Commit Graph

175 Commits

Author SHA1 Message Date
cl0vrfi3ld
b0c3d835cb users n stuff 2025-07-04 12:36:48 -04:00
cl0vrfi3ld
425e3eeec2 fix for oidc user registration flow in 25.5.0 2025-07-04 12:30:16 -04:00
cl0vrfi3ld
da096e05c8 apparently we don't need adminsGroup 2025-07-04 12:28:56 -04:00
cl0vrfi3ld
7135f5b6bd trimmed comments 2025-07-04 12:17:16 -04:00
cl0vrfi3ld
5039b3d2e9 enable sso by default 2025-07-04 12:09:28 -04:00
cl0vrfi3ld
9dc3af43e3 change module to 'community' type 2025-07-04 12:08:06 -04:00
cl0vrfi3ld
62e90db10f enable isMovable 2025-07-04 12:07:02 -04:00
cl0vrfi3ld
6366116c54 update flake description 2025-07-04 12:06:15 -04:00
cl0vrfi3ld
579d736dd7 actual: test forcing oidc-only auth (no password) when sso is enabled 2025-07-02 09:39:28 -04:00
cl0vrfi3ld
0afdf018f9 again attempting to fix this hell of a git history 2025-06-30 20:12:32 -04:00
nhnn
cfb471a9ce fix: remove E2E support in jitsi 2025-05-16 14:12:39 +03:00
Alexander Tomokhov
cc7d594807 nextcloud: disable /updater location (substitute html) 2025-05-14 17:22:07 +04:00
Inex Code
c9890828cd Revert "fix: make postfix use modern TLS"
This reverts commit 085654a506.
2025-05-11 14:28:26 +03:00
nhnn
085654a506 fix: make postfix use modern TLS 2025-05-09 14:33:23 +03:00
nhnn
b51561ef01 fix: harden vikunja services and don't generate service token for it 2025-05-09 14:33:11 +03:00
nhnn
c12025a5de fix: disable updates 2025-05-01 16:10:41 +03:00
nhnn
c9a50cff27 fix: use strings, disable logreader app as it's not useful because user can check logs in SP app 2025-05-01 16:10:38 +03:00
nhnn
09675706b6 fix: make opcache string buffer bigger 2025-05-01 16:09:43 +03:00
nhnn
0075ebd35a fix: try enabling memcache for nextcloud 2025-05-01 16:09:41 +03:00
Alexander Tomokhov
8e924d3aaf nextcloud: disableMaintenanceModeAtStart option 2025-04-29 18:44:41 +04:00
Inex Code
547eb00544 feat: Delete nextcloud admin user (#133)
Co-authored-by: Alexander Tomokhov <alexoundos@selfprivacy.org>
Reviewed-on: https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nixos-config/pulls/133
2025-04-25 14:21:44 +03:00
Alexander Tomokhov
9f5ace5258 roundcube: specify systemd dependencies with dovecot 2025-04-22 02:07:27 +04:00
Alexander Tomokhov
a96b6b8444 auth: add only roundcube kanidm service account to idm_mail_servers 2025-04-21 20:22:40 +04:00
Alexander Tomokhov
43c3ea06ab nextcloud,auth: set originLanding to user_oidc/login 2025-04-18 21:16:24 +04:00
Alexander Tomokhov
eb5074ba82 nextcloud,auth: migrate to auth module 2025-04-18 21:16:24 +04:00
Alexander Tomokhov
356f9ddb91 fix forgejo,auth: curl waiting failure condition 2025-04-18 16:15:21 +03:00
Alexander Tomokhov
952b660aae roundcube,auth: disable generation of a kanidm service token 2025-04-17 15:06:46 +04:00
Alexander Tomokhov
eb200cb792 refact dovecot,auth: tmpfiles, minor renames, config-paths-needed.json 2025-04-17 13:20:07 +04:00
Alexander Tomokhov
90758a2652 fix mailserver,auth: OAuth client secret has only allowed characters 2025-04-17 13:20:07 +04:00
Alexander Tomokhov
5f9be4130e roundcube,auth: migrate to auth module 2025-04-17 13:20:07 +04:00
Alexander Tomokhov
791e551b93 forgejo,auth: change icon to sp-module's icon.svg 2025-04-17 13:20:07 +04:00
Alexander Tomokhov
9a438aab13 forgejo,auth: display name (Forgejo) starts with capital letter 2025-04-17 13:20:07 +04:00
Alexander Tomokhov
e92922d1a1 forgejo,auth: enablePkce when forgejo version is at least 8.0 2025-04-17 13:20:07 +04:00
Alexander Tomokhov
9dc47e6143 fix forgejo,auth: apply oauth and ldap configurations 2025-04-17 13:20:07 +04:00
Alexander Tomokhov
5cc23464d5 fix forgejo,auth: OAuth client secret filepath 2025-04-17 13:20:07 +04:00
Alexander Tomokhov
56a56b67b4 auth: add imageFile option 2025-04-17 13:20:07 +04:00
Alexander Tomokhov
1f67bb5a85 fix assertion message in sp-modules/simple-nixos-mailserver/config.nix 2025-04-17 13:20:07 +04:00
nhnn
b605d07b52 feat: Vikunja to-do app (#128)
Vikunja is fast self-hostable to-do app.

Reviewed-on: https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nixos-config/pulls/128
Reviewed-by: Inex Code <inex.code@selfprivacy.org>
Co-authored-by: nhnn <nhnn@nhnn.dev>
Co-committed-by: nhnn <nhnn@nhnn.dev>
2025-04-14 14:32:42 +03:00
Alexander Tomokhov
0fdcf8a791 nextcloud,auth: disable integration with Kanidm when sso is disabled 2025-04-12 15:57:01 +04:00
Alexander Tomokhov
a5f497d9cf fix forgejo,auth: wait until OAuth2 discovery URL is online
Previously, Forgejo systemd service failed quickly, because kanidm
reports a notice to systemd before discovery URL is ready.
2025-04-11 14:07:40 +04:00
Inex Code
f516d2e722 chore: Update Nextcloud to version 30 2025-03-31 19:37:38 +03:00
Alexander Tomokhov
74d7f7ef43 dovecot:auth: fix OAuth client secret generation 2025-03-29 03:59:56 +04:00
Alexander Tomokhov
c118802155 roundcube:auth: fix OAuth client secret generation and copy order 2025-03-29 01:35:00 +04:00
Inex Code
f3593156dc fix: Turn on email SSO by default 2025-03-28 23:47:38 +03:00
Alexander Tomokhov
a10d9cdfb9 forgejo:auth: fix recognition of an admin user 2025-03-29 00:44:10 +04:00
Inex Code
537d916ea9 fix: Presumably unused secrets file for Nextcloud 2025-03-28 23:17:47 +03:00
Inex Code
c2e1fa41e9 refactor: rename accessGroup to userGroup 2025-03-28 17:41:04 +03:00
Inex Code
d902a0f3f6 feat: allow plain login to dovecot
The password backend is provided by SelfPrivacy API module at the moment
2025-03-28 17:23:41 +03:00
Inex Code
fa9cd82739 fix: roundcube metadata 2025-03-28 17:21:08 +03:00
Inex Code
2b4a9e1f90 refactor: Remove redundant subdomain form ocrerv 2025-03-28 17:19:36 +03:00