Alexander Tomokhov
43c3ea06ab
nextcloud,auth: set originLanding to user_oidc/login
2025-04-18 21:16:24 +04:00
Alexander Tomokhov
eb5074ba82
nextcloud,auth: migrate to auth module
2025-04-18 21:16:24 +04:00
Alexander Tomokhov
0fdcf8a791
nextcloud,auth: disable integration with Kanidm when sso is disabled
2025-04-12 15:57:01 +04:00
Inex Code
f516d2e722
chore: Update Nextcloud to version 30
2025-03-31 19:37:38 +03:00
Inex Code
537d916ea9
fix: Presumably unused secrets file for Nextcloud
2025-03-28 23:17:47 +03:00
Inex Code
c2e1fa41e9
refactor: rename accessGroup to userGroup
2025-03-28 17:41:04 +03:00
Inex Code
aedc1a4297
fix: Nextcloud metadata
2025-03-28 17:18:16 +03:00
Alexander Tomokhov
1ff180ad1a
add assertions: selfprivacy.sso.enable -> modules.*.enableSso
2025-02-03 02:17:54 +04:00
Alexander Tomokhov
331fa63b33
add options: selfprivacy.sso.enable && selfprivacy.sso.debug
...
selfprivacy.sso.enable is true by default.
2025-02-03 02:17:54 +04:00
Alexander Tomokhov
65548a1e73
SP modules do not depend on selfprivacy.modules.auth
2025-02-03 02:05:05 +04:00
Alexander Tomokhov
ea443d2150
gitea,nextcloud,roundcube,mailserver: depend on kanidm systemd service
2025-02-03 01:05:48 +04:00
Alexander Tomokhov
ee2e404eb8
passthru.selfprivacy -> selfprivacy.passthru
2025-02-03 01:05:48 +04:00
Alexander Tomokhov
29d1759186
merge auth SP module into main configuration; add enableSso option
...
`enableSso` is being added to the following SP modules:
* gitea (forgejo)
* nextcloud
* roundcube
* simple-nixos-mailserver
2025-02-03 00:10:05 +04:00
Alexander Tomokhov
857d6729ef
fix nextcloud when sp.modules.auth.enable is true
2025-01-29 13:21:36 +04:00
Alexander Tomokhov
2cc5743152
fix sp-modules: configPathsNeeded, requiring passthru.selfprivacy.auth
2025-01-29 12:53:44 +04:00
Alexander Tomokhov
2ed4cc0dee
passthru.selfprivacy.auth.admins-group = "sp.admins"
2025-01-25 23:20:00 +04:00
Alexander Tomokhov
d008fbcc17
auth: sp.full_users group
2025-01-25 01:24:28 +04:00
Alexander Tomokhov
0c7a8d51b0
fix gitea,nextcloud,roundcube: evaluate without auth module
2025-01-24 16:27:48 +04:00
Alexander Tomokhov
f795bc977f
fix auth: config.selfprivacy.modules.auth.enable or false
2025-01-17 16:12:22 +04:00
Alexander Tomokhov
f43ec2686d
fix nextcloud: get rid of extra user_ldap configs; other fixes
2025-01-17 16:10:40 +04:00
Alexander Tomokhov
89d788aab2
fix nextcloud: OAuth secret, ExecStartPost ignore failure
2025-01-17 16:10:38 +04:00
Alexander Tomokhov
0e7b113ce0
fix(nextcloud): user_oidc mapping-uid is preferred_username
2025-01-17 16:09:25 +04:00
Alexander Tomokhov
153e1c12d5
feat(auth,nextcloud): OAuth2 and LDAP integration
2025-01-17 16:09:22 +04:00
Inex Code
a4d2c06c64
refactor: Even clearer naming for the manifest version
2024-12-24 21:07:29 +03:00
Inex Code
a13a9fe839
refactor: Clearer naming for the manifest version
2024-12-24 20:55:19 +03:00
Inex Code
cca51699ee
feat: Dynamic templating
2024-12-24 20:40:45 +03:00
Alan Urmancheev
d830288068
feat: NextCloud: add the enableImagemagick option
2024-11-29 17:38:03 +04:00
Inex Code
4b6807d78f
chore: Update Nextcloud
2024-10-02 16:18:57 +03:00
Inex Code
5218868b33
feat: Server monitroing, NixOS 24.05 ( #84 )
...
Co-authored-by: nhnn <nhnn@disroot.org >
Reviewed-on: https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nixos-config/pulls/84
2024-07-30 19:19:06 +03:00
Inex Code
8ce34bdd8d
chore: update Nextcloud to 27
2024-06-13 11:04:17 +03:00
Inex Code
f863049086
Revert "chore: update Nextcloud to 27"
...
This reverts commit aff7237384
2024-06-13 11:03:11 +03:00
Inex Code
aff7237384
chore: update Nextcloud to 27
2024-06-13 11:01:09 +03:00
Alexander Tomokhov
ad43d31c0c
modules: parameterize all subdomains
2024-02-20 14:42:37 +04:00
Alexander Tomokhov
1a677f273b
fix nextcloud auth page redirection
2024-01-10 01:49:51 +04:00
Alexander Tomokhov
15f5d6096d
sp-modules: refactor options types
2023-12-28 13:19:47 +04:00
Alexander Tomokhov
fe44ba6fd8
fix nextcloud: fail if secrets are missing
2023-12-27 15:05:23 +04:00
Alexander Tomokhov
e6496b95a4
useACMEHost for all services
2023-12-22 21:18:05 +04:00
Alexander Tomokhov
19f30daf80
sp-modules: x-systemd.before=... for all mountpoints
2023-12-22 18:07:14 +04:00
Alexander Tomokhov
dcaf96c773
Revert "Revert "Revert "add wildcard ACME certificate"""
...
This reverts commit 4faf8e7dda
2023-12-20 17:43:47 +04:00
Alexander Tomokhov
4faf8e7dda
Revert "Revert "add wildcard ACME certificate""
...
This reverts commit 0c4d57c33d
2023-12-20 16:59:57 +04:00
Alexander Tomokhov
c18f332f5f
Revert "use enableACME for all virtualHosts"
...
This reverts commit 46366702bc
2023-12-19 23:46:42 +04:00
Alexander Tomokhov
46366702bc
use enableACME for all virtualHosts
2023-12-19 17:22:32 +04:00
Alexander Tomokhov
0c4d57c33d
Revert "add wildcard ACME certificate"
...
This reverts commit b37cadff68
2023-12-19 17:22:32 +04:00
Alexander Tomokhov
b37cadff68
add wildcard ACME certificate
2023-12-19 01:52:27 +04:00
Alexander Tomokhov
d881cc8ce5
upgrade nixpkgs to NixOS 23.11
2023-12-18 18:44:18 +04:00
Alexander Tomokhov
67c2b12c44
sp-modules: get rid of systemd.tmpfiles
...
Because it causes troubles when using bind-mounts for /var/lib/*.
2023-12-18 16:30:40 +04:00
Alexander Tomokhov
ade4dc08b1
sp-modules: use jq exit status code
2023-12-03 10:37:37 +04:00
Alexander Tomokhov
1a5a4be306
nextcloud: fix secrets extraction
2023-11-29 08:19:04 +04:00
Alexander Tomokhov
a224731dcf
nextcloud: write passwords using install
2023-11-26 09:39:47 +04:00
Alexander Tomokhov
a98dafc98c
fix nextcloud (case when enabled)
...
Previously, second mkIf for cleanup case took precedence when merge with
`//`. Now it's 2 modules: one for selfprivacy.modules.nextcloud.enable
== true, another for selfprivacy.modules.nextcloud.enable == false.
2023-11-26 03:11:29 +04:00
