thary/sp-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
471 Commits 1 Branch 0 Tags
cc7d594807aa6b4190586cfbd1c07760ca28db6f
Commit Graph

164 Commits

Author SHA1 Message Date
Alexander Tomokhov
cc7d594807 nextcloud: disable /updater location (substitute html) 2025-05-14 17:22:07 +04:00
Inex Code
c9890828cd Revert "fix: make postfix use modern TLS" 
This reverts commit 085654a506.
 2025-05-11 14:28:26 +03:00
nhnn
085654a506 fix: make postfix use modern TLS 2025-05-09 14:33:23 +03:00
nhnn
b51561ef01 fix: harden vikunja services and don't generate service token for it 2025-05-09 14:33:11 +03:00
nhnn
c12025a5de fix: disable updates 2025-05-01 16:10:41 +03:00
nhnn
c9a50cff27 fix: use strings, disable logreader app as it's not useful because user can check logs in SP app 2025-05-01 16:10:38 +03:00
nhnn
09675706b6 fix: make opcache string buffer bigger 2025-05-01 16:09:43 +03:00
nhnn
0075ebd35a fix: try enabling memcache for nextcloud 2025-05-01 16:09:41 +03:00
Alexander Tomokhov
8e924d3aaf nextcloud: disableMaintenanceModeAtStart option 2025-04-29 18:44:41 +04:00
Inex Code
547eb00544 feat: Delete nextcloud admin user (#133) 
Co-authored-by: Alexander Tomokhov <alexoundos@selfprivacy.org>
Reviewed-on: https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nixos-config/pulls/133
 2025-04-25 14:21:44 +03:00
Alexander Tomokhov
9f5ace5258 roundcube: specify systemd dependencies with dovecot 2025-04-22 02:07:27 +04:00
Alexander Tomokhov
a96b6b8444 auth: add only roundcube kanidm service account to idm_mail_servers 2025-04-21 20:22:40 +04:00
Alexander Tomokhov
43c3ea06ab nextcloud,auth: set originLanding to user_oidc/login 2025-04-18 21:16:24 +04:00
Alexander Tomokhov
eb5074ba82 nextcloud,auth: migrate to auth module 2025-04-18 21:16:24 +04:00
Alexander Tomokhov
356f9ddb91 fix forgejo,auth: curl waiting failure condition 2025-04-18 16:15:21 +03:00
Alexander Tomokhov
952b660aae roundcube,auth: disable generation of a kanidm service token 2025-04-17 15:06:46 +04:00
Alexander Tomokhov
eb200cb792 refact dovecot,auth: tmpfiles, minor renames, config-paths-needed.json 2025-04-17 13:20:07 +04:00
Alexander Tomokhov
90758a2652 fix mailserver,auth: OAuth client secret has only allowed characters 2025-04-17 13:20:07 +04:00
Alexander Tomokhov
5f9be4130e roundcube,auth: migrate to auth module 2025-04-17 13:20:07 +04:00
Alexander Tomokhov
791e551b93 forgejo,auth: change icon to sp-module's icon.svg 2025-04-17 13:20:07 +04:00
Alexander Tomokhov
9a438aab13 forgejo,auth: display name (Forgejo) starts with capital letter 2025-04-17 13:20:07 +04:00
Alexander Tomokhov
e92922d1a1 forgejo,auth: enablePkce when forgejo version is at least 8.0 2025-04-17 13:20:07 +04:00
Alexander Tomokhov
9dc47e6143 fix forgejo,auth: apply oauth and ldap configurations 2025-04-17 13:20:07 +04:00
Alexander Tomokhov
5cc23464d5 fix forgejo,auth: OAuth client secret filepath 2025-04-17 13:20:07 +04:00
Alexander Tomokhov
56a56b67b4 auth: add imageFile option 2025-04-17 13:20:07 +04:00
Alexander Tomokhov
1f67bb5a85 fix assertion message in sp-modules/simple-nixos-mailserver/config.nix 2025-04-17 13:20:07 +04:00
nhnn
b605d07b52 feat: Vikunja to-do app (#128) 
Vikunja is fast self-hostable to-do app.

Reviewed-on: https://git.selfprivacy.org/SelfPrivacy/selfprivacy-nixos-config/pulls/128
Reviewed-by: Inex Code <inex.code@selfprivacy.org>
Co-authored-by: nhnn <nhnn@nhnn.dev>
Co-committed-by: nhnn <nhnn@nhnn.dev>
 2025-04-14 14:32:42 +03:00
Alexander Tomokhov
0fdcf8a791 nextcloud,auth: disable integration with Kanidm when sso is disabled 2025-04-12 15:57:01 +04:00
Alexander Tomokhov
a5f497d9cf fix forgejo,auth: wait until OAuth2 discovery URL is online 
Previously, Forgejo systemd service failed quickly, because kanidm
reports a notice to systemd before discovery URL is ready.
 2025-04-11 14:07:40 +04:00
Inex Code
f516d2e722 chore: Update Nextcloud to version 30 2025-03-31 19:37:38 +03:00
Alexander Tomokhov
74d7f7ef43 dovecot:auth: fix OAuth client secret generation 2025-03-29 03:59:56 +04:00
Alexander Tomokhov
c118802155 roundcube:auth: fix OAuth client secret generation and copy order 2025-03-29 01:35:00 +04:00
Inex Code
f3593156dc fix: Turn on email SSO by default 2025-03-28 23:47:38 +03:00
Alexander Tomokhov
a10d9cdfb9 forgejo:auth: fix recognition of an admin user 2025-03-29 00:44:10 +04:00
Inex Code
537d916ea9 fix: Presumably unused secrets file for Nextcloud 2025-03-28 23:17:47 +03:00
Inex Code
c2e1fa41e9 refactor: rename accessGroup to userGroup 2025-03-28 17:41:04 +03:00
Inex Code
d902a0f3f6 feat: allow plain login to dovecot 
The password backend is provided by SelfPrivacy API module at the moment
 2025-03-28 17:23:41 +03:00
Inex Code
fa9cd82739 fix: roundcube metadata 2025-03-28 17:21:08 +03:00
Inex Code
2b4a9e1f90 refactor: Remove redundant subdomain form ocrerv 2025-03-28 17:19:36 +03:00
Inex Code
aedc1a4297 fix: Nextcloud metadata 2025-03-28 17:18:16 +03:00
Inex Code
c528ea129f feat: Add SSO field to Forgeo SP mdoule metadata 2025-03-28 17:16:01 +03:00
Inex Code
3144e384a6 fix: Forgejo metadata 2025-03-28 17:15:20 +03:00
Alexander Tomokhov
2ee27353da auth,forgejo: fix originLanding 2025-03-26 15:59:23 +04:00
Alexander Tomokhov
8013f2e394 auth: module for easier integration of new services with Kanidm 
- Forgejo is migrated to this module.
 2025-03-21 16:40:18 +04:00
Alexander Tomokhov
1ff180ad1a add assertions: selfprivacy.sso.enable -> modules.*.enableSso 2025-02-03 02:17:54 +04:00
Alexander Tomokhov
331fa63b33 add options: selfprivacy.sso.enable && selfprivacy.sso.debug 
selfprivacy.sso.enable is true by default.
 2025-02-03 02:17:54 +04:00
Alexander Tomokhov
65548a1e73 SP modules do not depend on selfprivacy.modules.auth 2025-02-03 02:05:05 +04:00
Alexander Tomokhov
ea443d2150 gitea,nextcloud,roundcube,mailserver: depend on kanidm systemd service 2025-02-03 01:05:48 +04:00
Alexander Tomokhov
ee2e404eb8 passthru.selfprivacy -> selfprivacy.passthru 2025-02-03 01:05:48 +04:00
Alexander Tomokhov
29d1759186 merge auth SP module into main configuration; add enableSso option 
`enableSso` is being added to the following SP modules:
* gitea (forgejo)
* nextcloud
* roundcube
* simple-nixos-mailserver
 2025-02-03 00:10:05 +04:00