Commit Graph
100 Commits
Author SHA1 Message Date
Zack Pollard 4eed58c517 feat(tf): let cloudflare-pages-project set the analytics hostname separately (#1967) 2026-09-24 20:01:12 +01:00
Zack Pollard 7d6260397b fix(tf): use a range for random in the shared secrets module (#1966) 2026-09-24 12:07:21 +01:00
Zack Pollard 7d8a399696 fix(tf): pass the domain through to the pages domain module (#1931) 2026-09-05 15:23:47 +01:00
Zack Pollard c54baa2b17 chore(deps): update onepassword provider constraint to v3 in r2-bucket (#1901) 2026-08-06 14:38:18 +01:00
Zack Pollard 2a5eba534f chore(deps): allow grafana provider v4 in the shared module (#1899) 2026-08-06 13:40:26 +01:00
Zack Pollard 1ffba173d1 chore(deps): update onepassword provider constraint to v3 (#1900) 2026-08-06 13:40:08 +01:00
Zack Pollard e48f6aa2b5 feat(pre-job): expose persist-credentials as an input (#1898) 2026-08-06 09:52:56 +02:00
Zack Pollard 366e589a7f chore: remove terraform deployment migrated to core-infra-tf (#1896) 2026-08-05 11:17:50 +01:00
Zack Pollard bb911336ca feat(zizmor): apply default zizmor config if one doesn't exist (#1895) 2026-08-04 19:17:36 +01:00
Zack Pollard 203c5d39d8 fix(zizmor): fall back to annotations on private repos (#1894) 2026-08-04 18:18:09 +01:00
Zack Pollard 790bb9d318 feat(github): add private core-infra-tf repository (#1892) 2026-08-04 16:14:41 +00:00
Zack Pollard ea20fa64d7 fix(docker): temporarily exclude docker hub unit (#1893) 2026-08-04 16:07:18 +00:00
Zack Pollard e41a3d0358 fix(ci): stop managing org owners as repo collaborators (#1872) 2026-07-29 12:36:13 +00:00
Zack Pollard 8c732a2206 feat: add a dev OIDC application for survey previews (#1874) 2026-07-29 11:13:37 +00:00
Zack Pollard 8636c82c7c feat: add 1pass_connect_o11y_write connect token secret (#1875) 2026-07-29 12:00:02 +01:00
Zack Pollard 610482456a feat: add survey.immich.app OIDC application (#1873) 2026-07-28 17:45:43 +01:00
Zack Pollard 780e564b1c chore: retire the self-hosted zitadel (#1702) 2026-07-28 11:44:55 +00:00
Zack Pollard 0cad2c1d0f feat: add 1pass_tf_sa_o11y_read to o11y scoped secrets (#1850) 2026-07-23 18:35:56 +00:00
Zack Pollard 53b6c5fb07 fix: route zitadel connections through stable base domain (#1847) 2026-07-23 18:18:03 +00:00
Zack Pollard 42b8fb8763 feat: add zitadel base-domain 1password secrets (#1848) 2026-07-23 17:58:13 +01:00
Zack Pollard 5c092dd564 feat: grant futo the viewer role on grafana o11y (#1846) 2026-07-23 17:03:12 +01:00
Zack Pollard f85ab7a6ba feat: add mark to users (#1844) 2026-07-23 11:22:01 +00:00
Zack Pollard e11015a0aa fix: size replay remote-write queue for backfill bursts (#1840) 2026-07-21 13:07:57 +01:00
Zack Pollard 41513a4755 fix: use 'enabled' for the flux force annotation (#1839) 2026-07-21 11:58:59 +00:00
Zack Pollard a0dced3d17 fix: batch replay queries to fit vmsingle memory budget (#1838) 2026-07-21 11:17:15 +00:00
Zack Pollard fc69e6d804 feat: enable vmalert with version worker recording rules (#1825) 2026-07-21 11:41:37 +01:00
Zack Pollard d6ba394de1 feat: add 1pass connect secrets immich and yucca (#1798) 2026-07-10 10:56:08 +00:00
Zack Pollard 3fefe557c7 fix(zitadel): vendor ovhcloud saml sp metadata instead of fetching at plan time (#1799) 2026-07-10 11:45:46 +01:00
Zack Pollard 24c6fbaa8e chore: add futo users (#1797) 2026-07-09 22:57:50 +00:00
Zack Pollard 3b71b6f66c feat: mattermost zitadel oidc sso (#1796) 2026-07-09 18:55:16 +01:00
Zack Pollard a922cd2c66 feat: netbox secrets in shared vault (#1793) 2026-07-08 12:08:15 +00:00
Zack Pollard fe49a696b7 feat: netbox url secret (#1792) 2026-07-08 11:18:56 +00:00
Zack Pollard e93e230cdf fix: post terragrunt plan comment even when parsing fails (#1773) 2026-07-02 13:03:23 +02:00
Zack Pollard c497a2cdb8 chore: seed bunny.net api key in futo shared_tf vault (#1771) 2026-07-01 22:37:12 +01:00
Zack Pollard f5d959b023 fix: normalize customer auth cname target from secret (#1770) 2026-07-01 22:37:03 +01:00
Zack Pollard 49416b5ff0 fix: quote txt record content for futo cloudflare dns (#1761) 2026-07-01 22:11:23 +01:00
Zack Pollard a4c59b8d9f fix: extend zitadel session check lifetimes to 90 days (#1769) 2026-07-01 21:14:20 +01:00
Zack Pollard c5660eba3d feat: add auth.futo.cloud custom domain for prod customer zitadel (#1768) 2026-07-01 21:14:01 +01:00
Zack Pollard e3dd4f5819 feat: add futo_bootstrap cert-manager cloudflare token (#1762) 2026-06-30 22:47:44 +01:00
Zack Pollard af447d8ed1 feat: add fastmail dns records to futo cloudflare zones (#1759) 2026-06-30 19:17:33 +01:00
Zack Pollard 611e2ec4e5 feat: manage futo cloudflare account zones (#1757) 2026-06-30 18:55:22 +01:00
Zack Pollard 9c1b9d495d feat: add customer zitadel staging deployment (#1739) 2026-06-26 16:07:59 +01:00
Zack Pollard 807088544e feat: seed immich tf_staging vault for customer zitadel staging (#1736) 2026-06-26 15:39:44 +01:00
Zack Pollard 986c76b161 feat: add netbird terraform module (#1734) 2026-06-26 09:24:56 +01:00
Zack Pollard 94849269cb feat: add netbird tf pat to the futo shared_tf vault (#1733) 2026-06-25 17:25:50 +01:00
Zack Pollard f97ecf6510 feat: add netbird project to the internal zitadel for sso (#1730) 2026-06-25 15:42:52 +01:00
Zack Pollard 07be793408 fix: type-correct the customer zitadel device client and name it yucca orchestrator (#1728) 2026-06-24 18:53:48 +01:00
Zack Pollard 11312c1906 feat: add FUTO outline role + drive worker groups from the project keys (#1727) 2026-06-24 18:14:19 +01:00
Zack Pollard 7b2f160fb9 feat: mirror github app secrets to the futo shared_tf vault (#1723) 2026-06-24 16:03:24 +01:00
Zack Pollard 8694ca1133 feat: add futo backups redirect uri to the customer zitadel dev app (#1725) 2026-06-24 16:01:29 +01:00
Zack Pollard 9619968169 feat: mirror zitadel cloud oidc secrets to the futo shared_tf vault (#1722) 2026-06-24 12:47:42 +01:00
Zack Pollard 08747dab82 feat: brand the internal zitadel with FUTO styling (#1721) 2026-06-23 13:02:54 +00:00
Zack Pollard c0a068e835 feat: add tailscale oauth secrets to the yucca manual secrets (#1720) 2026-06-23 13:29:34 +01:00
Zack Pollard 6292fd9cf5 feat: add hetzner webservice API credentials to yucca secrets (#1703) 2026-06-22 15:26:42 +01:00
Zack Pollard 2057325ec6 feat: run outline-role-sync as a cloudflare worker (#1698) 2026-06-19 11:37:53 +01:00
Zack Pollard d5ba37bfd8 feat: add loopdedupe to the cloud zitadel (#1701) 2026-06-18 20:07:13 +02:00
Zack Pollard 4004e015e2 feat: add tailscale oauth secrets to the o11y manual secrets (#1700) 2026-06-18 18:42:59 +01:00
Zack Pollard ba2e18fe88 feat: migrate oauth2-proxy auth to the internal cloud zitadel (#1699) 2026-06-18 18:17:40 +01:00
Zack Pollard a094534eec feat: migrate containerssh auth to the internal cloud zitadel (#1697) 2026-06-18 12:24:01 +01:00
Zack Pollard 2a0f12c4ef chore: deno ci type checks and linting (#1694) 2026-06-17 17:04:15 +01:00
Zack Pollard 81b510a8ee feat: migrate prod and data grafana auth to the internal cloud zitadel (#1696) 2026-06-17 13:09:17 +01:00
Zack Pollard 480da58428 fix: allow email lookup for dev grafana oauth re-linking (#1695) 2026-06-17 13:03:15 +01:00
Zack Pollard 3cea508a52 feat: migrate dev grafana auth to the internal cloud zitadel (#1693) 2026-06-17 11:37:25 +00:00
Zack Pollard 8886ccff2d feat: add immich.ca domain to cloudflare (#1678) 2026-06-12 10:29:44 +00:00
Zack Pollard f3ab76dffa feat: support both github and gitlab logins to internal futo auth service (#1676) 2026-06-11 18:47:54 +01:00
Zack Pollard f627ff031f feat: add cloudflare account id and token to yucca secrets (#1643) 2026-05-28 16:03:30 +00:00
Zack Pollard 799d9b52f7 feat: futo customer auth zitadel IaC (#1525) 2026-04-23 19:05:36 +01:00
Zack Pollard 686f9317d6 feat: add futo discord (#1517) 2026-04-22 15:54:54 +01:00
Zack Pollard 9d02d06c06 feat: add immich discord role for employees (#1495) 2026-04-09 16:48:50 +01:00
Zack Pollard 7d776b9d0e fix: tune vmsingle resource limits and query settings (#1494) 2026-04-08 13:56:07 +02:00
Zack Pollard dcf5decf98 feat: add tigris write secrets to github actions for geoshenanigans (#1480) 2026-04-01 01:44:30 +00:00
Zack Pollard 5d02b075c6 feat(zitadel): gitlab oauth and role mapping (#1383) 2026-03-31 17:24:33 +01:00
Zack Pollard 18a296ac0f feat: add o11y 1pass connect credentials (#1478) 2026-03-31 13:03:18 +01:00
Zack Pollard 08c368e665 fix: edit existing terraform plan PR comment instead of posting new ones (#1464) 2026-03-30 15:26:18 +01:00
Zack Pollard 10aa7d9453 feat: add o11y 1password vaults to futo account module (#1463) 2026-03-30 12:42:35 +00:00
Zack Pollard 465ad6b9f2 feat: futo internal zitadel instance (#1415) 2026-03-26 19:23:26 +00:00
Zack Pollard d6597891f4 feat: add futo zitadel cloud profile json manual secret (#1462) 2026-03-26 18:57:39 +00:00
Zack Pollard e28d6eaced fix: strip hyphens from webhook id to match cloudflare api format (#1461) 2026-03-26 17:58:23 +00:00
Zack Pollard 464be4a34c feat: add terraform plan pr comments separated by module (#1460) 2026-03-26 17:45:38 +00:00
Zack Pollard 207d2f5432 chore: add 1password secrets for internal zitadel oauth (#1414) 2026-03-25 13:19:02 +00:00
Zack Pollard ed20786261 feat: add retro repository to github org and make it public (#1459) 2026-03-25 11:36:33 +00:00
Zack Pollard 402f24dfa4 feat: migrate 1pass provider to use connect server (#1454) 2026-03-24 18:57:48 +00:00
Zack Pollard 53cac29f46 fix: replace null_resource + local_file with external data source for cert conversion (#1455) 2026-03-24 17:52:25 +00:00
Zack Pollard be50f5fb82 fix(yucca): use object format for generated secret definition (#1457) 2026-03-24 17:52:16 +00:00
Zack Pollard e842c82ec6 feat: enable parallel requests for github provider (#1456) 2026-03-24 17:52:13 +00:00
Zack Pollard 065ec98688 fix: perpetual diff in github app secrets module (#1412) 2026-03-23 14:20:57 +00:00
Zack Pollard 838151963c feat: yucca secrets and secret module improvements (#1121) 2026-03-19 16:39:04 +00:00
Zack Pollard 6b628c37b3 fix: lelunz github username casing (#1411) 2026-03-19 09:44:59 +00:00
Zack Pollard 2e34b577cf feat: add yucca-slop repo and support private repos (#1385) 2026-03-06 15:48:53 +00:00
Zack Pollard 192105bfe9 chore: add secrets for upcoming gitLab oauth and outline-role-sync (#1382) 2026-03-05 03:38:23 +00:00
Zack Pollard dec3aa88ea feat(zitadel): ovh saml integration (#1380) 2026-03-04 13:58:39 +00:00
Zack Pollard e8632d8464 revert: remove OVH SAML integration accidentally merged into main (#1378) 2026-03-03 23:27:59 +00:00
Zack Pollard af99b19f90 feat(discord): grant pin_messages and bypass_slow_mode to privileged roles (#1377) 2026-03-03 16:21:34 +00:00
Zack Pollard 9ad2a628c6 chore: new yucca members should have team role (#1366) 2026-02-27 22:30:06 +00:00
Zack Pollard 6d38a5a718 feat: add new yucca team members (#1365) 2026-02-27 16:36:46 +00:00
Zack Pollard 0cd3e9e4f6 fix: discord terraform problems (#1364) 2026-02-27 15:58:54 +00:00
Zack Pollard 1bb2937da8 chore: add IMMICH_DISCORD_BOT_TOKEN to dev and prod environments (#1361) 2026-02-25 17:45:31 +00:00
Zack Pollard c177f944d4 chore: change ui library to MIT license (#1351) 2026-02-18 15:00:36 -06:00
Zack Pollard e050bed623 chore: update users.json (#1290) 2026-01-26 19:02:56 +00:00
Zack Pollard 62ec03b096 fix: revert "chore(deps): update terraform grafana to v4" (#1205) 2025-12-03 13:59:24 +00:00