 LeRoyce Pearson
|
4ff174c931
|
feat: nextcloud: automatically redirect to dex for login
|
2024-01-11 23:17:21 -07:00 |
|
LeRoyce Pearson
|
4c1a356491
|
remove user_oidc package from nextcloud apps
|
2024-01-11 23:10:29 -07:00 |
|
LeRoyce Pearson
|
64677e8d5c
|
fix: nextcloud: allow user creation from OIDC
|
2024-01-11 23:10:02 -07:00 |
|
LeRoyce Pearson
|
f92a3d0fb9
|
fix: nextcloud: `secretEnv` -> `secret`
|
2024-01-11 23:01:31 -07:00 |
|
LeRoyce Pearson
|
17dd4cddd4
|
feat: nextcloud: user_oidc app
|
2024-01-11 22:48:07 -07:00 |
|
LeRoyce Pearson
|
389727bb14
|
fix: dex: change to take advantage of namespacing done by service
|
2024-01-11 22:22:00 -07:00 |
|
LeRoyce Pearson
|
cc10291820
|
fix: dex: `cn=` -> `uid=`
|
2024-01-11 21:49:07 -07:00 |
|
LeRoyce Pearson
|
fb1e4854ff
|
fix: dex: `ou=apps` -> `ou=people`
|
2024-01-11 21:47:04 -07:00 |
|
LeRoyce Pearson
|
20aaf73cc3
|
fix: add missing `serviceConfig
|
2024-01-11 21:43:13 -07:00 |
|
LeRoyce Pearson
|
04dc7f766f
|
fix: dex: use method similar to lldap for sqlite storage
|
2024-01-11 21:40:09 -07:00 |
|
LeRoyce Pearson
|
b8d11783e8
|
fix: dex: `sqlite` -> `sqlite3`
|
2024-01-11 21:29:38 -07:00 |
|
LeRoyce Pearson
|
38468921ad
|
ldap: remove glauth, switch back to only lldap
|
2024-01-11 21:18:43 -07:00 |
|
LeRoyce Pearson
|
77153bc647
|
glauth: add baseDN and nameFormat to sqlite datastore
|
2024-01-11 18:54:36 -07:00 |
|
LeRoyce Pearson
|
b9b455c4f2
|
fix: add `index.php` into redirect URI
|
2024-01-11 18:54:11 -07:00 |
|
LeRoyce Pearson
|
a0f15d7227
|
fix: nextcloud: overwrite webroot to `/`
|
2024-01-10 02:08:58 -07:00 |
|
LeRoyce Pearson
|
6fd486eb61
|
feat: nextcloud: WIP support for OIDC logins
|
2024-01-10 01:46:06 -07:00 |
|
LeRoyce Pearson
|
fcb095a346
|
feat: nextcloud: install oidc_login app
|
2024-01-10 01:22:41 -07:00 |
|
LeRoyce Pearson
|
9d6c20d1ba
|
expose oidc server to the world
|
2024-01-10 00:59:22 -07:00 |
|
LeRoyce Pearson
|
df1214e7d2
|
fix: get headscale and glauth starting up nicely again
|
2024-01-10 00:48:59 -07:00 |
|
LeRoyce Pearson
|
922165b439
|
feat: glauth: sqlite backend for runtime users
|
2024-01-10 00:26:01 -07:00 |
Louis Pearson
|
40a83335f8
|
fix: plain wg0 no namespace blah
|
2024-01-09 23:48:05 -07:00 |
|
Louis Pearson
|
b0f61ff0dc
|
feat: bridge wg namespace to root
|
2024-01-09 23:32:20 -07:00 |
|
Louis Pearson
|
927e91aae8
|
feat: wireguard vpn for aria2
|
2024-01-09 22:38:19 -07:00 |
|
Louis Pearson
|
601cbbfc46
|
fix: make *arr servers part of aria2 group
|
2024-01-09 19:32:46 -07:00 |
|
LeRoyce Pearson
|
2192fdf886
|
feat: Add lldap to magicDNS records
|
2024-01-09 18:43:41 -07:00 |
|
LeRoyce Pearson
|
2d48308206
|
remove unnecessary groups from glauth
|
2024-01-09 18:43:27 -07:00 |
|
LeRoyce Pearson
|
be442a16c1
|
fix: glauth: use `cn` for nameFormat
|
2024-01-09 18:38:09 -07:00 |
|
LeRoyce Pearson
|
5b07801210
|
fix: glauth: add ldap scheme to server url
|
2024-01-09 18:33:14 -07:00 |
|
LeRoyce Pearson
|
e32e78228e
|
feat: glauth: add lldap as a datastore
|
2024-01-09 18:31:26 -07:00 |
|
LeRoyce Pearson
|
92d7f6b513
|
fix: headscale: remove trailing slash from OIDC issuer url
|
2024-01-09 18:19:39 -07:00 |
|
LeRoyce Pearson
|
fc95fa8caa
|
fix: give ownership of headscale oidc secret file to headscale user
|
2024-01-09 18:14:58 -07:00 |
|
LeRoyce Pearson
|
a7d62018d8
|
feat: headscale: add OIDC authentication for single-sign on
|
2024-01-09 18:11:18 -07:00 |
|
Louis Pearson
|
78ea01ebec
|
feat: add prowlarr
|
2024-01-09 17:51:59 -07:00 |
|
Louis Pearson
|
16fdef77d8
|
feat: add /zroot/media
|
2024-01-09 17:06:27 -07:00 |
|
LeRoyce Pearson
|
362b227202
|
fix: put connect_via_tailscale matcher inside block
|
2024-01-09 16:40:25 -07:00 |
|
LeRoyce Pearson
|
f224052eca
|
refactor: use ip filtering instead of address binding
|
2024-01-09 16:36:16 -07:00 |
|
Louis Pearson
|
fecaee1a83
|
fix: make network interfaces required by caddy with bindsto
|
2024-01-09 15:45:29 -07:00 |
|
LeRoyce Pearson
|
5c7672e67f
|
fix: `caddy.service.service` -> `caddy.service`
|
2024-01-09 15:25:49 -07:00 |
|
Louis Pearson
|
7c9f92d7ee
|
feat: import zroot on boot
|
2024-01-09 15:21:20 -07:00 |
|
LeRoyce Pearson
|
fb7fd99294
|
feat: remove nextcloud from zroot
This should _hopefully_ remove the race condition between `zfs-mount`
and `nextcloud`, meaning `zroot` will get automatically mounted.
|
2024-01-09 14:35:10 -07:00 |
|
LeRoyce Pearson
|
f7ed9dacd1
|
fix: typo: use all lowercase for "requires" and "after"
|
2024-01-09 14:32:05 -07:00 |
|
LeRoyce Pearson
|
4eb27ecea6
|
fix: add missing semicolon
|
2024-01-09 14:30:14 -07:00 |
|
LeRoyce Pearson
|
00d4f16122
|
fix: caddy: wait for tailscale0 before starting
|
2024-01-09 14:26:28 -07:00 |
|
Louis Pearson
|
912d4a353c
|
feat: give each *arr it's own subdomain
|
2024-01-09 13:06:40 -07:00 |
|
LeRoyce Pearson
|
cacf5d39ab
|
feat: cockpit: add zfs-manager plugin
|
2024-01-09 12:52:27 -07:00 |
|
Louis Pearson
|
dd23078aae
|
fix: simplify arr configuration
|
2024-01-09 12:42:05 -07:00 |
|
LeRoyce Pearson
|
84be02a122
|
feat: cockpit: add cockpit-tailscale plugin
|
2024-01-09 12:23:56 -07:00 |
|
Louis Pearson
|
77d3ea5593
|
fix: use real path to static files
|
2024-01-09 03:03:46 -07:00 |
|
Louis Pearson
|
91948a75f9
|
feat: add static resources for *arr servers
|
2024-01-09 02:56:06 -07:00 |
|
Louis Pearson
|
62a1d699f4
|
feat: expose *arr servers on tailnet
|
2024-01-09 02:43:17 -07:00 |