100 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
2martens	2eda7a069c	fix: Remove references to swarm cluster	2026-02-07 15:15:52 +01:00
2martens	8df1269161	Remove test cluster	2026-02-07 15:13:30 +01:00
2martens	4fa8671713	change: Add timetable roles to token	2025-08-11 08:33:04 +02:00
2martens	3d86b0be81	change: Add two roles for active/personal plan	2025-08-11 08:31:53 +02:00
2martens	0c1fade445	security: Enable PKCE for wahlrecht frontend	2025-08-11 08:01:32 +02:00
2martens	c6595c281e	security: Enable PKCE for timetable frontend	2025-08-11 08:01:04 +02:00
2martens	7052c933fe	fix: Don't change values of full scope allowed and use refresh tokens	2025-08-10 08:08:13 +02:00
2martens	adc9dac006	change: Add role mapper for view-profile to timetable frontend ... change: Import account and view-profile	2025-08-10 08:05:46 +02:00
2martens	0cf6717f84	fix: Add missing steps to complete certificate sync	2025-08-04 23:15:39 +02:00
2martens	578c0a079a	fix: Add debug output of rsync	2025-08-04 22:56:54 +02:00
2martens	8086d6e712	fix: Copy the entire letsencrypt directory	2025-08-04 22:54:36 +02:00
2martens	93e3872b4f	fix: Add missing setup for known hosts	2025-08-04 22:36:29 +02:00
2martens	3a6b841724	change: Set up certsync on renewal ... change: Remove volume	2025-08-04 21:50:44 +02:00
2martens	ebdb3ef549	fix: Reference correct file	2025-08-04 20:25:30 +02:00
2martens	88345e348a	refactor: Remove not referenced nginx config	2025-08-04 20:23:12 +02:00
2martens	d41d2cc825	feat: Add certificate volume to each manager node	2025-08-04 20:22:55 +02:00
2martens	b9cfec8de7	docs: Update docs with more manual steps to be done	2025-08-03 17:32:42 +02:00
2martens	1abc318582	change: Create /var/www/certbot on every manager node	2025-08-03 17:19:58 +02:00
2martens	d51e870e50	change: Only install certbot on main manager node	2025-08-03 16:53:37 +02:00
2martens	141c9931c6	change: Only install certbot on manager nodes	2025-08-03 16:40:11 +02:00
2martens	fc8244c51b	change: Remove resource that changes every time and isn't productive anyway	2025-08-03 16:25:52 +02:00
2martens	5c70a1f9c2	change: Remove private network for load balancer	2025-08-03 16:23:07 +02:00
2martens	733922872a	change: Add labels to load balancer	2025-08-03 16:22:11 +02:00
2martens	d23e3c1575	fix: Consider count for output	2025-08-03 16:08:30 +02:00
2martens	f9a0305328	change: Add rdns for load balancer	2025-08-03 16:06:01 +02:00
2martens	8a9691d7a5	fix: Make sure load balancer does not terminate TLS	2025-08-03 15:58:12 +02:00
2martens	2d43a1b169	change: Use public ip for targets	2025-08-03 15:56:29 +02:00
2martens	9d2e0d186d	change: Provide output about loadbalancer	2025-08-03 15:53:46 +02:00
2martens	abfd364f21	fix: Provide only location	2025-08-03 15:48:57 +02:00
2martens	0d6ffcc3e1	fix: Use correct ip for load balancer	2025-08-03 15:46:11 +02:00
2martens	071087648c	change: Remove devops resource	2025-08-03 15:42:59 +02:00
2martens	b91eaed4b2	docs: Add documentation for docker-cluster module	2025-08-03 15:40:55 +02:00
2martens	90de6441d6	fix: Use element function for its index overshoot capability	2025-08-03 15:24:49 +02:00
2martens	8a4f2c6e1c	change: Add outputs for all worker nodes as well	2025-08-03 15:21:17 +02:00
2martens	0a851ca2aa	fix: Remove all K8s related resources	2025-08-03 15:19:44 +02:00
2martens	a36372d24a	fix: Removed invalid fields	2025-08-03 15:18:45 +02:00
2martens	236085d805	fix: Fix duplicate name	2025-08-03 15:17:22 +02:00
2martens	c76e7a2c78	change: Add services for load balancer and move configuration into separate file	2025-08-03 15:16:08 +02:00
2martens	18fafac60f	change: Remove monitoring and test cluster	2025-08-03 15:06:07 +02:00
2martens	eba8edf610	change: Add support for manager and worker nodes in Docker swarm ... change: Extract port 80/443 to separate firewalls	2025-08-03 15:05:35 +02:00
2martens	04c967100e	fix: Remove certbot renewal ... Renewal is already created by installation of certbot package	2025-08-02 22:11:12 +02:00
2martens	06bbac8ee7	change: Add certbot renewal cronjob	2025-08-02 22:08:38 +02:00
2martens	fa5832dcdd	fix: Add certbot package	2025-08-02 22:01:50 +02:00
2martens	0d96b7741f	fix: Add github user to allowed SSH users	2025-08-02 21:16:01 +02:00
2martens	e3710c333c	fix: Add docker group	2025-08-02 20:51:50 +02:00
2martens	ece3a51097	fix: Add user for GitHub Actions	2025-08-02 20:41:36 +02:00
2martens	76acc6e772	fix: Limit ports to appropriate protocols	2025-08-02 20:35:15 +02:00
2martens	18a1d1ee0b	fix: Open port 2377 only on manager nodes	2025-08-02 20:25:11 +02:00
2martens	3f80ccd2e4	fix: Add rules to allow traffic for the overlay network	2025-08-02 20:24:04 +02:00
2martens	f02f9d1ab9	fix: Add rule to allow port 2377 to the private node ip	2025-08-02 20:18:22 +02:00
2martens	2c54e216e7	change: Add output swarm_nodes	2025-08-02 20:11:56 +02:00
2martens	3e31f54216	change: Add admin user to docker group	2025-08-02 20:02:45 +02:00
2martens	cf87dbaea7	fix: Remove no longer required microk8s group	2025-08-02 20:01:30 +02:00
2martens	1c2e906604	fix: Add missing path to template file	2025-08-02 20:00:45 +02:00
2martens	d76f375564	feat: Add swarm cluster for test stage	2025-08-02 19:57:37 +02:00
2martens	a2256dbdb0	Finish docker network module	2025-08-02 19:48:07 +02:00
2martens	85c40c5644	refactor: Add template language to the template file name	2025-07-28 21:59:18 +02:00
2martens	fc52f66a55	feat: Add module for docker-network (WIP) ... Adds a first draft of a module for a docker network. Outstanding: Nginx configuration.	2025-07-28 21:58:29 +02:00
2martens	a9c081b13f	ci: Limit to main branch [ci-skip]	2025-07-27 16:43:43 +02:00
2martens	5660957da6	ci: Prevent terraform apply from failing the job	2025-07-27 16:39:16 +02:00
2martens	61469a8366	style: Apply terraform fmt	2025-07-27 16:32:10 +02:00
2martens	078b6b1786	ci: Use static path for working directory	2025-07-27 16:30:54 +02:00
2martens	9e9295e93a	ci: Rename variable	2025-07-27 16:28:59 +02:00
2martens	689b801e29	ci: Move defaults to correct place	2025-07-27 16:27:48 +02:00
2martens	456a59f662	ci: Add working directory to workflow	2025-07-27 16:25:40 +02:00
2martens	53416d1db6	ci: Add workflow for Terraform	2025-07-27 16:22:42 +02:00
2martens	2025eb86a6	change: Enable refresh tokens for grafana and switch to PUBLIC with pkce	2025-07-26 16:20:45 +02:00
2martens	3a0fa35c25	fix: Remove useless redirect uri	2025-07-26 15:25:52 +02:00
2martens	45953eb8c5	fix: Allow login redirect uri	2025-07-26 15:22:05 +02:00
2martens	240eab65ff	change: Remove authorization from wahlrecht	2025-07-26 15:14:50 +02:00
2martens	cb6f5533ac	fix: Add client roles to grafana	2025-07-26 15:13:57 +02:00
2martens	811ad23801	fix: Add authorization support to wahlrecht backend client	2025-07-26 14:05:09 +02:00
2martens	8a8fd21fb3	fix: Add missing redirect urls	2025-07-26 13:55:04 +02:00
2martens	f8b78b6060	fix: Disable full scope for all clients	2025-07-26 13:50:08 +02:00
2martens	e2217b7979	feat: Add wahlrecht client	2025-07-26 13:47:17 +02:00
2martens	e3ca8ca210	feat: Create grafana client	2025-07-26 12:33:14 +02:00
2martens	e00cbe1f61	fix: Avoid duplicate resources	2025-07-26 12:09:19 +02:00
2martens	d047b7add9	feat: Add client for ArgoCD in monitoring cluster	2025-07-26 11:44:57 +02:00
2martens	bffcb00607	style: Apply terraform fmt	2025-07-26 11:29:37 +02:00
2martens	c85371bc94	fix: Disable full path of group mapper ... style: Apply terraform fmt	2025-07-26 11:29:01 +02:00
2martens	884accdb5f	feat: Add group membership mapper and groups claim and scope	2025-07-26 11:22:47 +02:00
2martens	d1af8fc009	feat: Add ArgoCDAdmins group	2025-07-26 11:05:49 +02:00
2martens	b703b4365e	fix: Change argocd-test-oauth client to CONFIDENTIAL	2025-07-26 11:00:34 +02:00
2martens	e287e89005	feat: Add client for ArgoCD test cluster	2025-07-26 10:53:17 +02:00
2martens	31bf728054	fix: Use twomartens as realm	2025-07-26 10:43:49 +02:00
2martens	801ae0ce11	fix: Use localhost:4200 as allowed redirect url	2025-06-30 21:04:06 +02:00
2martens	8bdfe8b4d0	fix: Add localhost:4200 as allowed frame ancestors	2025-06-30 20:57:22 +02:00
2martens	6255bc58ec	feat: Add wahlrecht client	2025-06-30 19:54:05 +02:00
2martens	e990c3ed0d	change: Use plus for web origin	2025-03-20 13:27:05 +01:00
2martens	b006cc492c	fix: Update CSP and add valid redirect uris	2025-03-20 13:25:38 +01:00
2martens	1a9dc2ff81	feat: Add tsw-timetable-frontend client and update CSP	2025-03-20 12:45:15 +01:00
2martens	cdfbc1393d	fix: Use existing options	2025-02-02 10:32:10 +01:00
2martens	5569c38d44	security: Revoke refresh tokens on first use and prevent duplicate authenticator registrations	2025-02-02 10:29:01 +01:00
2martens	f6bc5331c6	Add web origins for Nextcloud	2025-02-02 10:18:17 +01:00
2martens	cdd342b283	Allow post logout uri	2025-02-02 10:13:02 +01:00
2martens	5f5bfd37b6	fix: Remove duplicate variable declaration	2025-02-02 10:03:59 +01:00
2martens	b3c0d68496	fix: Ternary expression does not allow linebreak	2025-02-02 10:02:52 +01:00
2martens	3245216061	Add nextcloud client	2025-02-02 09:58:22 +01:00
2martens	03daaec508	fix: Add missing variables	2025-01-28 10:46:08 +01:00
2martens	af646cccba	feat: Add Gitea client	2025-01-28 10:43:01 +01:00