ibizaman
48802553de
chore: format all files
2025-10-28 22:17:00 +01:00
ibizaman
f62d2889c1
mod: only import hardcodedsecret from tests
2025-10-25 10:18:12 +02:00
ibizaman
5022bb5886
karakeep: fix meilisearch secret
2025-10-24 02:15:22 +02:00
ibizaman
6b7a6c6748
karakeep: configure meilisearch with master key and auto update
2025-10-24 01:54:26 +02:00
ibizaman
7ebe421fa0
nextcloud: bump default version from 30 to 31
2025-10-23 03:05:12 +02:00
ibizaman
63b7b09a0f
karakeep: init
2025-10-22 03:33:17 +02:00
ibizaman
139ceca768
authelia: add extraOidcAuthorizationPolicies option
...
This is needed for example to only authorize users of a given group to access a service.
Usually, the application itself enforces this but some don't.
2025-10-22 03:33:17 +02:00
ibizaman
2cc2ab5195
mod: use more callPackage now that is passes shb lib too
2025-10-15 01:38:35 +02:00
ibizaman
6e64c7f8cf
mod: merge shb functions into lib
2025-10-15 01:20:00 +02:00
ibizaman
283e12d87d
test: merge functions into lib and set backdoor everywhere
2025-10-15 01:20:00 +02:00
ibizaman
9892f55ae2
mod: make imports explicit and remove system
2025-10-12 00:24:52 +02:00
ibizaman
6d0ee7494f
nextcloud: allow to set sso integration without ldap
2025-10-09 02:04:20 +02:00
ibizaman
a536ee141e
open-webui: do not login when not belonging to user or admin group
2025-10-09 02:04:20 +02:00
ibizaman
969630c22b
revert added tests
...
This reverts commit ffa918aec6
2025-10-05 00:08:32 +02:00
ibizaman
ffa918aec6
tests: assert user with unknown group cannot login with sso or ldap
2025-10-04 23:52:14 +02:00
ibizaman
01d8f735ae
open-webui: show how to clone a secret in the docs
2025-10-04 23:24:23 +02:00
ibizaman
b840c404ab
open-webui: fix giving environment to the upstream service
2025-10-04 23:24:23 +02:00
ibizaman
f938528ba6
open-webui: add missing authorization_policy
2025-09-27 22:44:15 +02:00
ibizaman
32d643d13f
open-webui: fix documentation
2025-09-27 22:06:43 +02:00
ibizaman
02b73d2dce
open-webui: init
2025-09-27 21:25:40 +02:00
ibizaman
b46a227b5b
monitoring: add doc on retention time
2025-09-27 21:25:40 +02:00
ibizaman
1c2ff3e381
monitoring: update docs to use secrets contract
2025-09-27 21:25:40 +02:00
ibizaman
771e9758b0
lldap: update deprecated option
2025-09-27 21:25:40 +02:00
ibizaman
c0ab22eebd
pinchflat: update docs
2025-09-27 21:25:40 +02:00
ibizaman
c6ad91fb35
pinchflat: use temp dir to store secret
2025-09-27 21:25:40 +02:00
sivert
2f785919d9
#100 Immich service
...
- Declarative SSO setup via json config file
- roleClaim via LDAP groups to automatically set admin privileges
- SSO tested manually, but not yet in playwright test
- Storage quota claim not yet implemented
- Authelia rule prevents access by non-members of
userGroup/adminUserGroup
2025-09-20 14:43:38 +02:00
ibizaman
6f74d4c56c
docs: fix typos in forgejo documentation
2025-09-17 10:59:12 +02:00
ibizaman
98b4cc32b6
pinchflat: init
2025-09-17 10:59:12 +02:00
ibizaman
b24eed9a86
lib: add toEnvVar function
2025-09-17 10:59:12 +02:00
ibizaman
6f27de81d2
forgejo: clean backup dumps
...
This assumes the dumps are moved elsewhere.
2025-09-09 17:03:30 +02:00
ibizaman
95873d84e9
nextcloud: fix permission on nextcloud server
...
nextcloud-occ is a wrapper around systemd-run so we must be root to run it.
2025-09-02 00:20:55 +02:00
sivert
ef99755ad9
Added role claim to Audiobookshelf's OIDC client config
2025-08-31 19:14:58 +02:00
ibizaman
12721fea39
authelia: add target to wait for
2025-08-25 11:50:06 +02:00
ibizaman
7ff2cfa642
authelia: allow password change
2025-08-25 11:50:06 +02:00
ibizaman
ebd39bbe73
nextcloud: fix ldap and sso integration and add playwright tests
2025-08-25 11:50:06 +02:00
ibizaman
682a01488b
postgresql: fix password setup
2025-08-25 10:00:30 +02:00
ibizaman
60039df698
homeassistant: fix wyoming build with latest nixpkgs
2025-08-25 10:00:30 +02:00
ibizaman
8221d4fe9a
postgresql: update reference to psql binary
2025-08-25 10:00:30 +02:00
ibizaman
5f995e82df
add back info into authelia id token
2025-08-19 15:09:37 +02:00
ibizaman
b2c5637cfc
add debug output to authelia with mitmdump module
2025-08-19 13:36:46 +02:00
ibizaman
3184015d67
add debug output to lldap with mitmdump module
2025-08-19 13:36:46 +02:00
ibizaman
d824da617c
lldap: explain ensure behavior in docs
2025-08-19 13:03:06 +02:00
ibizaman
485e7474c4
lldap: only enforce groups
2025-08-19 00:55:07 +02:00
sivert
b4b70b175e
Update SSO setup for Audiobookshelf
...
More or less copied from jellyfin.
2025-08-18 23:22:04 +02:00
ibizaman
b8b940e9ff
add renamed options for guided migration
2025-08-18 12:57:44 +02:00
Sam Grayson
133ddbbd7b
correct broken link typo
2025-08-10 16:47:01 +02:00
ibizaman
c9ee41b1d4
fine grained logging with mitmdump logger addon
2025-08-04 01:22:25 +02:00
ibizaman
9a135523d2
fix link in mitmdump documentation
2025-07-31 23:30:57 +02:00
ibizaman
67c2705f98
add mitmdump block
2025-07-31 23:21:57 +02:00
ibizaman
91580421be
add playwright test with ldap for forgejo
2025-07-24 23:12:33 +02:00
