21:12:14 +00:00
Pierre Penninckx
4726593ea9
Do not use activation script for script with dependencies (#348) 
The issue with activation script is the order is alphabetical, meaning
the order the script is assembled is not really set in stone.

Here, because the script had a name starting with `restic`, it was ran
before the `sops` secret generation script. And since the restic script
was trying to use the secrets, it failed.

And if the activation script fails, you get a kernel panic.
 2024-11-15 21:05:01 +00:00
Pierre Penninckx
431dd058c5
Backup contracts for files and databases (#344) 
This PR continues the work started in
https://github.com/ibizaman/selfhostblocks/pull/314

I had to create my own PR since I couldn't add commits on the fork.

---------

Co-authored-by: sivertism <10866270+sivertism@users.noreply.github.com>
 2024-11-12 20:40:52 +00:00
ibizaman
a589a9fe00 add contract test for secret contract 2024-10-24 22:27:47 +02:00
ibizaman
b85705ab74 switch authelia to new secrets contract 2024-10-24 22:27:47 +02:00
ibizaman
fa87855ee5 switch jellyfin to new secrets contract 
This rabbit hole of a task lead me to:
- Introduce a hardcoded secret module that is a secret provider
  for tests.
- Update LDAP and SSO modules to use the secret contract.
- Refactor the replaceSecrets library function to correctly fail
  when a secret file could not be read.
 2024-10-24 22:27:47 +02:00
Pierre Penninckx
b405988e60
fix lldap backup (#323) 
closes #319
 2024-10-24 21:21:01 +02:00
Pierre Penninckx
5a0ae36c85
update secret contract (#311) 
This makes the secret contract better (IMNSHO):

- Improves documentation, explains better the reasoning behind the
contract.
- Makes it easier to create an option implementing the secret contract.
 2024-10-01 21:01:00 +00:00
ibizaman
f75a01ee2c revert hotfix for vpn 2024-09-22 00:36:54 -07:00
ibizaman
a262940a81 fix let's encrypt ssl block for host verification 2024-09-21 23:59:10 -07:00
ibizaman
7610097a74 add secret contract and use it in ldap block 2024-09-21 23:57:19 -07:00
ibizaman
f8edf51207 fix issue with openvpn extraArgs after update 2024-09-13 20:40:35 -07:00
ibizaman
253ec980d9 add forgejo service 2024-09-12 13:10:20 -07:00
ibizaman
adbeef3289 reduce alerting time for 5XX error 
It's alerting for too long, even after it recovered.
We'll probably need to something more appropriate than an error budget but it'll do for now.
 2024-09-07 11:06:36 -07:00
ibizaman
ff5a13c6ce fix davfs gid 2024-09-03 09:37:16 -07:00
Pierre Penninckx
e5b76e4183
Revert: make sure fox nginx to wait on authelia (#293) 
This was not the root cause of Nginx not starting.
The root cause was the DNS server was restarting at the same time as
Nginx and wasn't ready yet.
There is no DNS block yet in Self Host Blocks so the code is removed for
now.
 2024-09-02 06:56:02 +00:00
Pierre Penninckx
84e4893665
Make sure fox nginx to wait on authelia (#292) 2024-09-02 06:51:06 +00:00
Pierre Penninckx
04a3a06730
Switch to not deprecated mkPackageOption (#288) 2024-09-02 01:17:38 +00:00
Pierre Penninckx
d711e59f91
Wait actively on ldap being ready (#286) 
Looks like this is needed in the end, other we get into some flaky
situations
 2024-09-01 06:36:53 +00:00
Pierre Penninckx
eb791b3019
flake.lock: Update (#244) 
Automated changes by the
[update-flake-lock](https://github.com/DeterminateSystems/update-flake-lock)
GitHub Action.

```
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/9ca3f649614213b2aaf5f1e16ec06952fe4c2632?narHash=sha256-7EXDb5WBw%2Bd004Agt%2BJHC/Oyh/KTUglOaQ4MNjBbo5w%3D' (2024-05-27)
  → 'github:nixos/nixpkgs/71e91c409d1e654808b2621f28a327acfdad8dc2?narHash=sha256-GnR7/ibgIH1vhoy8cYdmXE6iyZqKqFxQSVkFgosBh6w%3D' (2024-08-28)
```

### Running GitHub Actions on this PR

GitHub Actions will not run workflows on pull requests which are opened
by a GitHub Action.

To run GitHub Actions workflows on this PR, run:

```sh
git branch -D update_flake_lock_action
git fetch origin
git checkout update_flake_lock_action
git commit --amend --no-edit
git push origin update_flake_lock_action --force
```

---------

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
 2024-08-31 07:57:21 +00:00
Pierre Penninckx
1774b61cfe
Make backup cli tool correctly use secrets (#284) 2024-08-29 07:12:45 +00:00
ibizaman
e6c56891e1 still enable rollback tool even for disabled restic instances 2024-08-25 13:07:21 -07:00
ibizaman
a753254c0e add option restic backup args to limit bandwidth usage 2024-08-25 09:21:14 -07:00
Pierre Penninckx
f8fdf2f704
more fixes to the backup contract (#281) 
This PR irons out the last issues with the backup contract and the
Restic implementation.
I could check it works backing up files to a local folder and to
Backblaze on my server.
 2024-08-24 05:37:18 +00:00
Pierre Penninckx
10dea06ec1
Fix backup contract secrets (#280) 2024-08-22 19:48:36 +00:00
Pierre Penninckx
0fa4a42be7
switch all modules to backup block (#279) 2024-08-20 14:33:13 +00:00
ibizaman
6aed5ee6a5 add backup contract 2024-08-20 00:33:26 -07:00
ibizaman
6235b2f414 always restart postgresql service 
For example, it can be killed by systemd-oom but it's such a foundational service that we should
always restart it.
 2024-08-13 03:45:05 +02:00
ibizaman
896c376b6d add mount contract to authelia block 2024-08-12 06:51:24 -07:00