Commit graph

115 commits

Author SHA1 Message Date
ibizaman
7ff2cfa642 authelia: allow password change 2025-08-25 11:50:06 +02:00
ibizaman
ebd39bbe73 nextcloud: fix ldap and sso integration and add playwright tests 2025-08-25 11:50:06 +02:00
ibizaman
682a01488b postgresql: fix password setup 2025-08-25 10:00:30 +02:00
ibizaman
8221d4fe9a postgresql: update reference to psql binary 2025-08-25 10:00:30 +02:00
ibizaman
5f995e82df add back info into authelia id token 2025-08-19 15:09:37 +02:00
ibizaman
b2c5637cfc add debug output to authelia with mitmdump module 2025-08-19 13:36:46 +02:00
ibizaman
3184015d67 add debug output to lldap with mitmdump module 2025-08-19 13:36:46 +02:00
ibizaman
d824da617c lldap: explain ensure behavior in docs 2025-08-19 13:03:06 +02:00
ibizaman
485e7474c4 lldap: only enforce groups 2025-08-19 00:55:07 +02:00
ibizaman
b8b940e9ff add renamed options for guided migration 2025-08-18 12:57:44 +02:00
Sam Grayson
133ddbbd7b correct broken link typo 2025-08-10 16:47:01 +02:00
ibizaman
c9ee41b1d4 fine grained logging with mitmdump logger addon 2025-08-04 01:22:25 +02:00
ibizaman
9a135523d2 fix link in mitmdump documentation 2025-07-31 23:30:57 +02:00
ibizaman
67c2705f98 add mitmdump block 2025-07-31 23:21:57 +02:00
ibizaman
91580421be add playwright test with ldap for forgejo 2025-07-24 23:12:33 +02:00
ibizaman
12f2b4f49e update lldap patches 2025-07-24 20:41:12 +02:00
ibizaman
b50f45e17e add declarative lldap using secrets contract 2025-07-18 23:51:27 +02:00
ibizaman
41d037206d add documentation for lldap and authelia blocks 2025-07-12 22:50:41 +02:00
ibizaman
13f4064e93 rename ldap block to lldap 2025-07-12 21:47:55 +02:00
ibizaman
9af3f2b942 add extra config param for nginx 2025-06-23 23:40:14 +02:00
Piotr Gaczkowski
d9a149eca2 Fix Grafana SMTP from_name 2025-06-04 00:54:57 +02:00
Eric Ahlberg
95a4f7987e Fix typo in monitoring docs 2025-03-24 21:45:38 +01:00
ibizaman
cf944bee37 add assertion to avoid issue with authelia and ldap 2025-03-17 23:07:21 +01:00
ibizaman
4d1e3930c0 remove support for old postgresql version 2025-01-03 00:40:40 +01:00
ibizaman
2d63ef8e19 enable php-fpm exporter only when needed 2025-01-02 19:17:23 +01:00
ibizaman
16f305b9f4 add alert when certs are close to expiring 2024-12-27 22:54:45 +01:00
ibizaman
0ef061f4d6 add nextcloud dashboard 2024-12-25 13:05:59 +01:00
ibizaman
a784c08761 add domain and hostname labels 2024-12-25 13:05:59 +01:00
Pierre Penninckx
2f4bbdd061
improve documentation (#392)
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-12-05 22:37:45 +00:00
Pierre Penninckx
ab86c6e133
add dashboard for deluge (#389)
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-12-02 22:02:04 +00:00
Pierre Penninckx
bab4b251eb
add default needed for one way backup contracts (#381)
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-11-26 22:32:49 +00:00
Pierre Penninckx
3e63cb2e12
switch databasebackup contract to new contract style (#372)
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-11-26 20:07:36 +00:00
Pierre Penninckx
47dffd2a2f
switch backup contract to new contract style (#367)
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-11-26 19:59:07 +00:00
Pierre Penninckx
ba1e60a45e
rename backup hook attributes (#371)
Co-authored-by: ibizaman <ibizapeanut@gmail.com>
2024-11-26 19:15:36 +00:00
Pierre Penninckx
b3e7552b88
[doc] add forgotten example in sops module documentation (#366) 2024-11-23 21:56:22 +00:00
Pierre Penninckx
b80c840743
have actual implementation for sops secrets (#363) 2024-11-22 23:24:47 +00:00
Pierre Penninckx
5056d203d9
update secret contract and add sops module (#356)
I find these `mkProvider` and `mkRequester` functions really nice.

Also fixes doc generation related to  https://github.com/NixOS/nixpkgs/pull/353513
2024-11-21 12:51:57 -08:00
Pierre Penninckx
a04dca9973
use secrets contract for restic (#349) 2024-11-17 21:12:14 +00:00
Pierre Penninckx
4726593ea9
Do not use activation script for script with dependencies (#348)
The issue with activation script is the order is alphabetical, meaning
the order the script is assembled is not really set in stone.

Here, because the script had a name starting with `restic`, it was ran
before the `sops` secret generation script. And since the restic script
was trying to use the secrets, it failed.

And if the activation script fails, you get a kernel panic.
2024-11-15 21:05:01 +00:00
Pierre Penninckx
431dd058c5
Backup contracts for files and databases (#344)
This PR continues the work started in
https://github.com/ibizaman/selfhostblocks/pull/314

I had to create my own PR since I couldn't add commits on the fork.

---------

Co-authored-by: sivertism <10866270+sivertism@users.noreply.github.com>
2024-11-12 20:40:52 +00:00
ibizaman
a589a9fe00 add contract test for secret contract 2024-10-24 22:27:47 +02:00
ibizaman
b85705ab74 switch authelia to new secrets contract 2024-10-24 22:27:47 +02:00
ibizaman
fa87855ee5 switch jellyfin to new secrets contract
This rabbit hole of a task lead me to:
- Introduce a hardcoded secret module that is a secret provider
  for tests.
- Update LDAP and SSO modules to use the secret contract.
- Refactor the replaceSecrets library function to correctly fail
  when a secret file could not be read.
2024-10-24 22:27:47 +02:00
Pierre Penninckx
b405988e60
fix lldap backup (#323)
closes #319
2024-10-24 21:21:01 +02:00
Pierre Penninckx
5a0ae36c85
update secret contract (#311)
This makes the secret contract better (IMNSHO):

- Improves documentation, explains better the reasoning behind the
contract.
- Makes it easier to create an option implementing the secret contract.
2024-10-01 21:01:00 +00:00
ibizaman
f75a01ee2c revert hotfix for vpn 2024-09-22 00:36:54 -07:00
ibizaman
a262940a81 fix let's encrypt ssl block for host verification 2024-09-21 23:59:10 -07:00
ibizaman
7610097a74 add secret contract and use it in ldap block 2024-09-21 23:57:19 -07:00
ibizaman
f8edf51207 fix issue with openvpn extraArgs after update 2024-09-13 20:40:35 -07:00
ibizaman
253ec980d9 add forgejo service 2024-09-12 13:10:20 -07:00