32 Commits

Author	SHA1	Message	Date
renovate[bot]	d898ef76e9	chore(deps): renovate bonanza ... chore(deps): update helm release intel-device-plugins-operator to v0.31.1 chore(deps): update helm release intel-device-plugins-gpu to v0.31.1 chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.53 chore(deps): update sealed-secrets docker tag to v2.4.9 chore(deps): update ghcr.io/lldap/lldap docker tag to v2024-11-04-debian-rootless chore(deps): update docker.io/adguard/adguardhome docker tag to v0.107.54 chore(deps): update cloudflare/cloudflared docker tag to v2024.11.0 chore(deps): update ghcr.io/authelia/authelia docker tag to v4.38.17 chore(deps): update helm release authelia to v0.9.9 chore(deps): update helm release cert-manager to v1.16.1 chore(deps): update dependency cilium/cilium to v1.16.3 chore(deps): update dependency intel/intel-device-plugins-for-kubernetes to v0.31.1 chore(deps): update helm release cloudnative-pg to v0.22.1 chore(deps): update dependency umputun/remark42 to v1.14.0 chore(deps): update helm release node-feature-discovery to v0.16.6 chore(deps): update terraform talos to v0.6.1 chore(deps): update dependency siderolabs/talos to v1.8.2 chore(deps): update terraform proxmox to v0.66.3 chore(deps): update helm release argo-cd to v7.7.0 chore(deps): update terraform kubernetes to v2.33.0 chore(deps): update registry.k8s.io/git-sync/git-sync docker tag to v4.3.0 chore(deps): update docker.io/mvance/unbound docker tag to v1.22.0 chore(deps): update helm release crossplane to v1.18.0 chore(deps): update media containers chore(deps): update netbird chore(deps): update ghcr.io/onedr0p/qbittorrent docker tag to v5 chore(deps): update helm release coturn to v1 chore(config): migrate config renovate.json	2024-11-17 17:03:35 +01:00
Vegard Hagen	4dd769fdf7	feat: add extra admin user	2024-11-17 17:03:35 +01:00
Vegard Hagen	0c19b80b75	feat(authelia): add "optional" secrets in config	2024-11-17 17:03:35 +01:00
Vegard Hagen	403d32b9ed	feat(authelia): make cert-manager generate jwks	2024-11-17 17:03:35 +01:00
Vegard Hagen	8d8e0ca87a	fix(authelia): add access_control policy rule	2024-11-17 17:03:34 +01:00
renovate[bot]	d291132624	chore(deps): merge renovate PRs ... chore(deps): update netbird chore(deps): update helm release crossplane to v1.17.1 chore(deps): update media containers chore(deps): update dependency crossplane-contrib/function-auto-ready to v0.3.0 chore(deps): update helm release argo-cd to v7.6.8 chore(deps): update ghcr.io/lldap/lldap docker tag to v2024-10-10-debian-rootless chore(deps): update proxmox-csi-plugin docker tag to v0.2.13 chore(deps): update ghcr.io/authelia/authelia docker tag to v4.38.16 chore(deps): update terraform proxmox to v0.66.1 chore(deps): update terraform talos to v0.6.0 chore(deps): update dependency cilium/cilium to v1.16.2 chore(deps): update dependency siderolabs/talos to v1.8.1	2024-11-17 17:03:34 +01:00
Vegard Hagen	6d137906d1	feat(authelia): add ES256 jwk and use it	2024-11-17 17:03:34 +01:00
Vegard Hagen	9a92b48c97	feat(authelia): enable 2FA	2024-11-17 17:03:33 +01:00
Vegard Hagen	d077f4b035	feat(authelia): add ES256 jwk	2024-11-17 17:03:33 +01:00
Vegard Hagen	e0ce01c80f	fix(oidc): conceal jwks signing key	2024-11-17 17:03:33 +01:00
Vegard Hagen	53855a6d27	fix(oidc): conceal argo cd client secret	2024-11-17 17:03:33 +01:00
Vegard Hagen	86395edc1f	feat(authelia): add Argo CD client	2024-11-17 17:03:33 +01:00
Vegard Hagen	c88403691b	feat(lldap): create and use own authelia user	2024-11-17 17:03:33 +01:00
Vegard Hagen	ba69146b4b	feat(auth): add Authelia for OIDC ... Use Authelia in an attempt to replace Keycloak. Kanidm is another alternative we're going to try later.	2024-11-17 17:03:33 +01:00
renovate[bot]	d6d5a2ad02	chore(deps): merge renovate PRs ... chore(deps): update terraform restapi to v1.20.0 chore(deps): update cloudflare/cloudflared docker tag to v2024.9.1 chore(deps): update terraform proxmox to v0.64.0 chore(deps): update keycloak docker tag to v22.2.3 chore(deps): update sealed-secrets docker tag to v2.4.6 chore(deps): update ghcr.io/lldap/lldap docker tag to v2024-09-11 chore(deps): update media containers chore(deps): update terraform talos to v0.6.0-beta.0 chore(deps): update helm release argo-cd to v7.5.2 chore(deps): update helm release crossplane to v1.17.0	2024-11-17 17:03:32 +01:00
Vegard Hagen	ddb7f0fd9f	feat(lldap): bootstrap lldap users with script	2024-11-17 17:03:32 +01:00
Vegard Hagen	2a3f01736d	feat(ldap): add lldap as ldap server	2024-11-17 17:03:32 +01:00
renovate[bot]	cb1c2cdebb	chore(deps): merge renovate PRs ... chore(deps): update netbird to v0.28.9 chore(deps): update netbirdio/management docker tag to v0.28.9 chore(deps): update netbirdio/netbird docker tag to v0.28.9 chore(deps): update netbirdio/signal docker tag to v0.28.9 chore(deps): update cloudflare/cloudflared docker tag to v2024.8.3 chore(deps): update ghcr.io/onedr0p/radarr docker tag to v5.9.1 chore(deps): update ghcr.io/onedr0p/plex docker tag to v1.40.5.8897-e5987a19d chore(deps): update helm release argo-cd to v7.4.5 chore(deps): update terraform proxmox to v0.63.0 chore(deps): update dependency corewire/images/crossplane/function-keycloak-builtin-objects to v3 chore(deps): update keycloak docker tag to v22.1.3 chore(deps): update ghcr.io/jellyfin/jellyfin docker tag to v10.9.10 chore(deps): update proxmox-csi-plugin docker tag to v0.2.9	2024-11-17 17:03:31 +01:00
Vegard Hagen	505a18cf38	fix(netbird): use internal dns to resolve auth admin-endpoint to internal gateway	2024-11-17 17:03:31 +01:00
renovate[bot]	101b19a729	chore(deps): update keycloak docker tag to v22.1.2	2024-11-17 17:03:30 +01:00
Vegard Hagen	91e389dc0e	fix(netbird): allow required endpoint from keycloak	2024-11-17 17:03:30 +01:00
Vegard Hagen	9a7894a7ab	feat(vpn): split gateway into external and internal services	2024-11-17 17:03:30 +01:00
Vegard Hagen	0e0a356fd1	fix(oidc): add 'basic' scope to netbird client and update keycloak ... Change in Keycloak 25.0.0 https://www.keycloak.org/docs/25.0.0/upgrading/\#new-default-client-scope-basic Thanks to Olav 14dac2b576	2024-11-17 17:03:30 +01:00
Vegard Hagen	0048da7ffa	chore(oidc): collect all oidc-clients under keycloak	2024-11-17 17:03:29 +01:00
Vegard Hagen	d79f57efd3	chore(ingress): remove all ingress resources in favour of http-routes	2024-11-17 17:03:29 +01:00
renovate[bot]	89c0a27364	chore(deps): merge renovate PRs ... chore(deps): update helm release node-feature-discovery to v0.16.4 chore(deps): update helm release argo-cd to v7.4.3 chore(deps): update keycloak docker tag to v22.1.1 chore(deps): update dependency umputun/remark42 to v1.13.1 chore(deps): update cloudflare/cloudflared docker tag to v2024.8.2 chore(deps): update ghcr.io/jellyfin/jellyfin docker tag to v10.9.9 chore(deps): update ghcr.io/onedr0p/sonarr docker tag to v4.0.8 chore(deps): update ghcr.io/onedr0p/prowlarr docker tag to v1.21.2 fix(renovate): explicitly set versioning scheme for plex chore(deps): update ghcr.io/onedr0p/radarr docker tag to v5.8.3 chore(deps): update dependency cilium/cilium to v1.16.1 chore(deps): update terraform kubernetes to v2.32.0 chore(deps): update ghcr.io/onedr0p/plex docker tag to v1.40.5.8854-f36c552fd chore(deps): update helm release cilium to v1.16.1	2024-11-17 17:03:28 +01:00
renovate[bot]	42c7fe1e12	chore(deps): merge renovate PRs ... chore(deps): update helm release argo-cd to v7.4.2 chore(deps): update sealed-secrets docker tag to v2.4.5 chore(deps): update terraform proxmox to v0.62.0 chore(deps): update keycloak docker tag to v22 chore(deps): update helm release cilium to v1.16.0 chore(deps): update dependency cilium/cilium to v1.16.0 chore(deps): update helm release cert-manager to v1.15.2	2024-11-17 17:03:27 +01:00
Vegard Hagen	1c602200c7	chore(pv): consistent naming scheme	2024-11-17 17:03:27 +01:00
Vegard Hagen	69d56e8e71	feat: install Netbird as a VPN solution ... Also configure Netbird OIDC client in Keycloak using Crossplane	2024-11-17 17:03:27 +01:00
Vegard Hagen	4cb40d3282	feat: configure keycloak using crossplane provider	2024-11-17 17:03:26 +01:00
Vegard Hagen	76ab7a71a2	feat: add crossplane.io ... Planning to use Crossplane to declaratively create OIDC-clients for Keycloak	2024-11-17 17:03:26 +01:00
Vegard Hagen	628bdb53d6	feat(auth): add keycloak for auth	2024-11-17 17:03:26 +01:00