Vegard Hagen
0ff3a46685
fix(email): change provider to mailersend
...
Mail from Brevo includes a tracking pixel that you can't get rid of. To quote Lemongrab: "Unacceptable!"
Signed-off-by: Vegard Hagen <[email protected]
2025-07-29 23:40:36 +02:00
Vegard Hagen
08c01b3fbc
fix(email): change provider to brevo
...
SendGrid started charging money for basic functionality, so changing to free tier in Brevo
Signed-off-by: Vegard Hagen <[email protected]
2025-07-29 22:36:32 +02:00
Vegard Hagen
9fc5f0f0c4
feat(grafana): oauth/oidc integration
...
Signed-off-by: Vegard Hagen <[email protected]
2025-07-26 14:34:36 +02:00
7e388f55d7
chore(renovate): renovate 2025-07-18
...
chore(deps): update helm release cert-manager to v1.18.2 (#293 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update proxmox-csi-plugin docker tag to v0.3.11 (#311 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update cloudflare/cloudflared docker tag to v2025.7.0 (#314 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update dependency siderolabs/talos to v1.10.5 (#331 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update media containers (#328 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v73.2.3 (#332 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update cilium (#333 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update actions/checkout action to v4.2.2 (#336 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.63 (#338 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update dependency kubernetes/kubernetes to v1.33.3 (#335 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update ghcr.io/authelia/authelia docker tag to v4.39.5 (#339 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update ghcr.io/home-operations/qbittorrent docker tag to v5.1.2 (#340 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release authelia to v0.10.39 (#341 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update registry.k8s.io/git-sync/git-sync docker tag to v4.4.2 (#342 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update sealed-secrets docker tag to v2.5.16 (#343 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update ghcr.io/advplyr/audiobookshelf docker tag to v2.26.1 (#344 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update netbird (#345 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update terraform proxmox to v0.80.0 (#346 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update ghcr.io/home-operations/prowlarr docker tag to v2 (#347 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v75 (#348 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Vegard Hagen <[email protected] #349 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-19 18:51:55 +02:00
Vegard Hagen
f5841b4a3b
fix(authelia): explicit custom attribute configuration
...
Signed-off-by: Vegard Hagen <[email protected]
2025-07-13 15:46:41 +02:00
Vegard Hagen
838a335ecc
feat(authelia): description of custom claims
...
Signed-off-by: Vegard Hagen <[email protected]
2025-07-12 17:17:42 +02:00
Vegard Hagen
5de4066796
feat(authelia): custom argocd claim
...
Signed-off-by: Vegard Hagen <[email protected]
2025-07-12 15:45:23 +02:00
Vegard Hagen
aa884cd9d2
fix(authelia): clean up configuration
...
Signed-off-by: Vegard Hagen <[email protected]
2025-07-11 20:51:00 +02:00
Vegard Hagen
9fa04832e4
fix(unbound): use default config
...
Experiencing some issues with using Unbound as a recursive solver, so reverting to default config
Signed-off-by: Vegard Hagen <[email protected]
2025-07-11 19:47:37 +02:00
be9b1ac24e
chore(deps): renovate 2025-06-08
...
chore(deps): update media containers
chore(deps): update netbird
chore(deps): update netbird
chore(deps): update dependency cert-manager/cert-manager to v1.17.2
chore(deps): update helm release authelia to v0.10.11
chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.62
chore(deps): update helm release node-feature-discovery to v0.17.3
chore(deps): update helm release argo-cd to v7.9.1
chore(deps): update cilium to v1.17.4
chore(deps): update ghcr.io/authelia/authelia docker tag to v4.39.4
chore(deps): update helm release argo-cd to v8
chore(deps): update helm release cloudnative-pg to v0.24.0
chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v73
chore(deps): update ghcr.io/home-operations/qbittorrent docker tag to v5.1.0
chore(deps): update ghcr.io/advplyr/audiobookshelf docker tag to v2.24.0
chore(deps): update cloudflare/cloudflared docker tag to v2025.5.0
chore(deps): update registry.k8s.io/git-sync/git-sync docker tag to v4.4.1
chore(deps): update proxmox-csi-plugin docker tag to v0.3.7
chore(deps): update sealed-secrets docker tag to v2.5.13
chore(deps): update intel device plugins to v0.32.1
chore(deps): update terraform talos to v0.8.1 (#324 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update terraform kubernetes to v2.37.1 (#322 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update terraform proxmox to v0.78.1 (#323 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-06-08 22:23:30 +02:00
Vegard Hagen
1fbe9fb6bd
feat(auth): add custom user properties for audiobookshelf
...
Add custom user schema in LLDAP which maps to a custom attribute in
Authelia which we then again map to a custom claim which we include in a
custom scope which audiobookshelf requests
Signed-off-by: Vegard Hagen <[email protected]
2025-05-03 19:15:27 +02:00
Vegard Hagen
e0fdbafa35
feat(authelia): add audiobookshelf OIDC client
...
Signed-off-by: Vegard Hagen <[email protected]
2025-05-03 11:47:25 +02:00
Vegard Hagen
481b224f22
feat(authelia): upgrade to 4.39 and fix OIDC configuration
...
Signed-off-by: Vegard Hagen <[email protected]
2025-03-30 15:48:12 +02:00
Vegard Hagen
84d86e3880
fix(authelia): downgrade authelia
...
Signed-off-by: Vegard Hagen <[email protected]
2025-03-24 18:02:14 +01:00
Vegard Hagen
51910d0e36
fix(authelia): new config parameters after update
2025-03-24 15:03:17 +01:00
9d7325498a
chore(deps): renovate 2025-03-24
...
chore(deps): update helm release cert-manager to v1.17.1 (#216 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update terraform proxmox to v0.73.2 (#218 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v69.8.2 (#219 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release crossplane to v1.19.0 (#220 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update media containers (#221 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update netbird (#222 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update netbirdio/relay docker tag to v0.39.1 (#223 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release authelia to v0.10.4 (#224 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update cilium to v1.17.2 (#225 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update cloudflare/cloudflared docker tag to v2025.2.1 (#240 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update dependency crossplane-contrib/function-auto-ready to v0.4.2 (#241 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update dependency crossplane-contrib/function-go-templating to v0.9.2 (#242 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.59 (#243 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release argo-cd to v7.8.13 (#244 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release cloudnative-pg to v0.23.2 (#245 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update helm release node-feature-discovery to v0.17.2 (#246 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update keycloak docker tag to v24.4.13 (#247 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update sealed-secrets docker tag to v2.5.7 (#248 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update dependency crossplane-contrib/provider-keycloak to v1.13.0 (#249 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update ghcr.io/authelia/authelia docker tag to v4.39.1 (#250 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update terraform kubernetes to v2.36.0 (#251 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update dependency crossplane-contrib/provider-keycloak to v2 (#252 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
chore(deps): update ghcr.io/prometheus-community/charts/kube-prometheus-stack docker tag to v70 (#253 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-03-24 12:17:36 +01:00
Vegard Hagen
d523d128c4
fix(authelia): disable html emails
2025-01-26 18:10:36 +01:00
Vegard Hagen
a7ea9468e8
feat(authelia): use ldaps with lldap
...
this is kind of a pointless change, but kinda cool to try
2025-01-19 13:41:43 +01:00
Vegard Hagen
7a949afadd
feat(authelia): add smtp integration
2025-01-18 14:45:28 +01:00
Vegard Hagen
d816953b98
feat(authelia): harden oidc clients
2025-01-11 10:43:34 +01:00
Vegard Hagen
ae355bb427
fix(netbird): clean up configuration
2025-01-10 21:34:06 +01:00
Vegard Hagen
c483d0fa5a
feat(netbird): change oidc provider to authelia
...
This makes it possible to decommission keycloak and crossplane
2025-01-09 19:26:27 +01:00
Vegard Hagen
3c2c08b367
fix(authelia): clean up values-file
2025-01-06 20:33:26 +01:00
Vegard Hagen
ce5fc25504
feat(authelia): use a cnpg managed db
...
use a database for presistent storage of users and sessions
2025-01-06 20:14:45 +01:00
renovate[bot] and Vegard Hagen
132df0aeda
chore(deps): renovate 2025-01-03
...
chore(deps): update netbird
chore(deps): update keycloak docker tag to v24.3.2
chore(deps): update ghcr.io/authelia/authelia docker tag to v4.38.18
chore(deps): update proxmox-csi-plugin docker tag to v0.3.1
chore(deps): update helm release argo-cd to v7.7.12
2025-01-03 15:50:26 +01:00
Vegard Hagen
e48986a5a2
feat(authelia): add kubectl oidc account
2024-12-01 22:33:36 +01:00
renovate[bot] and Vegard Hagen
d898ef76e9
chore(deps): renovate bonanza
...
chore(deps): update helm release intel-device-plugins-operator to v0.31.1
chore(deps): update helm release intel-device-plugins-gpu to v0.31.1
chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.53
chore(deps): update sealed-secrets docker tag to v2.4.9
chore(deps): update ghcr.io/lldap/lldap docker tag to v2024-11-04-debian-rootless
chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.54
chore(deps): update cloudflare/cloudflared docker tag to v2024.11.0
chore(deps): update ghcr.io/authelia/authelia docker tag to v4.38.17
chore(deps): update helm release authelia to v0.9.9
chore(deps): update helm release cert-manager to v1.16.1
chore(deps): update dependency cilium/cilium to v1.16.3
chore(deps): update dependency intel/intel-device-plugins-for-kubernetes to v0.31.1
chore(deps): update helm release cloudnative-pg to v0.22.1
chore(deps): update dependency umputun/remark42 to v1.14.0
chore(deps): update helm release node-feature-discovery to v0.16.6
chore(deps): update terraform talos to v0.6.1
chore(deps): update dependency siderolabs/talos to v1.8.2
chore(deps): update terraform proxmox to v0.66.3
chore(deps): update helm release argo-cd to v7.7.0
chore(deps): update terraform kubernetes to v2.33.0
chore(deps): update registry.k8s.io/git-sync/git-sync docker tag to v4.3.0
chore(deps): update docker.io/mvance/unbound docker tag to v1.22.0
chore(deps): update helm release crossplane to v1.18.0
chore(deps): update media containers
chore(deps): update netbird
chore(deps): update ghcr.io/onedr0p/qbittorrent docker tag to v5
chore(deps): update helm release coturn to v1
chore(config): migrate config renovate.json
2024-11-17 17:03:35 +01:00
Vegard Hagen
0c19b80b75
feat(authelia): add "optional" secrets in config
2024-11-17 17:03:35 +01:00
Vegard Hagen
403d32b9ed
feat(authelia): make cert-manager generate jwks
2024-11-17 17:03:35 +01:00
Vegard Hagen
8d8e0ca87a
fix(authelia): add access_control policy rule
2024-11-17 17:03:34 +01:00
renovate[bot] and Vegard Hagen
d291132624
chore(deps): merge renovate PRs
...
chore(deps): update netbird
chore(deps): update helm release crossplane to v1.17.1
chore(deps): update media containers
chore(deps): update dependency crossplane-contrib/function-auto-ready to v0.3.0
chore(deps): update helm release argo-cd to v7.6.8
chore(deps): update ghcr.io/lldap/lldap docker tag to v2024-10-10-debian-rootless
chore(deps): update proxmox-csi-plugin docker tag to v0.2.13
chore(deps): update ghcr.io/authelia/authelia docker tag to v4.38.16
chore(deps): update terraform proxmox to v0.66.1
chore(deps): update terraform talos to v0.6.0
chore(deps): update dependency cilium/cilium to v1.16.2
chore(deps): update dependency siderolabs/talos to v1.8.1
2024-11-17 17:03:34 +01:00
Vegard Hagen
6d137906d1
feat(authelia): add ES256 jwk and use it
2024-11-17 17:03:34 +01:00
Vegard Hagen
9a92b48c97
feat(authelia): enable 2FA
2024-11-17 17:03:33 +01:00
Vegard Hagen
d077f4b035
feat(authelia): add ES256 jwk
2024-11-17 17:03:33 +01:00
Vegard Hagen
e0ce01c80f
fix(oidc): conceal jwks signing key
2024-11-17 17:03:33 +01:00
Vegard Hagen
53855a6d27
fix(oidc): conceal argo cd client secret
2024-11-17 17:03:33 +01:00
Vegard Hagen
86395edc1f
feat(authelia): add Argo CD client
2024-11-17 17:03:33 +01:00
Vegard Hagen
c88403691b
feat(lldap): create and use own authelia user
2024-11-17 17:03:33 +01:00
Vegard Hagen
ba69146b4b
feat(auth): add Authelia for OIDC
...
Use Authelia in an attempt to replace Keycloak. Kanidm is another alternative we're going to try later.
2024-11-17 17:03:33 +01:00
Vegard Hagen