Commit Graph

Select branches

Hide Pull Requests

feature/keycloak-service-account-client

feature/xwiki-auth-oidc

master

#3

#4

#5

Mono Color

• d61c81634c Add Joomla CLI paths and implement non-interactive admin password reset via CLI master Kevin Veen-Birkenbach 2025-10-30 18:11:18 +01:00
• 265f815b48 Optimized Listmonk and Nextcloud CSP for hcaptcha Kevin Veen-Birkenbach 2025-10-30 16:02:09 +01:00
• f8e5110730 Add Redis readiness check before Nextcloud upgrade and add retry logic for maintenance repair Kevin Veen-Birkenbach 2025-10-30 15:36:00 +01:00
• 37b213f96a Refactor XWiki OIDC activation to use REST-based authenticationService update (reliable alternative to Groovy) — see ChatGPT discussion: https://chatgpt.com/share/69005d88-6bf8-800f-af41-73b0e5dc9c13 Kevin Veen-Birkenbach 2025-10-29 11:12:19 +01:00
• 5ef525eac9 Optimized CSP for Gitlab Kevin Veen-Birkenbach 2025-10-28 08:26:04 +01:00
• 2f46b99e4e XWiki: add diagnostic and modern AuthService handling feature/xwiki-auth-oidc Kevin Veen-Birkenbach 2025-10-28 07:07:42 +01:00
• 295ae7e477 Solved Mediawiki CPS bug whichg prevented OIDC Login Kevin Veen-Birkenbach 2025-10-27 20:33:07 +01:00
• c67ccc1df6 Used path_join @ web-app-friendica Kevin Veen-Birkenbach 2025-10-26 15:48:28 +01:00
• cb483f60d1 optimized for easier debugging Kevin Veen-Birkenbach 2025-10-25 12:52:17 +02:00
• 2be73502ca Solved tests Kevin Veen-Birkenbach 2025-10-25 11:46:36 +02:00
• 57d5269b07 CSP (Safari-safe): merge -elem/-attr into base; respect explicit disables; no mirror-back; header only for documents/workers Kevin Veen-Birkenbach 2025-10-22 13:53:06 +02:00
• 1eefdea050 Solved CSP errors for MiniQR Kevin Veen-Birkenbach 2025-10-22 12:49:22 +02:00
• 561160504e Add new web-app-mini-qr role Kevin Veen-Birkenbach 2025-10-22 10:07:35 +02:00
• 9a4bf91276 feat(nextcloud): enable custom Alpine-based Whiteboard image with Chromium & ffmpeg support Kevin Veen-Birkenbach 2025-10-21 13:44:11 +02:00
• 468b6e734c Deactivated whiteboar Kevin Veen-Birkenbach 2025-10-20 21:17:06 +02:00
• 83cb94b6ff Refactored Redis resource include macro and increased memory limits Kevin Veen-Birkenbach 2025-10-20 20:08:38 +02:00
• 6857295969 Fix variable definition test to recognize block-style Jinja 'set ... endset' statements Kevin Veen-Birkenbach 2025-10-20 20:04:40 +02:00
• 8ab398f679 nextcloud:whiteboard: wait for Redis before start (depends_on: service_healthy) to prevent early SocketClosedUnexpectedlyError Kevin Veen-Birkenbach 2025-10-20 17:50:47 +02:00
• 31133ddd90 Enhancement: Fix for Nextcloud Whiteboard recording and collaboration server Kevin Veen-Birkenbach 2025-10-20 17:31:59 +02:00
• 783b1e152d Added numpy Kevin Veen-Birkenbach 2025-10-20 11:03:35 +02:00
• eca567fefd Made gitea LDAP Source primary domain independent Kevin Veen-Birkenbach 2025-10-18 10:54:39 +02:00
• 905f461ee8 Add basic healthcheck to oauth2-proxy container template using binary version check for distroless compatibility Kevin Veen-Birkenbach 2025-10-18 10:52:58 +02:00
• 9f0b259ba9 Merge branch 'master' of github.com:kevinveenbirkenbach/infinito-nexus Kevin Veen-Birkenbach 2025-10-18 09:41:18 +02:00
• 06e4323faa Added ansible environmnet Kevin Veen-Birkenbach 2025-10-17 23:07:23 +02:00
• 3d99226f37 Refactor BigBlueButton and backup task structure: - Moved database seed variables from vars/main.yml to task-level include in BigBlueButton - Simplified core include logic in sys-ctl-bkp-docker-2-loc - Ensured clean conditional for BKP_DOCKER_2_LOC_DB_ENABLED See: https://chatgpt.com/share/68f216f7-62d8-800f-94e3-c82e4418e51b (deutsch) Kevin Veen-Birkenbach 2025-10-17 12:14:39 +02:00
• 73ba09fbe2 Optimize SSH connection performance by disabling GSSAPI authentication and reverse DNS lookups Kevin Veen-Birkenbach 2025-10-15 18:37:09 +02:00
• 01ea9b76ce Enable pipelining globally and modernize SSH settings Kevin Veen-Birkenbach 2025-10-15 17:45:16 +02:00
• c22acf202f Solved bugs Kevin Veen-Birkenbach 2025-10-15 17:03:57 +02:00
• 61e138c1a6 Optimize OpenLDAP container resources for up to 5k users (1.25 CPU / 1.5GB RAM / 1024 PIDs). See https://chatgpt.com/share/68ef7228-4028-800f-8986-54206a51b9c1 Kevin Veen-Birkenbach 2025-10-15 12:06:51 +02:00
• 07c8e036ec Deactivated change when because its anyhow not trackable Kevin Veen-Birkenbach 2025-10-15 10:27:12 +02:00
• 0b36059cd2 feat(web-app-gitea): add optional Redis integration for caching, sessions, and queues Kevin Veen-Birkenbach 2025-10-15 10:20:18 +02:00
• d76e384ae3 Enhance CertUtils to return the newest matching certificate and add comprehensive unit tests Kevin Veen-Birkenbach 2025-10-15 09:21:00 +02:00
• e6f4f3a6a4 feat(cli/build/defaults): ensure deterministic alphabetical sorting for applications and users Kevin Veen-Birkenbach 2025-10-15 09:04:39 +02:00
• a80b26ed9e Moved bbb database seeding Kevin Veen-Birkenbach 2025-10-15 08:50:21 +02:00
• 45ec7b0ead Optimized include text Kevin Veen-Birkenbach 2025-10-15 08:39:37 +02:00
• ec396d130c Optimized time schedule Kevin Veen-Birkenbach 2025-10-15 08:37:51 +02:00
• 93c2fbedd7 Added setting of timezone Kevin Veen-Birkenbach 2025-10-15 02:24:25 +02:00
• d006f0ba5e Optimized schedule Kevin Veen-Birkenbach 2025-10-15 02:13:00 +02:00
• dd43722e02 Raised memory for baserow Kevin Veen-Birkenbach 2025-10-14 21:59:10 +02:00
• 05d7ddc491 svc-bkp-rmt-2-loc: migrate pull script to Python + add unit tests; lock down backup-provider ACLs Kevin Veen-Birkenbach 2025-10-14 20:10:49 +02:00
• e54436821c Refactor sys-front-inj-all dependencies handling Kevin Veen-Birkenbach 2025-10-14 19:27:56 +02:00
• ed73a37795 Improve get_app_conf robustness and add skip_missing_app parameter support Kevin Veen-Birkenbach 2025-10-14 17:25:37 +02:00
• adff9271fd Solved rmt backup bugs Kevin Veen-Birkenbach 2025-10-14 16:29:42 +02:00
• 2f0fb2cb69 Merged network definitions before application definitions Kevin Veen-Birkenbach 2025-10-14 15:52:28 +02:00
• 6abf2629e0 Removed false - Kevin Veen-Birkenbach 2025-10-13 19:03:23 +02:00
• 6a8e0f38d8 fix(web-svc-collabora): add required Docker capabilities and resource limits for Collabora Jails Kevin Veen-Birkenbach 2025-10-13 15:52:50 +02:00
• ae618cbf19 refactor(web-app-desktop, web-app-discourse): improve initialization handling and HTTP readiness check Kevin Veen-Birkenbach 2025-10-13 15:48:26 +02:00
• c835ca8f2c refactor(front-injection): stabilize run_once flow and explicit web-service loading Kevin Veen-Birkenbach 2025-10-13 15:12:23 +02:00
• 087175a3c7 Solved mailu token bug Kevin Veen-Birkenbach 2025-10-13 10:50:59 +02:00
• 3da645f3b8 Mailu/MSMTP: split token mgmt, idempotent reload, safer guards Kevin Veen-Birkenbach 2025-10-12 18:05:00 +02:00
• a996e2190f feat(logout): wire injector to web-svc-logout and add robust CORS/CSP for /logout Kevin Veen-Birkenbach 2025-10-12 16:16:47 +02:00
• 7dccffd52d Optimized variable whitespacing Kevin Veen-Birkenbach 2025-10-12 14:37:45 +02:00
• 853f2c3e2d Added mastodon to disc space cleanup script Kevin Veen-Birkenbach 2025-10-12 14:37:19 +02:00
• b2978a3141 Changed mailu token name Kevin Veen-Birkenbach 2025-10-12 14:36:13 +02:00
• 0e0b703ccd Added cleanup to mastodon Kevin Veen-Birkenbach 2025-10-12 14:03:28 +02:00
• 0b86b2f057 Set MODE_CLEANUP default true and solved tld localhost user name bug Kevin Veen-Birkenbach 2025-10-12 01:15:52 +02:00
• 80e048a274 Fix: make EspoCRM entrypoint POSIX-compliant and remove illegal 'pipefail' usage Kevin Veen-Birkenbach 2025-10-11 21:33:07 +02:00
• 2610aec293 Deactivated cakeday plugin because it's an onboard plugin Kevin Veen-Birkenbach 2025-10-11 18:23:38 +02:00
• 07db162368 Reformated navigation role Kevin Veen-Birkenbach 2025-10-11 18:04:58 +02:00
• a526d1adc4 Solved Keycloak Master Email Configuration Update settings Kevin Veen-Birkenbach 2025-10-11 16:57:36 +02:00
• ca95079111 Added Email Configuration for Keycloak Master Realm Kevin Veen-Birkenbach 2025-10-11 16:45:50 +02:00
• e410d66cb4 Add health check for Keycloak container and grant global 'admin' realm role to permanent admin user Kevin Veen-Birkenbach 2025-10-11 01:40:48 +02:00
• ab48cf522f fix(keycloak): make permanent admin creation idempotent and fix password command Kevin Veen-Birkenbach 2025-10-11 01:10:57 +02:00
• 41c12bdc12 Refactor Keycloak permanent admin creation: - Remove jq dependency to avoid container command errors - Use username-based operations instead of user ID lookups - Improve idempotency and portability across environments Kevin Veen-Birkenbach 2025-10-11 00:54:04 +02:00
• aae463b602 Optimized keycloak setup procedures Kevin Veen-Birkenbach 2025-10-11 00:20:27 +02:00
• bb50551533 Restrucutred keycloak accounts Kevin Veen-Birkenbach 2025-10-10 23:40:58 +02:00
• 098099b41e Refactored web-app-keycloak Kevin Veen-Birkenbach 2025-10-10 22:45:26 +02:00
• 0a7d767252 Added contains to filter Kevin Veen-Birkenbach 2025-10-10 13:55:50 +02:00
• d88599f76c Added 'to_nice_json' exception Kevin Veen-Birkenbach 2025-10-10 21:37:28 +02:00
• 6fcf6a1ab6 feat(keycloak): add automation service account client support feature/keycloak-service-account-client Kevin Veen-Birkenbach 2025-10-03 21:02:16 +02:00
• 4d9890406e fix(sys-ctl-hlth-csp): ensure '--' separator is added when passing ignore list to checkcsp Kevin Veen-Birkenbach 2025-10-03 20:50:49 +02:00
• 59b652958f feat(sys-ctl-hlth-csp): add support for ignoring network block domains Kevin Veen-Birkenbach 2025-10-03 15:23:57 +02:00
• a327adf8db Removed failing healthcheck Kevin Veen-Birkenbach 2025-10-02 20:02:10 +02:00
• 7a38cb90fb Added correct resources for baserow Kevin Veen-Birkenbach 2025-10-02 19:59:04 +02:00
• 9d6cf03f5b Fix: Replace unsupported /dev/tcp healthcheck with onboard PHP socket check for websocket service Kevin Veen-Birkenbach 2025-10-02 19:40:13 +02:00
• 9439ac7f76 fix(web-app-xwiki): raise XWiki container resources and align YAML formatting Kevin Veen-Birkenbach 2025-10-02 12:22:49 +02:00
• 23353ac878 infra(sys-service): centralize async control + pre-deploy backup safeguard Kevin Veen-Birkenbach 2025-10-02 11:58:23 +02:00
• 8beda2d45d fix(svc-db-postgres): pin Postgres version to 17-3.5, add entity_name var, and dynamically resolve major version for dev package Kevin Veen-Birkenbach 2025-10-02 11:07:17 +02:00
• 5773409bd7 Changed nextcloud domain to next.cloud.primary_domain Kevin Veen-Birkenbach 2025-10-02 09:19:32 +02:00
• b3ea962338 Implemented sleeping time for server Kevin Veen-Birkenbach 2025-10-02 09:08:32 +02:00
• b9fbf92461 proxy(cors): make ACAO opt-in; remove hardcoded default Kevin Veen-Birkenbach 2025-10-02 08:57:14 +02:00
• 6824e444b0 Changed bitnami images to legacy. See https://github.com/bitnami/containers/issues/83267. Kevin Veen-Birkenbach 2025-10-02 07:31:20 +02:00
• 5cdcc18a99 Fix PeerTube OIDC plugin automation Kevin Veen-Birkenbach 2025-10-01 14:23:07 +02:00
• e7702948b8 EspoCRM role: custom image + single data volume + runtime flag setter Kevin Veen-Birkenbach 2025-10-01 14:08:09 +02:00
• 09a4c243d7 Add centralized include for Access-Control-Allow headers across proxy/service Nginx templates and align ACA vars for simpleicons task. Kevin Veen-Birkenbach 2025-09-30 17:22:28 +02:00
• 1d5a50abf2 Optimized path building Kevin Veen-Birkenbach 2025-09-30 16:36:28 +02:00
• 0d99c7f297 Nextcloud: refactor Talk → HPB, switch to bridge mode, and template cleanups Kevin Veen-Birkenbach 2025-09-30 12:52:15 +02:00
• 0a17e54d8c Nextcloud: set conservative Docker resource limits and template cleanups Kevin Veen-Birkenbach 2025-09-30 11:54:14 +02:00
• bf94338845 Nextcloud/Nginx: wire Talk signaling WS location via reusable snippet Kevin Veen-Birkenbach 2025-09-30 11:17:54 +02:00
• 5d42b78b3d Nextcloud: extend CSP for Talk & disable keeporsweep Kevin Veen-Birkenbach 2025-09-30 11:15:32 +02:00
• 26a1992d84 Nextcloud/Talk: add Janus config & fix WebSocket proxying Kevin Veen-Birkenbach 2025-09-30 11:14:15 +02:00
• 2439beb95a Added correct minio http statuscodes Kevin Veen-Birkenbach 2025-09-29 17:29:29 +02:00
• 251f7b227d Add healthchecks for all Taiga services, fix RabbitMQ env var names, and define TAIGA_HOSTNAME Kevin Veen-Birkenbach 2025-09-29 17:09:42 +02:00
• 3fbb9c38a8 Solved coturn volume bug Kevin Veen-Birkenbach 2025-09-29 15:33:50 +02:00
• 29e8b3a590 Deactivated recording for Big Blue Button Kevin Veen-Birkenbach 2025-09-29 15:23:48 +02:00
• 27b89d8fb6 Taiga: refactor service naming & resource limits Kevin Veen-Birkenbach 2025-09-29 15:04:12 +02:00
• 55f2d15e93 Fix coturn container/volume separation: use COTURN_CONTAINER for container_name and map COTURN_VOLUME to /var/lib/coturn Kevin Veen-Birkenbach 2025-09-29 13:36:30 +02:00
• aa19a97ed6 CORS/CSP hardening & centralization Kevin Veen-Birkenbach 2025-09-29 12:23:58 +02:00
• c06d1c4d17 Refactor yay update handling: - Move AUR update task into dev-yay role - Centralize defaults (AUR_HELPER, AUR_BUILDER_USER, etc.) - Remove separate update-yay role (redundant) Kevin Veen-Birkenbach 2025-09-29 09:16:02 +02:00
• 66f294537d Replaced fixed 'web' service call for exec with 'ESPOCRM_SERVICE' variable for exec call Kevin Veen-Birkenbach 2025-09-28 15:52:44 +02:00