ibizaman
80b4388044
mod: simplify by moving overlay to corresponding module
2025-12-03 22:19:45 +01:00
ibizaman
c10cab627f
mod: use explicit shb argument to pass lib
2025-12-03 22:19:45 +01:00
ibizaman
34e54408f0
nextcloud: only setup php-fpm exporter if nextcloud is enabled
2025-12-03 22:19:45 +01:00
ibizaman
6f92c457a2
monitoring: fix link
2025-12-03 22:19:45 +01:00
ibizaman
e0055e97e9
monitoring: ensure admin group
2025-12-03 22:19:45 +01:00
sivert
d655655e0c
#587 Implement SHB module for paperless service
2025-11-24 23:01:46 +01:00
ibizaman
403fb20c1b
tests: remove more implicit imports
2025-11-21 09:52:13 +01:00
ibizaman
1cf6f6a2fe
monitoring: add sso integration
2025-11-21 09:52:13 +01:00
ibizaman
9677691b2d
docs: use better names for secrets
2025-11-21 09:52:13 +01:00
ibizaman
583b562ec2
monitoring: fix app name
2025-11-21 09:52:13 +01:00
ibizaman
061c194b1b
docs: remove misleading comment
2025-11-21 09:52:13 +01:00
ibizaman
0071c8120d
docs: add monitoring dashboard
2025-11-17 21:58:38 +01:00
ibizaman
29f2248681
forgejo: update deprecated options
2025-11-17 21:58:38 +01:00
ibizaman
bd286e6423
karakeep: update deprecated options
2025-11-17 21:58:38 +01:00
ibizaman
aa2622847e
monitoring: add late backups alert
2025-11-17 21:58:38 +01:00
ibizaman
f93de0420f
monitoring: add backup dashboard
2025-11-17 21:58:38 +01:00
ibizaman
693541e78f
monitoring: add backup scheduling
2025-11-17 21:58:38 +01:00
ibizaman
42a8b2eebc
monitoring: add logs to scraping job dashboard
2025-11-17 21:58:38 +01:00
ibizaman
e04ea6cb24
monitoring: surround with mkMerge
2025-11-17 21:58:38 +01:00
sivert
6e2cf2d035
#585 Immich: allow large uploads from mobile app
2025-11-15 20:48:52 +01:00
sivert
5287f42316
#583 Immich: add authelia bypass for mobile app
...
Adds bypasses for /api and /.well-known/immich so that the mobile app
authentication works.
2025-11-12 12:36:07 +01:00
ibizaman
a875835638
fmt: run formatter
2025-11-01 15:37:58 +01:00
ibizaman
e74e71ccef
borgbackup: use backup and databasebackup contracts
2025-11-01 15:19:54 +01:00
ibizaman
08b0b52cfe
restic: fix doc section level
2025-11-01 15:19:54 +01:00
ibizaman
f37a9fbb9c
monitoring: enable erroneously disabled scrapers
2025-10-29 23:49:07 +01:00
ibizaman
48802553de
chore: format all files
2025-10-28 22:17:00 +01:00
ibizaman
f62d2889c1
mod: only import hardcodedsecret from tests
2025-10-25 10:18:12 +02:00
ibizaman
5022bb5886
karakeep: fix meilisearch secret
2025-10-24 02:15:22 +02:00
ibizaman
6b7a6c6748
karakeep: configure meilisearch with master key and auto update
2025-10-24 01:54:26 +02:00
ibizaman
7ebe421fa0
nextcloud: bump default version from 30 to 31
2025-10-23 03:05:12 +02:00
ibizaman
63b7b09a0f
karakeep: init
2025-10-22 03:33:17 +02:00
ibizaman
139ceca768
authelia: add extraOidcAuthorizationPolicies option
...
This is needed for example to only authorize users of a given group to access a service.
Usually, the application itself enforces this but some don't.
2025-10-22 03:33:17 +02:00
ibizaman
2cc2ab5195
mod: use more callPackage now that is passes shb lib too
2025-10-15 01:38:35 +02:00
ibizaman
6e64c7f8cf
mod: merge shb functions into lib
2025-10-15 01:20:00 +02:00
ibizaman
283e12d87d
test: merge functions into lib and set backdoor everywhere
2025-10-15 01:20:00 +02:00
ibizaman
9892f55ae2
mod: make imports explicit and remove system
2025-10-12 00:24:52 +02:00
ibizaman
6d0ee7494f
nextcloud: allow to set sso integration without ldap
2025-10-09 02:04:20 +02:00
ibizaman
a536ee141e
open-webui: do not login when not belonging to user or admin group
2025-10-09 02:04:20 +02:00
ibizaman
969630c22b
revert added tests
...
This reverts commit ffa918aec6
2025-10-05 00:08:32 +02:00
ibizaman
ffa918aec6
tests: assert user with unknown group cannot login with sso or ldap
2025-10-04 23:52:14 +02:00
ibizaman
01d8f735ae
open-webui: show how to clone a secret in the docs
2025-10-04 23:24:23 +02:00
ibizaman
b840c404ab
open-webui: fix giving environment to the upstream service
2025-10-04 23:24:23 +02:00
ibizaman
f938528ba6
open-webui: add missing authorization_policy
2025-09-27 22:44:15 +02:00
ibizaman
32d643d13f
open-webui: fix documentation
2025-09-27 22:06:43 +02:00
ibizaman
02b73d2dce
open-webui: init
2025-09-27 21:25:40 +02:00
ibizaman
b46a227b5b
monitoring: add doc on retention time
2025-09-27 21:25:40 +02:00
ibizaman
1c2ff3e381
monitoring: update docs to use secrets contract
2025-09-27 21:25:40 +02:00
ibizaman
771e9758b0
lldap: update deprecated option
2025-09-27 21:25:40 +02:00
ibizaman
c0ab22eebd
pinchflat: update docs
2025-09-27 21:25:40 +02:00
ibizaman
c6ad91fb35
pinchflat: use temp dir to store secret
2025-09-27 21:25:40 +02:00
sivert
2f785919d9
#100 Immich service
...
- Declarative SSO setup via json config file
- roleClaim via LDAP groups to automatically set admin privileges
- SSO tested manually, but not yet in playwright test
- Storage quota claim not yet implemented
- Authelia rule prevents access by non-members of
userGroup/adminUserGroup
2025-09-20 14:43:38 +02:00
ibizaman
6f74d4c56c
docs: fix typos in forgejo documentation
2025-09-17 10:59:12 +02:00
ibizaman
98b4cc32b6
pinchflat: init
2025-09-17 10:59:12 +02:00
ibizaman
b24eed9a86
lib: add toEnvVar function
2025-09-17 10:59:12 +02:00
ibizaman
6f27de81d2
forgejo: clean backup dumps
...
This assumes the dumps are moved elsewhere.
2025-09-09 17:03:30 +02:00
ibizaman
95873d84e9
nextcloud: fix permission on nextcloud server
...
nextcloud-occ is a wrapper around systemd-run so we must be root to run it.
2025-09-02 00:20:55 +02:00
sivert
ef99755ad9
Added role claim to Audiobookshelf's OIDC client config
2025-08-31 19:14:58 +02:00
ibizaman
12721fea39
authelia: add target to wait for
2025-08-25 11:50:06 +02:00
ibizaman
7ff2cfa642
authelia: allow password change
2025-08-25 11:50:06 +02:00
ibizaman
ebd39bbe73
nextcloud: fix ldap and sso integration and add playwright tests
2025-08-25 11:50:06 +02:00
ibizaman
682a01488b
postgresql: fix password setup
2025-08-25 10:00:30 +02:00
ibizaman
60039df698
homeassistant: fix wyoming build with latest nixpkgs
2025-08-25 10:00:30 +02:00
ibizaman
8221d4fe9a
postgresql: update reference to psql binary
2025-08-25 10:00:30 +02:00
ibizaman
5f995e82df
add back info into authelia id token
2025-08-19 15:09:37 +02:00
ibizaman
b2c5637cfc
add debug output to authelia with mitmdump module
2025-08-19 13:36:46 +02:00
ibizaman
3184015d67
add debug output to lldap with mitmdump module
2025-08-19 13:36:46 +02:00
ibizaman
d824da617c
lldap: explain ensure behavior in docs
2025-08-19 13:03:06 +02:00
ibizaman
485e7474c4
lldap: only enforce groups
2025-08-19 00:55:07 +02:00
sivert
b4b70b175e
Update SSO setup for Audiobookshelf
...
More or less copied from jellyfin.
2025-08-18 23:22:04 +02:00
ibizaman
b8b940e9ff
add renamed options for guided migration
2025-08-18 12:57:44 +02:00
Sam Grayson
133ddbbd7b
correct broken link typo
2025-08-10 16:47:01 +02:00
ibizaman
c9ee41b1d4
fine grained logging with mitmdump logger addon
2025-08-04 01:22:25 +02:00
ibizaman
9a135523d2
fix link in mitmdump documentation
2025-07-31 23:30:57 +02:00
ibizaman
67c2705f98
add mitmdump block
2025-07-31 23:21:57 +02:00
ibizaman
91580421be
add playwright test with ldap for forgejo
2025-07-24 23:12:33 +02:00
ibizaman
12f2b4f49e
update lldap patches
2025-07-24 20:41:12 +02:00
ibizaman
b50f45e17e
add declarative lldap using secrets contract
2025-07-18 23:51:27 +02:00
ibizaman
af8e8bf582
expose fine grained modules and overlay
2025-07-14 00:41:37 +02:00
ibizaman
d78d0912ac
add documentation for jellyfin
2025-07-12 23:11:02 +02:00
ibizaman
41d037206d
add documentation for lldap and authelia blocks
2025-07-12 22:50:41 +02:00
ibizaman
13f4064e93
rename ldap block to lldap
2025-07-12 21:47:55 +02:00
ibizaman
0648b8a13c
fix urls in documentation
2025-07-12 21:29:02 +02:00
ibizaman
82977bd239
declarative jellyfin setup with tests
2025-07-12 00:01:41 +02:00
ibizaman
1ec2c11009
allow to choose jellyfin port
2025-07-12 00:01:41 +02:00
ibizaman
38dfb0fd0b
reference dataDir in jellyfin module
2025-07-12 00:01:41 +02:00
ibizaman
b603156930
add debug logging option to jellyfin
2025-07-12 00:01:41 +02:00
ibizaman
94474145be
fix redirect uri for jellyfin
2025-07-12 00:01:41 +02:00
ibizaman
7f4c107949
inherit types in jellyfin module
2025-07-12 00:01:41 +02:00
ibizaman
53dde94d98
explicitly disable memories app in nextcloud
...
Until https://github.com/ibizaman/selfhostblocks/issues/476 is fixed
2025-06-25 00:21:27 +02:00
ibizaman
56e837aaa0
fix sso setup for nextcloud
...
We need to switch to a systemd service running before nextcloud-setup
because the secret file is now loaded with LoadCredential, which
means it must exist before the systemd service starts
2025-06-24 23:03:17 +02:00
ibizaman
574a566b97
fix voice test for home-assistant
2025-06-24 23:03:17 +02:00
ibizaman
5a1e9809bc
fix playwright test for home-assistant
2025-06-24 23:03:17 +02:00
ibizaman
4fbdff8b6d
remove unsupported nextcloud version
2025-06-24 23:03:17 +02:00
ibizaman
9af3f2b942
add extra config param for nginx
2025-06-23 23:40:14 +02:00
ibizaman
4047321f81
add wip documentation for arr service
2025-06-09 00:31:00 +02:00
ibizaman
7dd7f41622
add documentation for home-assistant
2025-06-09 00:31:00 +02:00
ibizaman
1ce11b99ad
fix typos in forgejo manual
2025-06-09 00:31:00 +02:00
Armin Fröhlich
1d0b49f959
nextcloud-server externalStorage.userLocalMount config existing check
...
use `--output=json` and jq to check for existence of mount
2025-06-08 10:59:26 +02:00
Piotr Gaczkowski
d9a149eca2
Fix Grafana SMTP from_name
2025-06-04 00:54:57 +02:00
ibizaman
ad33980d9a
fix jellyfin SSO plugin
2025-04-09 22:53:26 +02:00
Eric Ahlberg
95a4f7987e
Fix typo in monitoring docs
2025-03-24 21:45:38 +01:00
ibizaman
c7a915a9a6
fix home-assistant basic login test
2025-03-19 16:40:11 +01:00
ibizaman
e3a03c5df6
default version of nextcloud is now 29
2025-03-19 16:40:11 +01:00
ibizaman
543f9540bd
add assertion to avoid issue with sso without ssl
2025-03-17 23:07:21 +01:00
ibizaman
cf944bee37
add assertion to avoid issue with authelia and ldap
2025-03-17 23:07:21 +01:00
ibizaman
0c64452d07
add playwright test for home-assistant
2025-02-12 00:18:10 +01:00
ibizaman
5a6be171b3
add option to add extra args to hledger
2025-02-09 17:37:45 +01:00
ibizaman
82426a4f1f
add playwright test for grocy
2025-01-31 22:39:30 +01:00
ibizaman
d13ed1c0ef
update forgejo documentation
2025-01-26 23:04:24 +01:00
ibizaman
d5293825e9
add option to create forgejo users declaratively
2025-01-26 22:39:27 +01:00
ibizaman
2c713ae9ad
add playwright test for forgejo
2025-01-26 22:39:27 +01:00
ibizaman
441907b134
refactor base module in tests
2025-01-23 21:14:50 +01:00
ibizaman
5c36deccae
fix internal url for voice assistant
2025-01-16 20:40:47 +01:00
ibizaman
af123bc52d
make nextcloud create external storage
2025-01-16 20:23:26 +01:00
ibizaman
bf73cb69a4
add documentation for nextcloud memories and recognize apps
2025-01-10 00:00:05 +01:00
ibizaman
83a3d54cf7
add recognize nextcloud app
2025-01-09 23:23:32 +01:00
ibizaman
3a1f94b596
add memories nextcloud app
2025-01-09 23:23:32 +01:00
ibizaman
4d1e3930c0
remove support for old postgresql version
2025-01-03 00:40:40 +01:00
ibizaman
2d63ef8e19
enable php-fpm exporter only when needed
2025-01-02 19:17:23 +01:00
ibizaman
16f305b9f4
add alert when certs are close to expiring
2024-12-27 22:54:45 +01:00
ibizaman
0ef061f4d6
add nextcloud dashboard
2024-12-25 13:05:59 +01:00
ibizaman
538c0a08cd
fix phpfpm prometheus exporter
2024-12-25 13:05:59 +01:00
ibizaman
a784c08761
add domain and hostname labels
2024-12-25 13:05:59 +01:00
ibizaman
9a7bcd374b
add phpfpm prometheus exporter
2024-12-23 01:20:05 +01:00
ibizaman
ab6de8de90
fix nextcloud ldap test
2024-12-17 21:57:20 +01:00
ibizaman
a8b29b243c
add voice option to home-assistant
2024-12-17 21:57:20 +01:00
Pierre Penninckx
2f4bbdd061
improve documentation ( #392 )
...
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-12-05 22:37:45 +00:00
Pierre Penninckx
ab86c6e133
add dashboard for deluge ( #389 )
...
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-12-02 22:02:04 +00:00
Pierre Penninckx
30aa5dcc11
fix modules using backup contract ( #386 )
...
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-11-30 01:07:08 +00:00
Pierre Penninckx
34c4b75871
add test for all modules using backup contract ( #383 )
...
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-11-28 21:17:14 +00:00
Pierre Penninckx
bab4b251eb
add default needed for one way backup contracts ( #381 )
...
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-11-26 22:32:49 +00:00
Pierre Penninckx
3e63cb2e12
switch databasebackup contract to new contract style ( #372 )
...
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-11-26 20:07:36 +00:00
Pierre Penninckx
47dffd2a2f
switch backup contract to new contract style ( #367 )
...
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-11-26 19:59:07 +00:00
Pierre Penninckx
ba1e60a45e
rename backup hook attributes ( #371 )
...
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-11-26 19:15:36 +00:00
Pierre Penninckx
b3e7552b88
[doc] add forgotten example in sops module documentation ( #366 )
2024-11-23 21:56:22 +00:00
Pierre Penninckx
dde0d49a84
improve contract documentation ( #365 )
2024-11-23 21:34:26 +00:00
Pierre Penninckx
b80c840743
have actual implementation for sops secrets ( #363 )
2024-11-22 23:24:47 +00:00
Pierre Penninckx
9ecbbde35a
Update remaining services to secret contract ( #358 )
2024-11-21 13:45:35 -08:00
Pierre Penninckx
5056d203d9
update secret contract and add sops module ( #356 )
...
I find these `mkProvider` and `mkRequester` functions really nice.
Also fixes doc generation related to https://github.com/NixOS/nixpkgs/pull/353513
2024-11-21 12:51:57 -08:00
Pierre Penninckx
a04dca9973
use secrets contract for restic ( #349 )
2024-11-17 21:12:14 +00:00
Pierre Penninckx
4726593ea9
Do not use activation script for script with dependencies ( #348 )
...
The issue with activation script is the order is alphabetical, meaning
the order the script is assembled is not really set in stone.
Here, because the script had a name starting with `restic`, it was ran
before the `sops` secret generation script. And since the restic script
was trying to use the secrets, it failed.
And if the activation script fails, you get a kernel panic.
2024-11-15 21:05:01 +00:00
Pierre Penninckx
442c948a1a
more contracts usage in Nextcloud and docs enhancement ( #345 )
2024-11-13 21:43:12 +00:00
Pierre Penninckx
431dd058c5
Backup contracts for files and databases ( #344 )
...
This PR continues the work started in
https://github.com/ibizaman/selfhostblocks/pull/314
I had to create my own PR since I couldn't add commits on the fork.
---------
Co-authored-by: sivertism <10866270+sivertism@users.noreply.github.com>
2024-11-12 20:40:52 +00:00
ibizaman
a589a9fe00
add contract test for secret contract
2024-10-24 22:27:47 +02:00
ibizaman
b134abeb6d
switch forgejo to new secrets contract
2024-10-24 22:27:47 +02:00
ibizaman
b85705ab74
switch authelia to new secrets contract
2024-10-24 22:27:47 +02:00
ibizaman
fa87855ee5
switch jellyfin to new secrets contract
...
This rabbit hole of a task lead me to:
- Introduce a hardcoded secret module that is a secret provider
for tests.
- Update LDAP and SSO modules to use the secret contract.
- Refactor the replaceSecrets library function to correctly fail
when a secret file could not be read.
2024-10-24 22:27:47 +02:00
Pierre Penninckx
b405988e60
fix lldap backup ( #323 )
...
closes #319
2024-10-24 21:21:01 +02:00
Pierre Penninckx
5a0ae36c85
update secret contract ( #311 )
...
This makes the secret contract better (IMNSHO):
- Improves documentation, explains better the reasoning behind the
contract.
- Makes it easier to create an option implementing the secret contract.
2024-10-01 21:01:00 +00:00
ibizaman
f75a01ee2c
revert hotfix for vpn
2024-09-22 00:36:54 -07:00
