Commit Graph
100 Commits
Author SHA1 Message Date
kjeld Schouten-Lebbing 311c4c832c (tests) Allow for Charts to be flagged for skipping install tests 2021-10-10 15:06:42 +02:00
kjeld Schouten-Lebbing ba0c1e7dd6 Create blank VPN setup quick-start page 2021-10-10 14:47:31 +02:00
kjeld Schouten-Lebbing 0c326bae02 (chore) remove sogo 2021-10-10 13:14:51 +02:00
Kjeld Schouten-LebbingandGitHub 3cd8efc2b6 (feat) Update Apps to use common-postgresql hooks (#1114)
* (feat) bump common to use new common postgresql-hooks

* bump postgresql as well

* bump yet again

* also process gitea

* sogo

* also add adaptations to gitea

* bump postgresql

* bump postgresql yet again

* revert central defined existing secret

* bump common... again

* bumps

* fix vaultwarden

* encode authelia dbpassword secret correctly

* remove useless container from nextcloud config

* some cleanup

* use lookup to grab the secret for authelia

* try getting authelia to work

* Fix quoting issues for autheliadb
2021-10-10 01:20:01 +02:00
kjeld Schouten-Lebbing 0e44b3bd97 (fix) add Nextcloud's prefered database url to common 2021-10-10 00:32:53 +02:00
kjeld Schouten-Lebbing 83c294e272 bump common on postgresql 2021-10-10 00:07:28 +02:00
kjeld Schouten-Lebbing 799baea4dc seperate setup and post-setup to prevent double setup runs on common chart 2021-10-10 00:03:07 +02:00
kjeld Schouten-Lebbing fbb340e2d0 (chore) restructure common setup templates 2021-10-09 23:43:48 +02:00
kjeld Schouten-Lebbing e94d170c09 actually bump postgresql, damnit 2021-10-09 23:13:19 +02:00
kjeld Schouten-Lebbing 8f2f877825 (chore) Bump postgresql again to try to get things working correctly. 2021-10-09 23:12:15 +02:00
kjeld Schouten-Lebbing d97a4b1f28 (chore) bump common on postgresql 2021-10-09 22:18:15 +02:00
kjeld Schouten-Lebbing 567342d8db (fix) enforce using an existing secret for common postgresql-hooks 2021-10-09 21:18:17 +02:00
kjeld Schouten-Lebbing 247a2d8fa8 (chore) bump common on postgresql 2021-10-09 20:56:44 +02:00
Kjeld Schouten-LebbingandGitHub 2679fc1108 (feat) move postgresql init and password-generator to common (#1113)
* Move Postgresql initcontainer to common

* bump common

* Handle postgres password generation in common and inject into values.yaml for use in Apps

* (refactor) adapt apps using postgresql to common init and password generator

* no message
2021-10-09 19:24:45 +02:00
kjeld Schouten-Lebbing 453b5d421e (fix) use loose versioning for calibre using renovate 2021-10-05 13:01:58 +02:00
Kjeld Schouten-LebbingandGitHub f28e149fb4 (chore) Move more questions.yaml content to includes (#1101)
* (chore) add more includes and include processing

* fully edit airsonic

* move serviceExpert to include (except host-network)

* Move default ingress settings to include
2021-10-05 12:50:21 +02:00
kjeld Schouten-Lebbing 31b983923f (chore) update common on postgresql 2021-10-05 11:57:31 +02:00
kjeld Schouten-Lebbing 1a56f70074 (fix) correct zwavejs2mqtt failing catalogtest 2021-10-05 11:52:06 +02:00
kjeld Schouten-Lebbing a18622f4a8 Nuke PGID and UMASK as it's managed by next common 2021-10-05 00:51:58 +02:00
Kjeld Schouten-LebbingandGitHub 6b96a3662c (feat) allow for the default middlewares to be disabled on ingress. (#1096)
* Edit common to allow for the default middlewares to be disabled on ingress.

* add it on all apps as an expert option

* fix hostPath mistake in tests while at it
2021-10-05 00:39:13 +02:00
Kjeld Schouten-LebbingandGitHub a507264642 (fix) always mount /tmp as emptydir by default for readOnlyRootFilesystem (#1094) 2021-10-04 14:04:02 +02:00
kjeld Schouten-Lebbing 400e0c8a0f (fix) Allow privilage escalation on Pihole 2021-10-04 13:52:17 +02:00
Kjeld Schouten-LebbingandGitHub 1d94d2e7bb (chore) standardise resources (#1093) 2021-10-04 13:46:38 +02:00
Kjeld Schouten-LebbingandGitHub 2b6ba98a6b (chore) move standardised env-vars to include (#1092)
* intial work on moving fixed envs to include

* add include to release scripting
2021-10-04 13:27:12 +02:00
Kjeld Schouten-LebbingandGitHub 308ba8accf (feat) Dynamically set PGID, GID and GROUP_ID (#1091)
* base PGID on fsGroup

* also remove PGID from questions.yaml

* remove mistake

* small fix

* fix first test

* fix linting

* always set PUID to 568

* use quotes for env vars (obviously)
2021-10-04 12:31:56 +02:00
kjeld Schouten-Lebbing 1a7a85d772 (docs) correct linking guide 2021-10-03 23:47:19 +02:00
kjeld Schouten-Lebbing 2328c146d8 (fix) move scale changelog to app-changelog to prevent filling SCALE folder for non SCALE charts 2021-10-03 23:15:29 +02:00
kjeld Schouten-Lebbing 5cf6e66887 (fix) enhance release-script appVersion generator 2021-10-03 23:11:23 +02:00
Kjeld Schouten-LebbingandGitHub f3c62cd686 remove crooked test (+1 squashed commits) (#1087)
Squashed commits:

[a5217867f] (fix) ensure that ports are valid before trying to use them for setting the capability
2021-10-03 16:29:41 +02:00
Kjeld Schouten-LebbingandGitHub 0c3e9d2baa (feat) automaticly set NET_BIND_SERVICE based on (target)port in services (#1085) 2021-10-03 15:17:55 +02:00
kjeld Schouten-Lebbing 71341bb6c6 (docs) document double clearly why pterodactyl is not going to be added. 2021-10-02 20:52:22 +02:00
kjeld Schouten-Lebbing 1cea2e74c0 (docs) sort Nicolaswilde charts in App requests 2021-10-02 20:47:20 +02:00
kjeld Schouten-Lebbing 0d78a9be25 (docs) work a bit on app request title structure 2021-10-02 19:49:46 +02:00
kjeld Schouten-Lebbing b9c93da84b (docs) fix an issue where App request crosses aren't rendered propperly 2021-10-02 19:47:19 +02:00
kjeld Schouten-Lebbing 667ac60137 remove stupid duplicate app request list 2021-10-02 19:44:09 +02:00
kjeld Schouten-Lebbing b76ef1a8a5 Some more docs polish 2021-10-02 19:43:13 +02:00
kjeld Schouten-Lebbing fa96d3265f Migrate app requests to docs 2021-10-02 19:31:59 +02:00
kjeld Schouten-Lebbing d7b10df93c (docs) remove old incubator docs 2021-10-02 19:30:45 +02:00
kjeld Schouten-Lebbing 59a8d8423d (fix) correct case on Traefik customRequestHeaders in middleware 2021-10-02 10:32:09 +02:00
Kjeld Schouten-LebbingandGitHub 8b65797b12 give gitea user more permissions over /data (#1077) 2021-10-01 23:27:25 +02:00
kjeld Schouten-Lebbing abee34bac6 (feat) force STS when using Traefik globally and set x-forwarded-proto 2021-10-01 21:56:20 +02:00
Kjeld Schouten-LebbingandGitHub 5e920673a8 (fix) correct authForwardHeader lists on Traefik (#1073) 2021-10-01 20:01:58 +02:00
kjeld Schouten-Lebbing 049cb18b5c (chore) move gitea to stable 2021-10-01 16:48:00 +02:00
kjeld Schouten-Lebbing c73f6ee0fe (chore) bump gitea to test tag generation before moving to stable 2021-10-01 16:35:55 +02:00
kjeld Schouten-Lebbing 0953bc3308 (ci) deal with text after version number on tags 2021-10-01 16:35:09 +02:00
kjeld Schouten-Lebbing 73a6120831 (fix) bump gitea to (re)trigger release 2021-10-01 16:15:58 +02:00
kjeld Schouten-Lebbing c19860919b (fix) Don't force password complexity on gitea 2021-10-01 16:05:52 +02:00
kjeld Schouten-Lebbing 00bea44bc9 add some polish and patches to gitea 2021-10-01 15:34:05 +02:00
Kjeld Schouten-LebbingandGitHub 51e6678dd7 (feat) Add Gitea (#1061)
* Initial Gitea App

* use the correct nodeport and document ports
2021-10-01 14:20:59 +02:00
kjeld Schouten-Lebbing d459a2e745 (chore) decrease timeout for chart install testing to 4 minutes. 2021-10-01 14:04:12 +02:00
kjeld Schouten-Lebbing 67edb6be56 (fix) correct some indent mistakes and add s6 mitigation to calibre 2021-09-29 17:38:27 +02:00
kjeld Schouten-Lebbing 7600caaba0 (fix) simplify and correct openvpn VPN_AUTH envvar generation 2021-09-29 17:32:24 +02:00
kjeld Schouten-Lebbing e1ffb00eba (fix) adapt Apps for new way of dealing with readonlyroot on S6(ish) containers 2021-09-29 16:36:34 +02:00
kjeld Schouten-Lebbing 2480afdf9b (fix) correct mistake in addons include 2021-09-29 16:20:11 +02:00
Kjeld Schouten-LebbingandGitHub cfdffdb3be (feat) add CodeServer addon and addon improvements (#1059)
* simplify addons to not require manually entered volumemounts, just mount them all.

* simplify addons

* cleanup promtail and codeserver

* fix mistake in codeserver

* try to add codeserver runtest

* add netshoot runtest

* fix codeserver ports

* different codeserver port for integrationt est

* bump common
2021-09-29 15:10:26 +02:00
Kjeld Schouten-LebbingandGitHub 2b5fe533f6 (feat) Add Promtail and Netshoot addons (#1058)
* add promtail addon

* Add Netshoot addon

* update common to include envList for addons

* Add basic promtail and netshoot unittests
2021-09-29 14:18:57 +02:00
Kjeld Schouten-LebbingandGitHub 868e487085 (tests) Add more common tests (#1057)
* create extra runtest

* some cleanup

* more cleanup tries

* emptydirmounts

* tmp123

* set labels and add ingress testing sequence

* spaces and duplicates

* don't probe the ingress variant

* limit to one hostpath

* Revert "don't probe the ingress variant"

This reverts commit ff31689c79e4ef6d5fa4909d268b785668ac1b60.
2021-09-29 13:44:02 +02:00
kjeld Schouten-Lebbing a008a19157 disable varrun memory mount by default 2021-09-29 13:41:17 +02:00
kjeld Schouten-Lebbing 5aa477cc59 (docs) restructuring some old docs and moving dev container docs back to ruby 2021-09-29 12:47:48 +02:00
kjeld Schouten-Lebbing 33e7fc8b17 Improve devcontainer UX 2021-09-29 12:33:07 +02:00
Kjeld Schouten-LebbingandGitHub 1bbc0989fd (tests) add basic VPN and code-server addon unittests (#1054)
* add basic VPN and code-server addon unittests

* also run common test suit on test changes
2021-09-29 00:56:39 +02:00
Kjeld Schouten-LebbingandGitHub 88b1719d32 done (+42 squashed commit) (#1053)
Squashed commit:

[8058e6aba] 1 error left

[b0157b252] 2 errors

[7fa494907] 4 errors

[03139391e]  6 failures, 4 errors

[7f017ea23] 12 errors

[3e9ad758d] 0 failures, 13 errors

[e24a3cb3e] 3 failures, 13 errors

[6edcaa655] 4 failures 14 errors

[9623bda57] 6 failures, 13 errors

[04c35c995] 4 failed 22 errors

[5f5335c15] 9 failures

[9a33540e2] down to 20 failures

[0e7b73b49] remove old tests

[5cc6d11b7] fixup the resources

[8c508d45a] some more progress

[4acef3c3b] some more work

[85cdb5d06] some ports cleanup

[1987ac2ec] lint before unit

[6fa221789] enable unit tests

[c212b695d] other name

[b78594518] common test name fix

[ef6597e79] indent

[8cbcfb5e4] common test rename

[1ca838c16] seperate common tests

[ef052b022] create two seperate job for common testing

[67eb0e9b3] use devcontainer for release shizzle

[0c47c482b] make it a sudo

[4d8900b16] force install jq

[9660cdd47] try something else

[e2b611917] bump common to run tests (to fix them)

[277241bbf] only use the new devcontainer for the release tests for now...

[9c7b68e0f] Revert "remove setup chart testing action"

This reverts commit 6987914587a58ab5a52a05b836d60ef91f1619d5.

[444914311] Revert "use integrated k3d"

This reverts commit d9bcb2f35d154b0afe1eb851729c37789b6ba0ea. (+6 squashed commit)

Squashed commit:

[313446184] Revert "correct k3s version"

This reverts commit 81fa8a43c41c2449b7411e0d59a3c2bbe0aef1ea.

[41b4d4795] Revert "version name tryout"

This reverts commit bbb8dcead9f9426872390b8f89b1fd0e661534bb.

[b64df97a0] Revert "change version"

This reverts commit 8080395dc80e606769ad9790b35d35fac4d1d3ed.

[ed63220d4] Revert "use k3s kubectl"

This reverts commit ea81735d939e838ad595835ea09b54bff817dd83.

[6267a2908] Revert "use normal kubectl"

This reverts commit 216d3799111d47f65dd20dd85ccb8fbc586a9c2b.

[f48ddde73] Revert "try to set kubectl context"

This reverts commit a5e8a532c5620e0d9d4cb7a53a371ba200265612.

[a5e8a532c] try to set kubectl context

[216d37991] use normal kubectl

[ea81735d9] use k3s kubectl

[8080395dc] change version

[bbb8dcead] version name tryout

[81fa8a43c] correct k3s version

[d9bcb2f35] use integrated k3d

[698791458] remove setup chart testing action

[5bd7cf01d] bump common-test
2021-09-29 00:11:52 +02:00
kjeld Schouten-Lebbing d16997b5e3 restructure workflows to use the devcontainer as well 2021-09-28 16:00:20 +02:00
kjeld Schouten-Lebbing 77a67ccc29 Use repository for devcontainer storage 2021-09-28 15:41:31 +02:00
kjeld Schouten-Lebbing f9b83010ea relayer devcontainer dockerfile 2021-09-28 15:23:53 +02:00
kjeld Schouten-Lebbing 2d29ac576f fix the devcontainer 2021-09-28 15:11:33 +02:00
Kjeld Schouten-LebbingandGitHub 79a0923eb6 (tests) move back to ruby based tests (#1051)
* (tests) move back to ruby based tests

* move workflow back to using Ruby
2021-09-28 15:11:36 +02:00
kjeld Schouten-Lebbing bb925e2707 (fix) correct Unifi permissions 2021-09-28 10:08:17 +02:00
kjeld Schouten-Lebbing 79bcf70157 (fix) ignore the varrun mitigation for more apps and cleanup hiding it 2021-09-27 00:52:13 +02:00
kjeld Schouten-Lebbing a907339220 (fix) repair mistakes in the var/run/ compatibility code for some apps 2021-09-27 00:49:15 +02:00
kjeld Schouten-Lebbing 5c210883ac (fix) Bump master to fix bug when enabling vpn and/or custom storage 2021-09-27 00:28:20 +02:00
kjeld Schouten-Lebbing 9b9bd5f8e6 (fix) update common to try to patch VPN issues 2021-09-26 22:53:27 +02:00
kjeld Schouten-Lebbing 3dd449cc8e (fix) correct autopermissions indent error in common 2021-09-26 22:37:15 +02:00
Kjeld Schouten-LebbingandGitHub 8418b3e7e7 (chore) increase default resource limits (#1036) 2021-09-26 20:49:03 +02:00
Kjeld Schouten-LebbingandGitHub bd3b29a278 (docs) add system requirements (#1035) 2021-09-26 20:48:50 +02:00
Kjeld Schouten-LebbingandGitHub 68a5032dad (chore) move resource(limits) to an include for easier maintenance (#1034) 2021-09-26 20:44:02 +02:00
acf510ea13 (feat) Standardise and Harden default app securitycontext (#1028)
* Apply security hardened defaults to values.yaml for all apps

* Add default common securityContext to all apps

* Adjust securityContext defaults in questions.yaml, according to values.yaml

* Add default common podSecurityContext to all apps

* Clean whitespace

* Clean more whitespace

* Adjust podSecurityContext defaults in questions.yaml, according to values.yaml

* fix pgadmin

Co-authored-by: Stavros kois <s.kois@outlook.com>
2021-09-26 20:05:21 +02:00
kjeld Schouten-Lebbing 665d7282df revert /var/run mount fix on common 2021-09-26 12:08:10 +02:00
Kjeld Schouten-LebbingandGitHub 744d8060b9 (chore) bump common to trigger release 2021-09-26 11:40:37 +02:00
kjeld Schouten-Lebbing 842cf0a65f (chore) also use s6 readonlyroot mitigation when running asNonRoot 2021-09-26 11:20:08 +02:00
kjeld Schouten-Lebbing 4076def32a (fix) limit the varrun emptyDir to s6 overlay related content 2021-09-26 11:19:35 +02:00
kjeld Schouten-Lebbing a8dd9ecc19 (fix) use the correct initcontainer for postgresql on scale 2021-09-26 10:53:36 +02:00
kjeld Schouten-Lebbing 7d74eaeffb (fix) use correct username for fireflyiii db-init container 2021-09-26 10:50:48 +02:00
Kjeld Schouten-LebbingandGitHub 4ea3185e38 add a special /var/run tmpfs mountpoint to common (#1032)
* add a special /var/run tmpfs mountpoint to common

* common-test version in tests fix
2021-09-25 20:31:39 +02:00
kjeld Schouten-Lebbing 961b2bfbc3 bump common 2021-09-25 19:34:45 +02:00
Kjeld Schouten-LebbingandGitHub d9dffc7952 fix common test mistake (#1031)
* fix common test mistake

* configfile.enabled

* VPN auto permissions fix

* trigger common-test install

* more thorough fix

* fix test to use sonarr instead of homerr

* use a super simple container

* try tweaking a bit to allow run as nonroot

* try fixing tests

* fix tests... again...

* fix... AGAIN...
2021-09-25 19:23:43 +02:00
Kjeld Schouten-LebbingandGitHub 37963de155 Add ReadOnlyRoot mitigation for S6 overlay (#1030)
* Add ReadOnlyRoot mitigation for S6 overlay

* try to fix some tests
2021-09-25 15:11:51 +02:00
Kjeld Schouten-LebbingandGitHub 2db56c1e42 Fix remaining VPN addon issues (#1029)
* Fix remaining VPN addon issues

* fix minor common-test issue
2021-09-25 14:40:14 +02:00
kjeld Schouten-Lebbing 483d29ee0e harden default security options for common 2021-09-25 12:10:24 +02:00
Kjeld Schouten-LebbingandGitHub daab1ec475 Update README.md 2021-09-24 16:31:46 +02:00
kjeld Schouten-Lebbing 45db136a31 update Apps wishlist 2021-09-23 13:18:20 +02:00
Kjeld Schouten-LebbingandGitHub e1d694ddf6 Update bug_report.md 2021-09-20 11:39:54 +02:00
Kjeld Schouten-LebbingandGitHub cee9745ac9 Update bug_report.md 2021-09-20 11:39:22 +02:00
kjeld Schouten-Lebbing 0e99d95c94 fix: ensure traefik TLSOPtions get rendered correctly 2021-09-16 22:19:12 +02:00
kjeld Schouten-Lebbing 87ea7d6ad5 add portal example incubator app 2021-09-16 12:10:12 +02:00
kjeld Schouten-Lebbing 4fffe01d1f fix small mistake in pihole demo 2021-09-16 11:33:11 +02:00
kjeld Schouten-Lebbing 0cfdf38090 add admin portal example to pihole app (wont show on current version of SCALE) 2021-09-16 11:26:07 +02:00
Kjeld Schouten-LebbingandGitHub 0fb8f8bb90 fix: make sure autopermissions sets the group owner correctly (#994)
* fix: make sure autopermissions sets the group owner correctly

* add test fix
2021-09-14 23:59:19 +02:00
kjeld Schouten-Lebbing 742137951f fix: fix authelia being broken 2021-09-14 20:15:48 +02:00
kjeld Schouten-Lebbing 725aa5c6b6 fix: ensure oidc keys get generated on existing authelia installations 2021-09-14 17:52:28 +02:00