danvics/selfhostblocks
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1
857 commits 7 branches 29 tags 13 MiB
Commit graph

857 commits

This branch
This branch
All branches
Author SHA1 Message Date
ibizaman
f582f4ed5a bump to v0.5.1 2025-10-22 23:11:28 +02:00
ibizaman
79197592aa karakeep: add doc to build output 2025-10-22 21:25:27 +02:00
ibizaman
63b7b09a0f karakeep: init 2025-10-22 03:33:17 +02:00
ibizaman
139ceca768 authelia: add extraOidcAuthorizationPolicies option 
This is needed for example to only authorize users of a given group to access a service.
Usually, the application itself enforces this but some don't.
 2025-10-22 03:33:17 +02:00
ibizaman
5b40cf3707 tests: wait automatically on authelia and lldap to start 
I had issues with race conditions happening where authelia didn't start yet
when the test script was already testing the integration.
 2025-10-22 03:33:17 +02:00
ibizaman
0822ed680f doc: move implementation guide under contributing 2025-10-15 01:56:46 +02:00
ibizaman
2cc2ab5195 mod: use more callPackage now that is passes shb lib too 2025-10-15 01:38:35 +02:00
ibizaman
6e64c7f8cf mod: merge shb functions into lib 2025-10-15 01:20:00 +02:00
ibizaman
283e12d87d test: merge functions into lib and set backdoor everywhere 2025-10-15 01:20:00 +02:00
ibizaman
9892f55ae2 mod: make imports explicit and remove system 2025-10-12 00:24:52 +02:00
ibizaman
bd0bd713fd test: remove some tests that are annoying 2025-10-12 00:24:52 +02:00
ibizaman
3de3dad405 tests: assert user with unknown group cannot login with sso or ldap 2025-10-09 02:04:20 +02:00
ibizaman
9fc3df8e10 ci: remove unneeded args since they get inherited from nix config 2025-10-09 02:04:20 +02:00
ibizaman
e2b13aa1d8 ci: always upload playwright trace 2025-10-09 02:04:20 +02:00
ibizaman
6d0ee7494f nextcloud: allow to set sso integration without ldap 2025-10-09 02:04:20 +02:00
ibizaman
a536ee141e open-webui: do not login when not belonging to user or admin group 2025-10-09 02:04:20 +02:00
ibizaman
81dc4f280d switch to cachix nix installer 
The determinate one is deprecating the installation of the official nix.
 2025-10-08 12:15:34 +02:00
ibizaman
969630c22b revert added tests 
This reverts commit ffa918aec6.
It was merged incorrectly because I tricked the tests to succeed by accident.
 2025-10-05 00:08:32 +02:00
ibizaman
56b937741a debug 2025-10-04 23:52:14 +02:00
ibizaman
1f38d42f19 open-webui: fix test in ci 2025-10-04 23:52:14 +02:00
ibizaman
b6b23541a0 ci: debug 2025-10-04 23:52:14 +02:00
ibizaman
ffa918aec6 tests: assert user with unknown group cannot login with sso or ldap 2025-10-04 23:52:14 +02:00
ibizaman
01d8f735ae open-webui: show how to clone a secret in the docs 2025-10-04 23:24:23 +02:00
ibizaman
b840c404ab open-webui: fix giving environment to the upstream service 2025-10-04 23:24:23 +02:00
ibizaman
a0f5497e25 ci: only upload artifacts for vm checks 2025-10-04 23:09:55 +02:00
ibizaman
cc6776ec1b ci: do not warn if no artifact is found 2025-10-04 23:09:55 +02:00
ibizaman
77e4aa0a7d ci: only keep traces as artifacts 2025-10-04 23:09:55 +02:00
ibizaman
f2429c4221 ci: let all tests finish even if one has an error 2025-10-04 23:09:55 +02:00
ibizaman
f938528ba6 open-webui: add missing authorization_policy 2025-09-27 22:44:15 +02:00
ibizaman
32d643d13f open-webui: fix documentation 2025-09-27 22:06:43 +02:00
ibizaman
02b73d2dce open-webui: init 2025-09-27 21:25:40 +02:00
ibizaman
b46a227b5b monitoring: add doc on retention time 2025-09-27 21:25:40 +02:00
ibizaman
1c2ff3e381 monitoring: update docs to use secrets contract 2025-09-27 21:25:40 +02:00
ibizaman
771e9758b0 lldap: update deprecated option 2025-09-27 21:25:40 +02:00
ibizaman
c0ab22eebd pinchflat: update docs 2025-09-27 21:25:40 +02:00
ibizaman
c6ad91fb35 pinchflat: use temp dir to store secret 2025-09-27 21:25:40 +02:00
ibizaman
5b31645afa docs: sort order 2025-09-27 21:25:40 +02:00
ibizaman
07c700f69b home-assistant: fix module name 2025-09-27 21:25:40 +02:00
github-actions[bot]
28f8230ec8 flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/0147c2f1d54b30b5dd6d4a8c8542e8d7edf93b5d?narHash=sha256-7To75JlpekfUmdkUZewnT6MoBANS0XVypW6kjUOXQwc%3D' (2025-09-18)
  → 'github:nixos/nixpkgs/554be6495561ff07b6c724047bdd7e0716aa7b46?narHash=sha256-pHpxZ/IyCwoTQPtFIAG2QaxuSm8jWzrzBGjwQZIttJc%3D' (2025-09-21)
 2025-09-24 22:33:48 +02:00
sivert
2f785919d9 #100 Immich service 
- Declarative SSO setup via json config file
- roleClaim via LDAP groups to automatically set admin privileges
- SSO tested manually, but not yet in playwright test
- Storage quota claim not yet implemented
- Authelia rule prevents access by non-members of
userGroup/adminUserGroup
 2025-09-20 14:43:38 +02:00
github-actions[bot]
4621a02dff flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/8d4ddb19d03c65a36ad8d189d001dc32ffb0306b?narHash=sha256-qqIJ3yxPiB0ZQTT9//nFGQYn8X/PBoJbofA7hRKZnmE%3D' (2025-09-16)
  → 'github:nixos/nixpkgs/0147c2f1d54b30b5dd6d4a8c8542e8d7edf93b5d?narHash=sha256-7To75JlpekfUmdkUZewnT6MoBANS0XVypW6kjUOXQwc%3D' (2025-09-18)
 2025-09-20 03:46:54 +02:00
github-actions[bot]
a571125ebf flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/c23193b943c6c689d70ee98ce3128239ed9e32d1?narHash=sha256-hLEO2TPj55KcUFUU1vgtHE9UEIOjRcH/4QbmfHNF820%3D' (2025-09-13)
  → 'github:nixos/nixpkgs/8d4ddb19d03c65a36ad8d189d001dc32ffb0306b?narHash=sha256-qqIJ3yxPiB0ZQTT9//nFGQYn8X/PBoJbofA7hRKZnmE%3D' (2025-09-16)
 2025-09-19 04:04:02 +02:00
ibizaman
3a5186942f docs: do not ask when generating redirects 
We have git to back us up.
 2025-09-17 10:59:12 +02:00
ibizaman
6f74d4c56c docs: fix typos in forgejo documentation 2025-09-17 10:59:12 +02:00
ibizaman
98b4cc32b6 pinchflat: init 2025-09-17 10:59:12 +02:00
ibizaman
3f74b4ecc4 test: add dns record for authelia service 2025-09-17 10:59:12 +02:00
ibizaman
f38993bf32 ops: ignore more files 2025-09-17 10:59:12 +02:00
ibizaman
b24eed9a86 lib: add toEnvVar function 2025-09-17 10:59:12 +02:00
dependabot[bot]
9dfb82a0cf build(deps): bump tj-actions/changed-files from 46 to 47 
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 46 to 47.
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](https://github.com/tj-actions/changed-files/compare/v46...v47)

---
updated-dependencies:
- dependency-name: tj-actions/changed-files
  dependency-version: '47'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-09-15 17:33:55 +02:00
github-actions[bot]
d4099b1d48 flake.lock: Update 
Flake lock file updates:

• Updated input 'nixpkgs':
    'github:nixos/nixpkgs/8eb28adfa3dc4de28e792e3bf49fcf9007ca8ac9?narHash=sha256-NOrUtIhTkIIumj1E/Rsv1J37Yi3xGStISEo8tZm3KW4%3D' (2025-09-05)
  → 'github:nixos/nixpkgs/c23193b943c6c689d70ee98ce3128239ed9e32d1?narHash=sha256-hLEO2TPj55KcUFUU1vgtHE9UEIOjRcH/4QbmfHNF820%3D' (2025-09-13)
 2025-09-14 04:09:09 +02:00