danvics/selfhostblocks
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1
1092 commits 7 branches 29 tags 13 MiB
Commit graph

483 commits

Author SHA1 Message Date
ibizaman
a262940a81 fix let's encrypt ssl block for host verification 2024-09-21 23:59:10 -07:00
ibizaman
7610097a74 add secret contract and use it in ldap block 2024-09-21 23:57:19 -07:00
Pierre Penninckx
7ad3e4c5a4
allow to customize forgejo runner host packages (#304) 2024-09-14 06:56:05 +00:00
ibizaman
f8edf51207 fix issue with openvpn extraArgs after update 2024-09-13 20:40:35 -07:00
ibizaman
253ec980d9 add forgejo service 2024-09-12 13:10:20 -07:00
ibizaman
adbeef3289 reduce alerting time for 5XX error 
It's alerting for too long, even after it recovered.
We'll probably need to something more appropriate than an error budget but it'll do for now.
 2024-09-07 11:06:36 -07:00
ibizaman
ff5a13c6ce fix davfs gid 2024-09-03 09:37:16 -07:00
Pierre Penninckx
3a44530844
apply Nextcloud expensive migrations on service start (#294) 2024-09-03 03:22:53 +00:00
Pierre Penninckx
e5b76e4183
Revert: make sure fox nginx to wait on authelia (#293) 
This was not the root cause of Nginx not starting.
The root cause was the DNS server was restarting at the same time as
Nginx and wasn't ready yet.
There is no DNS block yet in Self Host Blocks so the code is removed for
now.
 2024-09-02 06:56:02 +00:00
Pierre Penninckx
84e4893665
Make sure fox nginx to wait on authelia (#292) 2024-09-02 06:51:06 +00:00
ibizaman
1bd5810a6d apply nextcloud test fix to all configs 2024-09-01 22:15:07 -07:00
ibizaman
35bfb01848 fix nextcloud test when nextcloud is not enabled 2024-09-01 22:10:23 -07:00
Pierre Penninckx
04a3a06730
Switch to not deprecated mkPackageOption (#288) 2024-09-02 01:17:38 +00:00
ibizaman
6da0a4b988 disable nextcloud maintenance mode on service restart 2024-09-01 17:23:04 -07:00
Pierre Penninckx
d711e59f91
Wait actively on ldap being ready (#286) 
Looks like this is needed in the end, other we get into some flaky
situations
 2024-09-01 06:36:53 +00:00
Pierre Penninckx
8db61af6b3
respect stateVersion in vaultwarden (#285) 2024-08-31 09:22:30 +00:00
Pierre Penninckx
eb791b3019
flake.lock: Update (#244) 
Automated changes by the
[update-flake-lock](https://github.com/DeterminateSystems/update-flake-lock)
GitHub Action.

```
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/9ca3f649614213b2aaf5f1e16ec06952fe4c2632?narHash=sha256-7EXDb5WBw%2Bd004Agt%2BJHC/Oyh/KTUglOaQ4MNjBbo5w%3D' (2024-05-27)
  → 'github:nixos/nixpkgs/71e91c409d1e654808b2621f28a327acfdad8dc2?narHash=sha256-GnR7/ibgIH1vhoy8cYdmXE6iyZqKqFxQSVkFgosBh6w%3D' (2024-08-28)
```

### Running GitHub Actions on this PR

GitHub Actions will not run workflows on pull requests which are opened
by a GitHub Action.

To run GitHub Actions workflows on this PR, run:

```sh
git branch -D update_flake_lock_action
git fetch origin
git checkout update_flake_lock_action
git commit --amend --no-edit
git push origin update_flake_lock_action --force
```

---------

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
 2024-08-31 07:57:21 +00:00
Pierre Penninckx
1774b61cfe
Make backup cli tool correctly use secrets (#284) 2024-08-29 07:12:45 +00:00
ibizaman
e6c56891e1 still enable rollback tool even for disabled restic instances 2024-08-25 13:07:21 -07:00
ibizaman
a753254c0e add option restic backup args to limit bandwidth usage 2024-08-25 09:21:14 -07:00
Pierre Penninckx
f8fdf2f704
more fixes to the backup contract (#281) 
This PR irons out the last issues with the backup contract and the
Restic implementation.
I could check it works backing up files to a local folder and to
Backblaze on my server.
 2024-08-24 05:37:18 +00:00
Pierre Penninckx
10dea06ec1
Fix backup contract secrets (#280) 2024-08-22 19:48:36 +00:00
Pierre Penninckx
0fa4a42be7
switch all modules to backup block (#279) 2024-08-20 14:33:13 +00:00
ibizaman
6aed5ee6a5 add backup contract 2024-08-20 00:33:26 -07:00
ibizaman
6235b2f414 always restart postgresql service 
For example, it can be killed by systemd-oom but it's such a foundational service that we should
always restart it.
 2024-08-13 03:45:05 +02:00
ibizaman
3824e07ae9 fix link in nextcloud service doc 2024-08-12 06:51:24 -07:00
ibizaman
d2a018ceec add docs for vaultwarden service 2024-08-12 06:51:24 -07:00
ibizaman
6b55db7d9c add mount contract to vaultwarden service 2024-08-12 06:51:24 -07:00
ibizaman
896c376b6d add mount contract to authelia block 2024-08-12 06:51:24 -07:00
ibizaman
01eb07a6d2 add mount contract to ldap block 2024-08-12 06:51:24 -07:00
ibizaman
56c06b4404 add mount contract implemented by zfs 2024-08-12 06:51:24 -07:00
ibizaman
13ba38a993 do not set serverAliases for dns 
Otherwise, those server aliases take precedence over actual virtual hosts that serve those subdomain.
 2024-08-11 14:59:31 -07:00
ibizaman
6b17ff858e add host provider for ssl letsencrypt block 2024-08-10 19:51:46 -07:00
ibizaman
0f2f69f7a1 refactor tests to use common blocks 2024-07-16 10:53:29 +02:00
ibizaman
308db5fe6b export all torrent metrics 2024-06-10 22:43:37 -07:00
ibizaman
72818c0d79 bump chunkSize in nextcloud to boost performance for small files 
From https://help.nextcloud.com/t/very-slow-sync-for-small-files/11064/13 Not sure it works.
 2024-06-10 08:37:45 -07:00
ibizaman
d8ba5f97b8 set ldapExpertUsernameAttr to user_id in nextcloud ldap app 
https://github.com/lldap/lldap/pull/907
 2024-06-10 08:37:45 -07:00
ibizaman
e6b11a5acb configure nextcloud sso app with same variable 2024-06-10 08:37:45 -07:00
ibizaman
f9cb785cf8 use hardcoded configID for nextcloud LDAP configuration 
This makes more sense and is less brittle.
 2024-06-10 08:37:45 -07:00
ibizaman
a4c4ee1670 add prometheus deluge exporter 2024-06-09 23:47:31 -07:00
ibizaman
848083dacc break authFile for deluge into user and password attrset 2024-06-09 23:43:46 -07:00
ibizaman
faaa0e2263 bump minimal version of Nextcloud to 28 2024-05-29 15:26:04 -07:00
ibizaman
ebbd19c7fd add vm test for home-assistant 2024-05-27 17:13:05 -07:00
ibizaman
97285e1833 add vm test for vaultwarden 2024-05-27 17:13:05 -07:00
ibizaman
8ebb3af1f0 rename autheliaProtect to vhosts 2024-05-27 17:13:05 -07:00
ibizaman
7020786c41 add default dummy oidc authelia client to satisfy authelia 2024-05-27 17:13:05 -07:00
ibizaman
8ec12338fd make config with secrets correctly generated 2024-05-27 17:13:05 -07:00
Pierre Penninckx
dc46ec8eda
Fix prometheus exporter not accessing nvme hard drives (#238) 2024-05-13 09:00:38 -07:00
Pierre Penninckx
222dfa755c
Revert to loki v2 (#230) 
This is needed because v3 requires manual intervention to upgrade
otherwise Loki refuses to start. So until there's a fix, reverting is
the easiest fix.
 2024-04-21 23:07:32 -07:00
Pierre Penninckx
425e511792
flake.lock: Update (#226) 
Automated changes by the
[update-flake-lock](https://github.com/DeterminateSystems/update-flake-lock)
GitHub Action.

```
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/b06025f1533a1e07b6db3e75151caa155d1c7eb3?narHash=sha256-qrxvLS888pNJFwJdK%2Bhf1wpRCSQcqA6W5%2BOx202NDa0%3D' (2024-03-19)
  → 'github:nixos/nixpkgs/5672bc9dbf9d88246ddab5ac454e82318d094bb8?narHash=sha256-NLznXB5AOnniUtZsyy/aPWOk8ussTuePp2acb9U%2BISA%3D' (2024-04-16)
• Updated input 'sops-nix':
    'github:Mic92/sops-nix/83b68a0e8c94b72cdd0a6e547a14ca7eb1c03616?narHash=sha256-RquCuzxfy4Nr8DPbdp3D/AsbYep21JgQzG8aMH9jJ4A%3D' (2024-03-17)
  → 'github:Mic92/sops-nix/cc535d07cbcdd562bcca418e475c7b1959cefa4b?narHash=sha256-APoDs2GtzVrsE%2BZ9w72qpHzEtEDfuinWcNTN7zhwLxg%3D' (2024-04-15)
• Updated input 'sops-nix/nixpkgs':
    'github:NixOS/nixpkgs/9af9c1c87ed3e3ed271934cb896e0cdd33dae212?narHash=sha256-huQT4Xs0y4EeFKn2BTBVYgEwJSv8SDlm82uWgMnCMmI%3D' (2024-03-15)
  → 'github:NixOS/nixpkgs/a0c9e3aee1000ac2bfb0e5b98c94c946a5d180a9?narHash=sha256-icE1IJE9fHcbDfJ0%2BqWoDdcBXUoZCcIJxME4lMHwvSM%3D' (2024-04-12)
• Updated input 'sops-nix/nixpkgs-stable':
    'github:NixOS/nixpkgs/6dc11d9859d6a18ab0c5e5829a5b8e4810658de3?narHash=sha256-y%2Bl3eH53UlENaYa1lmnCBHusZb1kxBEFd2/c7lDsGpw%3D' (2024-03-16)
  → 'github:NixOS/nixpkgs/c27f3b6d8e29346af16eecc0e9d54b1071eae27e?narHash=sha256-RifMwYuKu5v6x6O65msKDTqKkQ9crGwOB7yr20qMEuE%3D' (2024-04-13)
```

### Running GitHub Actions on this PR

GitHub Actions will not run workflows on pull requests which are opened
by a GitHub Action.

To run GitHub Actions workflows on this PR, run:

```sh
git branch -D update_flake_lock_action
git fetch origin
git checkout update_flake_lock_action
git commit --amend --no-edit
git push origin update_flake_lock_action --force
```

---------

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
 2024-04-17 16:06:29 -07:00
Pierre Penninckx
ab1bd23b51
fix hledger options (#228) 2024-04-17 09:03:29 -07:00
Pierre Penninckx
43f19a871a
add contract documentation (#225) 2024-04-14 15:21:20 -07:00
Pierre Penninckx
26f406db5f
fix arr setup (#224) 2024-04-10 23:52:24 -07:00
Pierre Penninckx
b9db764a8b
Disable auth in arr suite if SSO is enabled (#221) 2024-04-09 07:16:50 -07:00
Pierre Penninckx
5179f7fc90
Add external storage app to Nextcloud (#222) 2024-04-08 22:41:52 -07:00
Pierre Penninckx
c488bb5bda
Add scripts to update postgresql (#219) 2024-04-02 22:17:29 -07:00
Pierre Penninckx
482b187621
Fix user in vaulwarden module (#218) 2024-04-02 21:04:10 -07:00
Pierre Penninckx
c75daa23c0
move CI to garnix (#210) 2024-03-19 22:50:41 -07:00
Pierre Penninckx
589e2c936f
add tests for arr services and some more options (#205) 2024-03-13 05:40:32 +00:00
Sivert Sliper
64f9c051b9
Grocy service (#195) 
PR to add grocy as a service.

I think LDAP should be [relatively
simple](https://www.reddit.com/r/grocy/comments/18avtb7/sso_tutorial/)
to add, but couldn't find good information on SSO.

Will test this out for a while to make sure it really works before this
can be merged.

---------

Co-authored-by: ibizaman <ibizapeanut@gmail.com>
Co-authored-by: Pierre Penninckx <github@pierre.tiserbox.com>
 2024-03-04 01:25:26 +00:00
Sivert Sliper
ee68e27f15
Audiobookshelf service (#123) 
Hi,

I tried adding [Audiobookshelf](https://www.audiobookshelf.org/) as a
new service to SHB.

Not sure whether you want this service in SHB at all, but thought I'd
create a PR just in case.

The service runs, but seemingly fails to add an entry to the nginx
config, so it is not reachable. I created the service by basically just
copying deluge and then adapting. Any idea why the nginx subdomain isn't
being created?

The config I used to add this to my SHB server is:

```nix
shb.audiobookshelf = {
  enable = true;
  domain = "sliper.xyz";
  subdomain = "abs";
  dataDir = "audiobookshelf"; #turns out this is actually the working dir of the service (/var/lib/<dataDir>)
  authEndpoint = "https://auth.sliper.xyz";
};
 // ... in shb.authelia.oidcClients
redirect_uris = [ "https://deluge.sliper.xyz" "https://abs.sliper.xyz" ];
```

ps. I also need to fix tabs->spaces. Forgot to set up nvim.

---------

Co-authored-by: sivert <nei@nei.nei>
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
Co-authored-by: Pierre Penninckx <github@pierre.tiserbox.com>
 2024-03-04 01:01:00 +00:00
ibizaman
e80cc0d3aa add vm tests for jellyfin and regroup ldap and sso options 2024-03-02 23:03:49 -08:00
ibizaman
046ae67083 optionally make nextcloud systemd services depend on mount point 2024-02-29 22:16:01 -08:00
ibizaman
8c2373430d fix jellyfin and nextcloud-server after changes to lib 2024-02-29 22:13:30 -08:00
ibizaman
937902a7f0 add section about nextcloud appdata folder 2024-02-29 21:00:55 -08:00
ibizaman
d0d94e61c8 use better defaults for nextcloud preview app 2024-02-29 21:00:55 -08:00
ibizaman
fa206d0e15 move templating code to lib file 2024-02-29 20:30:47 -08:00
ibizaman
5288d5f825 fix link 2024-02-11 20:04:42 -08:00
ibizaman
059bfea86a move template function into lib 2024-02-09 21:20:13 -08:00
ibizaman
0500096b45 remove dependency of jellyfin.nix on sops-nix 
part of #24
 2024-02-07 23:37:47 -08:00
ibizaman
228f7e8b46 remove dependency of deluge.nix on sops-nix 
part of #24
 2024-02-07 23:13:47 -08:00
ibizaman
f56f997307 remove dependency of vpn.nix on sops-nix 
part of #24
 2024-02-07 22:57:58 -08:00
ibizaman
7d0276e9f2 fix some deprecated options 2024-02-07 22:33:25 -08:00
ibizaman
a2921edcbd allow to pick nextcloud package version 
refs #131
 2024-01-30 22:51:34 -08:00
ibizaman
bccd6a1181 add more info for nextcloud 2024-01-28 22:37:30 -08:00
ibizaman
e00a41b086 add group and reloadServices options to ssl block 2024-01-24 22:45:51 -08:00
ibizaman
0bfa15fd3c add extraDomains options for cert generation 
fixes #133
 2024-01-24 18:46:42 -08:00
ibizaman
43beb92ed2 do not create unrelated groups when login in to nextcloud 2024-01-23 22:07:18 -08:00
ibizaman
56dece4190 fix nextcloud openssl path 
I don't remember why I hardcoded this, but the default works fine.
 2024-01-22 23:17:08 -08:00
ibizaman
1cf6d264e4 add declarative sso integration for nextcloud 2024-01-22 16:44:10 -08:00
sivert
8a5f4e3bf2 Combine authelia client YAML's into one YAML file 
- Fixes #126
  - Generate a single oidc_clients.yaml to define all clients
  - `public` property of OIDC clients is now a bool (as it should be), not a string.
  - sed pattern changed to allow multiple replacements
 2024-01-22 13:50:11 -08:00
ibizaman
7e2f76e7f9 improve ssl block 2024-01-20 20:19:44 -08:00
ibizaman
adc09acc49 use contract for ssl block 2024-01-19 10:48:10 -08:00
ibizaman
a5e9af27b5 make home-assistant service work without ldap integration 2024-01-08 00:35:06 -08:00
ibizaman
0a34140e34 add nextcloud integration with ldap to the manual and nextcloud demo. 
refs #17
 2024-01-06 09:48:12 -08:00
ibizaman
4a7e42abaa add declarative configuration of LDAP in Nextcloud 
refs #17
 2024-01-06 00:12:48 -08:00
ibizaman
db6d8f7f38 fix nextcloud apps config 2024-01-05 16:24:43 -08:00
ibizaman
8bd2e047b0 add default for nextcloud apps config 2024-01-05 16:24:43 -08:00
ibizaman
6f28a72035 talk about extraApps in manual 2024-01-05 16:24:43 -08:00
ibizaman
1581f054aa add declarative configuration of nextcloud preview generator app 
fixes #65
 2024-01-05 16:24:43 -08:00
ibizaman
3f83285759 rewrite nextcloud server module manual 2024-01-05 16:24:43 -08:00
ibizaman
021c465fd6 make onlyoffice config a bit nicer 2024-01-05 16:24:43 -08:00
ibizaman
bbe18df58f make onlyoffice app through nix 2024-01-05 16:24:43 -08:00
ibizaman
99f0f51406 move onlyoffice to new apps section 2024-01-05 16:24:43 -08:00
ibizaman
4a1291c075 allow extra apps in Nextcloud 2024-01-05 16:24:43 -08:00
ibizaman
52f8b35252 fix warning in nextcloud 2024-01-04 21:52:29 -08:00
ibizaman
0e635e1a76 add nextcloud vm test 2023-12-30 10:01:41 -08:00
ibizaman
7c9b585b81 fix downloading big files for nextcloud 2023-12-30 00:59:10 -08:00
ibizaman
db405d6b7e expose some deluge settings 2023-12-27 08:09:13 -08:00
ibizaman
d7411a79b7 only enable autheliaProtect in deluge if enabled 2023-12-26 23:14:47 -08:00
ibizaman
7a62b5b89c add usage chapter in the manual 2023-12-25 23:26:50 -08:00
ibizaman
d908ae31c5 add nextcloud manual 2023-12-25 00:51:44 -08:00
ibizaman
40f0f233c2 remove sops file dependency in nextcloud and ssl requirement 
refs #24
 2023-12-24 02:06:25 -08:00
ibizaman
9bcf7650e7 update screenshots 2023-12-17 23:31:33 -08:00
ibizaman
6f71d64257 switch to netdata to pull most of the metrics 2023-12-17 23:31:33 -08:00
ibizaman
036d2b92a5 fix grafana not being able to load dashboards 2023-12-17 23:31:33 -08:00
ibizaman
533d95851b use not hardcoded OIDC secret in jellyfin 2023-12-17 23:22:25 -08:00
ibizaman
77e21eaceb add more options to avoid hardcoding in nextcloud 2023-12-17 23:12:45 -08:00
ibizaman
0bdbb975af split tracing from verbose logging options for nextcloud 2023-12-17 23:09:18 -08:00
ibizaman
318c54e7d3 do not enable onlyoffice for nextcloud by default 2023-12-17 22:55:58 -08:00
ibizaman
e2292de44d can avoid hardcoding secret now 2023-12-11 12:38:06 -08:00
ibizaman
9a5a10a824 add test for authelia 2023-12-11 00:28:30 -08:00
ibizaman
0829792df0 fix deluge backup permissions by adding backup user to media group 2023-12-10 21:32:35 -08:00
ibizaman
da2e1ff0e1 fix storage creation in homeassistant on first run 2023-12-09 10:34:21 -08:00
ibizaman
ca2f7039cc add some sections to block backup chapter 2023-12-08 22:48:06 -08:00
ibizaman
11ab7c5ab5 fix missing headers 2023-12-08 11:52:00 -08:00
ibizaman
49913ca4b6 add manual page for configuring backups 2023-12-08 11:52:00 -08:00
ibizaman
3c9f71da0e allow to stagger backup jobs 2023-12-08 11:13:37 -08:00
ibizaman
c2ac071c72 enable setting performance impact of backup jobs 2023-12-08 11:13:37 -08:00
ibizaman
207b2e44cb split backup configuration into smaller chunks 2023-12-08 11:13:37 -08:00
ibizaman
f417372fdc move monitoring docs close to source 2023-12-08 10:41:15 -08:00
Pierre Penninckx
a63b0a6e2e
switch to nixos-render-docs (#34) 
fixes #33
 2023-12-04 00:33:16 -08:00
ibizaman
0242ae26c4 fix ensure clauses in postgresql 
fixes #35
 2023-12-04 00:29:40 -08:00
Pierre Penninckx
0014e5c2f7
avoid some impossible states in authelia and nginx 2023-11-30 22:49:34 -08:00
Pierre Penninckx
76e27ae7eb
add nixos test for ldap 2023-11-30 22:08:38 -08:00
Pierre Penninckx
0ae7220c06
rename oidcEndpoint option to authEndpoint 2023-11-30 12:48:57 -08:00
Pierre Penninckx
54ce26efce
some docs revamps 2023-11-30 12:06:41 -08:00
Pierre Penninckx
4a8a7d686c
build docs and deploy to github pages 2023-11-30 10:38:35 -08:00
Pierre Penninckx
86e86dc787
remove usage of sops file in ssl.nix 2023-11-29 22:20:21 -08:00
Pierre Penninckx
7d9dedb845
provision grafana datasources and some dashboards (#23) 
fixes #22 

This commit introduces:
- A few more optional options for the monitoring module, in particular
an SMTP option to setup sending alerts with an STMP server.
- 2 required options for adding a secure key for signing and for an
initial admin password. The latter is nice because at least you can
choose securely the initial admin password instead of it being just
"admin", adding a bit more security to the install process.
- Provisioning Grafana with dashboards, datasources, alerts, contact
points and notification policies.
- Documentation for monitoring in
[docs/blocks/monitoring.md](docs/blocks/monitoring.md).
- A NixOS test that makes sure provisioning did go well as expected.
 2023-11-26 09:56:08 -08:00
ibizaman
881af5f111 add more collectors to prometheus node exporter 2023-11-24 20:18:12 -08:00
ibizaman
845017103f automatically cleanup idle connections 
This is to fix a nextcloud bug that leaves idle connections open which eats into the available
postgres connection pool.
 2023-11-24 02:16:49 -08:00
ibizaman
4da060986a fix nextcloud to properly disable debug 2023-11-24 02:16:36 -08:00
Pierre Penninckx
52b9233a6c
add postgresql vm test that runs in CI (#19) 
Fixes #14 

The tests actually showed a flaw in the implementation, we needed
"password" and not "trust" in the auth file.

Also, having the port defined at the same time as enabling listening for
TCP/IP connection made no sense.
 2023-11-23 01:03:33 -08:00
Pierre Penninckx
48eb64043b
enhance nextcloud options a bit 2023-11-20 22:29:00 -08:00
Pierre Penninckx
eae5eade56
distinguish building blocks and provided services 
I want to show how composable this project is. For example, you could
just use the Authelia module to add SSO to any service, not just those
provided here.
 2023-11-20 22:20:19 -08:00
ibizaman
052a805679 skip part of home assistant onboarding because we use LDAP 2023-11-17 23:50:38 -08:00
ibizaman
8728df8732 make local network ip range optional for LDAP 2023-11-17 23:50:38 -08:00
ibizaman
50798a0f91 add allowed tcp ports for nginx 2023-11-17 23:50:38 -08:00
ibizaman
8d08c5b7c0 force ssl for home assistant only if ssl is enabled 2023-11-17 23:50:38 -08:00
ibizaman
39c2c943a1 fix backupCfg option for arr module 2023-11-16 23:55:38 -08:00
ibizaman
7e5a447257 fix tests 2023-11-16 23:55:38 -08:00
ibizaman
9675d69969 use shb nginx module for hledger 2023-11-16 22:46:57 -08:00
ibizaman
d5f53c4604 fix nginx group 2023-11-16 20:43:44 -08:00
ibizaman
890dec78ec add more examples to the readme 2023-11-16 20:43:36 -08:00
ibizaman
f471db4e3a fix deluge additional plugins to take a list of paths to eggs 2023-11-16 12:03:11 -08:00
ibizaman
f4b8be76b6 enable deluge Label plugin if any arr service is enabled 2023-11-16 11:58:45 -08:00
ibizaman
e5110cace6 add xml config generator for radarr 
This is cool but also needed because we now must set the authentication method to "External" for
radarr to be happy with our SSO integration.
 2023-11-15 12:46:46 -08:00
ibizaman
0c399bb835 add debug option for postgresql 2023-11-14 00:16:29 -08:00
ibizaman
62872a1fc1 update tinyproxy options prefix after nixpkgs update 2023-11-14 00:15:43 -08:00
ibizaman
d160d16cc9 really fix vaultwarden authelia config I think 2023-11-08 13:53:32 -08:00
ibizaman
b3cc253fd5 backup data folder for vaultwarden 2023-11-08 13:05:20 -08:00
ibizaman
d45d4a5fb6 do not protect vaultwarden web app 2023-11-08 12:28:34 -08:00
ibizaman
d35b4b4f38 fix webdav field 2023-11-08 12:28:15 -08:00
ibizaman
af71513dcf add more tests to be able to import shb with default config 2023-11-08 12:27:47 -08:00
ibizaman
853a79d9b2 do not rely on sops explicitly for authelia 2023-11-07 00:35:27 -08:00
ibizaman
d0221b53a6 add vaultwarden service 2023-11-06 19:47:31 -08:00
ibizaman
d71e94b0bc allow local peer connections to postgresql 2023-11-06 19:43:00 -08:00
ibizaman
0916d7dcd1 use new postgresql module for authelia 2023-11-05 16:37:50 -08:00
ibizaman
df03ba57e2 use new postgresql module for grafana 2023-11-05 16:34:42 -08:00
ibizaman
77e16c0f76 fix conflicting options in postgresql service 2023-11-05 15:47:13 -08:00
ibizaman
685133ba47 fix postgresql password script when multiple users 2023-11-05 15:42:59 -08:00
ibizaman
a05f9d6942 use correct postgresql option 2023-11-05 04:48:39 -08:00
ibizaman
40522c8540 allow no password for postgresql 2023-11-05 04:44:56 -08:00
ibizaman
cc57b1ced7 add postgresql module with tests 2023-11-05 04:44:56 -08:00
ibizaman
7a30f6bde8 add enable option for backup modules 2023-10-28 13:47:06 -07:00
ibizaman
cb7fb66ee2 add dependencies to nextcloud-cron service 2023-10-28 00:10:50 -07:00
ibizaman
4f74564cb4 add davfs module 2023-10-21 21:41:49 -07:00
ibizaman
8daafad9b7 add loki and promtail for monitoring logs 2023-10-21 13:13:20 -07:00
ibizaman
a21e3f0943 add outgoing interface to deluge 2023-10-18 19:52:35 -07:00
ibizaman
8e7321f6ea fix deluge permissions 2023-10-18 19:52:24 -07:00
ibizaman
ca9882e39c fix wrong spelling 2023-10-17 13:41:33 -07:00
ibizaman
20c2f32d4e use options for ldap ports 2023-10-14 21:17:59 -07:00
ibizaman
ada91bc0aa add loglevel to deluge 2023-10-13 22:39:38 -07:00
ibizaman
ef4bacdf58 allow to download with jackett 2023-10-12 22:49:04 -07:00
ibizaman
5d5cb5c664 add enabled plugins to deluge 2023-10-12 22:34:00 -07:00
ibizaman
d53dba45ea add jackett 2023-10-12 22:23:58 -07:00
ibizaman
c369defef6 fix having multiple vpns by using unique routing table numbers 2023-10-12 13:37:52 -07:00
ibizaman
2a87816161 delay restart for tinyproxy otherwise it fails on openvpn restarts 2023-10-12 13:37:09 -07:00
ibizaman
d62702f092 add more settings to deluge 2023-10-12 13:36:44 -07:00
ibizaman
e5d7240ca1 use variable for acme secret location 2023-09-30 16:47:06 -07:00
ibizaman
3055451ac9 add nodejs as dependency for nextcloud app 2023-09-30 15:51:26 -07:00
ibizaman
237c7c6e82 fix arr backup 2023-09-29 23:19:39 -07:00
ibizaman
82225c63fc tentatively tune postgres 2023-09-27 13:36:29 -07:00
ibizaman
1163204d5c add ffmpeg in path for nextcloud apps 2023-09-27 13:28:10 -07:00
ibizaman
868f28ca68 switch to nextcloud27 2023-09-26 23:34:24 -07:00
ibizaman
e2b69a36f7 fix backup and authelia rules for arr suite 2023-09-26 20:13:08 -07:00
ibizaman
fda0daf6d3 fix arr config 2023-09-25 23:15:36 -07:00
ibizaman
ad6809fc5d export openvpn status for prometheus 2023-09-25 22:56:00 -07:00
ibizaman
d0e3e2a035 add smartctl prometheus exporter 2023-09-25 22:55:41 -07:00
ibizaman
bf0c92a32a fix borgmatic backups 2023-09-25 20:27:35 -07:00
ibizaman
dc712c08fe add arr suite 2023-09-24 13:31:21 -07:00
ibizaman
71610a5415 move authelia nginx protection to nginx module 2023-09-24 11:04:59 -07:00
ibizaman
a9c7e3c3db add deluge and vpn with tinyproxy 2023-09-22 15:41:24 -07:00
ibizaman
1541ccef80 allow to debug nextcloud 2023-09-18 22:41:54 -07:00
ibizaman
455b71237d remove commented line 2023-09-14 22:25:07 -07:00
ibizaman
a971124464 make ssl module more generic 2023-09-14 22:25:07 -07:00
ibizaman
44465c37c2 add sso with authelia for hledger 2023-09-02 15:05:33 -07:00
ibizaman
4e97e2afb6 add openoffice to nextcloud 2023-08-27 22:20:59 -07:00
ibizaman
d41b93df43 only use ldap for home-assistant login 2023-08-25 09:51:20 -07:00
ibizaman
be24e241d7 add scraping of prometheus' own metrics 2023-08-25 09:45:14 -07:00
ibizaman
4116aafcee add option to enable debug logging in grafana 2023-08-25 09:45:14 -07:00
ibizaman
bc8f7b51e2 restart phpfpm nextcloud unit when secret changes 2023-08-25 09:45:14 -07:00
ibizaman
da42bbaa7b remove extra header for grafana that is set later automatically 
This prevented us to access grafana at all through nginx.
 2023-08-13 16:11:23 -07:00
ibizaman
322934c19e make nginx output log in json format 2023-08-13 15:11:34 -07:00
ibizaman
8fbb18a9a2 add notes for nextcloud 2023-08-11 23:30:04 -07:00
ibizaman
253d673188 fix some hsts preload warnings for nextcloud 2023-08-11 21:35:51 -07:00
ibizaman
0244be7ad2 fix some content-security-policy errors in nextcloud 2023-08-11 21:35:27 -07:00
ibizaman
aaeba29a72 fix overwriteprotocol in nextcloud 2023-08-11 16:38:13 -07:00
ibizaman
f1af82968b force ssl everywhere instead of adding the option 2023-08-11 15:53:05 -07:00
ibizaman
831be9197c add options to log debug info in nginx 2023-08-09 20:47:10 -07:00
ibizaman
30a5e8b0e2 add comment about LDAP being manually configured for nextcloud 2023-08-09 20:43:14 -07:00
ibizaman
ec97a20082 add more proxy headers to authelia 2023-08-09 20:43:14 -07:00
ibizaman
56cc74c3ed add rules config to authelia module 2023-08-09 20:43:14 -07:00
ibizaman
5e9f4d1ea3 add SSO for home-assistant 2023-08-09 20:43:14 -07:00
ibizaman
ae6bf01a89 jellyfin SSO config declarative 2023-08-09 20:43:14 -07:00
ibizaman
ee1ea1c838 make jellyfin LDAP config declarative 2023-08-09 20:41:43 -07:00
ibizaman
d02755b47b add authelia as SSO provider 2023-08-09 20:41:33 -07:00
ibizaman
ae8c959bd0 restrict ldap UI to local network only 2023-07-30 17:44:50 -07:00
ibizaman
54a7bbabe8 add systemd node exporter 2023-07-29 22:14:38 -07:00
ibizaman
e78f57df66 tune nextcloud config 2023-07-29 22:13:09 -07:00
ibizaman
924ade019f do not assume location for nextcloud home 2023-07-29 22:12:15 -07:00
ibizaman
331e6eaca8 only backup twice a day 2023-07-22 19:12:15 -07:00
ibizaman
360d3a1159 fix home-assistant backup configuration 2023-07-22 19:11:22 -07:00
ibizaman
bc627afade exclude file from nextcloud backup 2023-07-22 10:37:30 -07:00
ibizaman
88c9fabcb9 add ldap support to home-assistant 2023-07-19 23:19:08 -07:00
ibizaman
4d56e9782a add ldap with web UI thanks to lldap 2023-07-18 22:12:40 -07:00
ibizaman
54d072dcd0 add scraper for jellyfin 2023-07-16 23:36:54 -07:00
ibizaman
d16ef8b82e replace haproxy with nginx as the main reverseproxy 2023-07-16 22:05:12 -07:00
ibizaman
15e2edb4d6 add external_url to home-assistant 2023-07-10 18:36:25 -07:00
ibizaman
97e02fc87c add monitoring 2023-07-10 18:36:25 -07:00
ibizaman
6b9752e04c enable reverseproxy on demand 2023-07-10 18:36:25 -07:00
ibizaman
8761dc2e9d add flake with some modules 2023-07-10 18:36:25 -07:00