Commit Graph
100 Commits
Author SHA1 Message Date
2martens e2217b7979 feat: Add wahlrecht client
continuous-integration/drone/push Build is passing
2025-07-26 13:47:17 +02:00
2martens e3ca8ca210 feat: Create grafana client
continuous-integration/drone/push Build is passing
2025-07-26 12:33:14 +02:00
2martens e00cbe1f61 fix: Avoid duplicate resources
continuous-integration/drone/push Build is passing
2025-07-26 12:09:19 +02:00
2martens d047b7add9 feat: Add client for ArgoCD in monitoring cluster
continuous-integration/drone/push Build is passing
2025-07-26 11:44:57 +02:00
2martens bffcb00607 style: Apply terraform fmt
continuous-integration/drone/push Build is passing
2025-07-26 11:29:37 +02:00
2martens c85371bc94 fix: Disable full path of group mapper
style: Apply terraform fmt
2025-07-26 11:29:01 +02:00
2martens 884accdb5f feat: Add group membership mapper and groups claim and scope
continuous-integration/drone/push Build is passing
2025-07-26 11:22:47 +02:00
2martens d1af8fc009 feat: Add ArgoCDAdmins group
continuous-integration/drone/push Build is passing
2025-07-26 11:05:49 +02:00
2martens b703b4365e fix: Change argocd-test-oauth client to CONFIDENTIAL
continuous-integration/drone/push Build is passing
2025-07-26 11:00:34 +02:00
2martens e287e89005 feat: Add client for ArgoCD test cluster
continuous-integration/drone/push Build is passing
2025-07-26 10:53:17 +02:00
2martens 31bf728054 fix: Use twomartens as realm 2025-07-26 10:43:49 +02:00
2martens 801ae0ce11 fix: Use localhost:4200 as allowed redirect url
continuous-integration/drone/push Build is passing
2025-06-30 21:04:06 +02:00
2martens 8bdfe8b4d0 fix: Add localhost:4200 as allowed frame ancestors
continuous-integration/drone/push Build is passing
2025-06-30 20:57:22 +02:00
2martens 6255bc58ec feat: Add wahlrecht client
continuous-integration/drone/push Build is passing
2025-06-30 19:54:05 +02:00
2martens e990c3ed0d change: Use plus for web origin
continuous-integration/drone/push Build is passing
2025-03-20 13:27:05 +01:00
2martens b006cc492c fix: Update CSP and add valid redirect uris 2025-03-20 13:25:38 +01:00
2martens 1a9dc2ff81 feat: Add tsw-timetable-frontend client and update CSP 2025-03-20 12:45:15 +01:00
2martens cdfbc1393d fix: Use existing options
continuous-integration/drone/push Build is failing
2025-02-02 10:32:10 +01:00
2martens 5569c38d44 security: Revoke refresh tokens on first use and prevent duplicate authenticator registrations 2025-02-02 10:29:01 +01:00
2martens f6bc5331c6 Add web origins for Nextcloud 2025-02-02 10:18:17 +01:00
2martens cdd342b283 Allow post logout uri 2025-02-02 10:13:02 +01:00
2martens 5f5bfd37b6 fix: Remove duplicate variable declaration 2025-02-02 10:03:59 +01:00
2martens b3c0d68496 fix: Ternary expression does not allow linebreak 2025-02-02 10:02:52 +01:00
2martens 3245216061 Add nextcloud client
continuous-integration/drone/push Build is failing
2025-02-02 09:58:22 +01:00
2martens 03daaec508 fix: Add missing variables
continuous-integration/drone/push Build is passing
2025-01-28 10:46:08 +01:00
2martens af646cccba feat: Add Gitea client 2025-01-28 10:43:01 +01:00
2martens 11dedb57c1 Remove old keycloak provider 2025-01-28 10:43:01 +01:00
2martens e98ad3ecfd Update providers 2025-01-28 10:43:00 +01:00
2martens 4e8bdbf2e4 feat: Setup GitHub as identity provider 2025-01-28 10:43:00 +01:00
2martens d72f58a97d change: Remove admin group 2025-01-28 10:43:00 +01:00
2martens dfb22ba7a3 feat: Add admin group 2025-01-28 10:43:00 +01:00
2martens 8a799fe55f fix: Use allowed realm name 2025-01-28 10:42:59 +01:00
2martens 2a20d3d505 feat: Add 2martens realm 2025-01-28 10:42:59 +01:00
2martens 7f87831117 Represent real-world changes 2025-01-28 10:42:59 +01:00
2martens d7676a4149 feat: Add Keycloak provider 2025-01-28 10:42:58 +01:00
2martens e2c439deef fix: Add missing records
continuous-integration/drone/push Build is passing
2024-09-04 21:14:50 +02:00
2martens 6f454397a7 fix: Use 2martens.cloud 2024-09-04 09:19:33 +02:00
2martens 9d40e2699a fix: Use correct domain for nameserver records 2024-09-04 09:07:36 +02:00
2martens 6ef68f47fa fix: Use correct NS for test
change: Remove 2martens.eu from domain test
change: Use 2martens.example for domain test
2024-09-04 09:02:48 +02:00
2martens b9ee24b516 fix: Use unique name for nameserver entry 2024-09-04 08:49:31 +02:00
2martens 2383874cf6 fix: Remove SOA records and add zone for 2martens.eu 2024-09-04 08:48:50 +02:00
2martens 1b7969bada fix: Remove outputs from domain-test 2024-09-04 08:46:46 +02:00
2martens 927eaad75b fix: Remove not required variables for domain test 2024-09-04 08:41:46 +02:00
2martens 82def8fc67 feat: Add domain-test for testing INWX changes 2024-09-04 08:38:51 +02:00
2martens 056e709c8d fix: Switch back to live system for terraform folder 2024-09-04 08:38:27 +02:00
2martens 7cf1e3a94c change: Add domain zone on nameserver 2024-09-04 07:55:37 +02:00
2martens 8b34a7f60c change: Use test instance of inwx 2024-09-04 07:55:28 +02:00
2martens 87b54361b4 fix: Removed resources for SOA and NS
continuous-integration/drone/push Build is passing
2024-09-02 17:17:11 +02:00
2martens 47004e40f9 fix: Remove inwx_nameserver as that breaks the apply
continuous-integration/drone/push Build is passing
2024-09-02 17:08:34 +02:00
2martens 5857697b5a chore: Cleared imports
continuous-integration/drone/push Build is passing
2024-09-02 17:05:58 +02:00
2martens ff9ce84fd0 chore: Attempt to import existing nameserver set
continuous-integration/drone/push Build is passing
2024-09-02 17:00:59 +02:00
2martens 2e0fa2e095 fix: Remove WHOIS protection 2024-09-02 16:52:38 +02:00
2martens a96bdd979a fix: Use correct syntax
continuous-integration/drone/push Build is passing
continuous-integration/drone Build is passing
2024-09-02 16:40:49 +02:00
2martens 7514828385 fix: Move whois_protection to domain
continuous-integration/drone/push Build is passing
2024-09-02 16:38:28 +02:00
2martens d911d83c9d chore: Add routing namespace
continuous-integration/drone/push Build is passing
2024-09-02 16:33:01 +02:00
2martens 729960b98c feat: Add nameserver resource 2024-09-02 16:32:47 +02:00
2martens 09c66dc28f chore: Bump inwx/inwx provider version 2024-09-02 16:32:33 +02:00
2martens d27da63ae0 Merge pull request #3 from 2martens/release-please--branches--main
continuous-integration/drone/push Build is passing
continuous-integration/drone Build was killed
chore(main): release 0.1.0
2024-02-05 20:02:06 +01:00
2martens 3c76ab99c5 chore: Add information in README 2024-02-05 20:00:46 +01:00
2martens a6ff89dd02 chore: Add support for Release please 2024-02-05 19:41:19 +01:00
2martens 5a599f1d28 chore: Move README to main directory 2024-02-05 19:40:52 +01:00
2martens 4ff702e1e9 chore: Add grafana subdomain
continuous-integration/drone/push Build is passing
2024-02-03 22:34:38 +01:00
2martens fe0442e4ba fix: Allow hcloud as namespace
continuous-integration/drone/push Build is passing
2024-02-03 21:47:01 +01:00
2martens 39c1d57b87 chore: Update inwx provider
continuous-integration/drone/push Build is passing
2024-02-03 19:42:48 +01:00
2martens 6be13eb12b chore: Update inwx provider
continuous-integration/drone/push Build is passing
2024-02-03 19:33:38 +01:00
2martens 4a09d2afbe feat: Add monitoring cluster
continuous-integration/drone Build is passing
2024-02-03 19:14:07 +01:00
2martens ab8ee17866 fix: Allow timetable namespace for vault 2024-02-03 19:13:46 +01:00
2martens 0f8e391fc9 chore: Add issue templates 2023-12-13 17:44:38 +01:00
2martens 115c5389c2 Ignore user_data again 2023-11-18 14:27:22 +01:00
2martens 7d16e04f5a Added resource requests and limits for argocd 2023-11-18 14:26:16 +01:00
2martens b9c91f9f97 No longer add network policies on cluster setup 2023-11-18 12:44:04 +01:00
2martens 795a5c65c0 Enabled chainingMode portmap 2023-11-18 11:14:04 +01:00
2martens 17cf774971 Allow VXLAN connectivity 2023-11-18 09:16:24 +01:00
2martens d2e00c33f3 Disable wellKnownIdentities 2023-11-18 09:16:12 +01:00
2martens e24558d102 Allow hcloud namespace for vault 2023-11-18 09:16:00 +01:00
2martens 575e61809b Don't include token via Terraform 2023-11-17 22:01:38 +01:00
2martens 8963cd7212 Properly configured thanos 2023-11-17 17:22:35 +01:00
2martens 7713371562 Fixed cluster-setup-values.yaml 2023-11-17 17:16:39 +01:00
2martens a564724199 Fixed microk8s config 2023-11-17 17:07:46 +01:00
2martens ba8a1553f5 Try installing kernel via packages in cloud init script 2023-11-17 17:04:33 +01:00
2martens 4f467da9a1 Added missing sysctl-setup.sh file 2023-11-17 16:58:41 +01:00
2martens b905091315 Removed invalid label 2023-11-17 16:48:08 +01:00
2martens bbb7a150ed Force recreate of manager node 2023-11-17 16:46:54 +01:00
2martens 332c62f6cd Use host network stack 2023-11-17 16:46:15 +01:00
2martens 28e8c821ff Enable cilium network policies for argocd and enabled ingress 2023-11-17 09:40:36 +01:00
2martens acf15da58c Enable host firewall and hubble relay/ui 2023-11-16 22:09:23 +01:00
2martens aa68fdbaf8 Don't use native routing 2023-11-16 21:50:22 +01:00
2martens b3f426aa60 Do not provide native routing cidr 2023-11-16 21:47:27 +01:00
2martens 50a7cef92f Enable masquerade to enable BPF host routing 2023-11-16 21:39:54 +01:00
2martens f922ff6ebc Removed labels 2023-11-16 14:34:06 +01:00
2martens 41812acd69 Add tag to network and subnet 2023-11-16 14:22:27 +01:00
2martens c5965ad7ab Add tag to servers 2023-11-16 14:19:36 +01:00
2martens 0c1ad0ff49 Use native routing 2023-11-15 23:12:33 +01:00
2martens e2db2e1278 Enable delete protection for network 2023-11-15 23:07:27 +01:00
2martens d7937de65f Removed ingress and cert-manager addons 2023-11-15 22:43:45 +01:00
2martens 40d94bc7e4 Correctly escape 2023-11-15 22:43:25 +01:00
2martens 29a9a8e1ba Escape $ symbol 2023-11-15 22:41:25 +01:00
2martens 71d95ebdf2 Install cilium directly from Helm, not as addon
Also install cert-manager directly from Helm to enable experimental Gateway API support.
2023-11-15 22:40:01 +01:00
2martens 1a2bb5adb3 Install newer kernel 2023-11-15 22:38:39 +01:00
2martens ebb20cfa01 Allow further ports required for metrics 2023-11-15 22:38:24 +01:00