Zack
252c9b99ab
feat(monitoring): add per-channel unique server recording rules
...
base marker and derived 24h unique count by release channel, backing
the new servers-by-channel dashboard panel. series begin when the
worker starts emitting the channel tag; replay configmap kept in sync
per the runbook (configmap-only change does not re-trigger the job)
2026-07-22 00:11:32 +01:00
Zack Pollard
e11015a0aa
fix: size replay remote-write queue for backfill bursts ( #1840 )
2026-07-21 13:07:57 +01:00
Zack Pollard
41513a4755
fix: use 'enabled' for the flux force annotation ( #1839 )
2026-07-21 11:58:59 +00:00
Zack Pollard
a0dced3d17
fix: batch replay queries to fit vmsingle memory budget ( #1838 )
2026-07-21 11:17:15 +00:00
Zack Pollard
fc69e6d804
feat: enable vmalert with version worker recording rules ( #1825 )
2026-07-21 11:41:37 +01:00
Zack Pollard
d6ba394de1
feat: add 1pass connect secrets immich and yucca ( #1798 )
2026-07-10 10:56:08 +00:00
Zack Pollard
3fefe557c7
fix(zitadel): vendor ovhcloud saml sp metadata instead of fetching at plan time ( #1799 )
2026-07-10 11:45:46 +01:00
Zack Pollard
24c6fbaa8e
chore: add futo users ( #1797 )
2026-07-09 22:57:50 +00:00
Zack Pollard
3b71b6f66c
feat: mattermost zitadel oidc sso ( #1796 )
2026-07-09 18:55:16 +01:00
Zack Pollard
a922cd2c66
feat: netbox secrets in shared vault ( #1793 )
2026-07-08 12:08:15 +00:00
Zack Pollard
fe49a696b7
feat: netbox url secret ( #1792 )
2026-07-08 11:18:56 +00:00
Zack Pollard
e93e230cdf
fix: post terragrunt plan comment even when parsing fails ( #1773 )
2026-07-02 13:03:23 +02:00
Zack Pollard
c497a2cdb8
chore: seed bunny.net api key in futo shared_tf vault ( #1771 )
2026-07-01 22:37:12 +01:00
Zack Pollard
f5d959b023
fix: normalize customer auth cname target from secret ( #1770 )
2026-07-01 22:37:03 +01:00
Zack Pollard
49416b5ff0
fix: quote txt record content for futo cloudflare dns ( #1761 )
2026-07-01 22:11:23 +01:00
Zack Pollard
a4c59b8d9f
fix: extend zitadel session check lifetimes to 90 days ( #1769 )
2026-07-01 21:14:20 +01:00
Zack Pollard
c5660eba3d
feat: add auth.futo.cloud custom domain for prod customer zitadel ( #1768 )
2026-07-01 21:14:01 +01:00
Zack Pollard
e3dd4f5819
feat: add futo_bootstrap cert-manager cloudflare token ( #1762 )
2026-06-30 22:47:44 +01:00
Zack Pollard
af447d8ed1
feat: add fastmail dns records to futo cloudflare zones ( #1759 )
2026-06-30 19:17:33 +01:00
Zack Pollard
611e2ec4e5
feat: manage futo cloudflare account zones ( #1757 )
2026-06-30 18:55:22 +01:00
Zack Pollard
9c1b9d495d
feat: add customer zitadel staging deployment ( #1739 )
2026-06-26 16:07:59 +01:00
Zack Pollard
807088544e
feat: seed immich tf_staging vault for customer zitadel staging ( #1736 )
2026-06-26 15:39:44 +01:00
Zack Pollard
986c76b161
feat: add netbird terraform module ( #1734 )
2026-06-26 09:24:56 +01:00
Zack Pollard
94849269cb
feat: add netbird tf pat to the futo shared_tf vault ( #1733 )
2026-06-25 17:25:50 +01:00
Zack Pollard
f97ecf6510
feat: add netbird project to the internal zitadel for sso ( #1730 )
2026-06-25 15:42:52 +01:00
Zack Pollard
07be793408
fix: type-correct the customer zitadel device client and name it yucca orchestrator ( #1728 )
2026-06-24 18:53:48 +01:00
Zack Pollard
11312c1906
feat: add FUTO outline role + drive worker groups from the project keys ( #1727 )
2026-06-24 18:14:19 +01:00
Zack Pollard
7b2f160fb9
feat: mirror github app secrets to the futo shared_tf vault ( #1723 )
2026-06-24 16:03:24 +01:00
Zack Pollard
8694ca1133
feat: add futo backups redirect uri to the customer zitadel dev app ( #1725 )
2026-06-24 16:01:29 +01:00
Zack Pollard
9619968169
feat: mirror zitadel cloud oidc secrets to the futo shared_tf vault ( #1722 )
2026-06-24 12:47:42 +01:00
Zack Pollard
08747dab82
feat: brand the internal zitadel with FUTO styling ( #1721 )
2026-06-23 13:02:54 +00:00
Zack Pollard
c0a068e835
feat: add tailscale oauth secrets to the yucca manual secrets ( #1720 )
2026-06-23 13:29:34 +01:00
Zack Pollard
6292fd9cf5
feat: add hetzner webservice API credentials to yucca secrets ( #1703 )
2026-06-22 15:26:42 +01:00
Zack Pollard
2057325ec6
feat: run outline-role-sync as a cloudflare worker ( #1698 )
2026-06-19 11:37:53 +01:00
Zack Pollard
d5ba37bfd8
feat: add loopdedupe to the cloud zitadel ( #1701 )
2026-06-18 20:07:13 +02:00
Zack Pollard
4004e015e2
feat: add tailscale oauth secrets to the o11y manual secrets ( #1700 )
2026-06-18 18:42:59 +01:00
Zack Pollard
ba2e18fe88
feat: migrate oauth2-proxy auth to the internal cloud zitadel ( #1699 )
2026-06-18 18:17:40 +01:00
Zack Pollard
a094534eec
feat: migrate containerssh auth to the internal cloud zitadel ( #1697 )
2026-06-18 12:24:01 +01:00
Zack Pollard
2a0f12c4ef
chore: deno ci type checks and linting ( #1694 )
2026-06-17 17:04:15 +01:00
Zack Pollard
81b510a8ee
feat: migrate prod and data grafana auth to the internal cloud zitadel ( #1696 )
2026-06-17 13:09:17 +01:00
Zack Pollard
480da58428
fix: allow email lookup for dev grafana oauth re-linking ( #1695 )
2026-06-17 13:03:15 +01:00
Zack Pollard
3cea508a52
feat: migrate dev grafana auth to the internal cloud zitadel ( #1693 )
2026-06-17 11:37:25 +00:00
Zack Pollard
8886ccff2d
feat: add immich.ca domain to cloudflare ( #1678 )
2026-06-12 10:29:44 +00:00
Zack Pollard
f3ab76dffa
feat: support both github and gitlab logins to internal futo auth service ( #1676 )
2026-06-11 18:47:54 +01:00
Zack Pollard
f627ff031f
feat: add cloudflare account id and token to yucca secrets ( #1643 )
2026-05-28 16:03:30 +00:00
Zack Pollard
799d9b52f7
feat: futo customer auth zitadel IaC ( #1525 )
2026-04-23 19:05:36 +01:00
Zack Pollard
686f9317d6
feat: add futo discord ( #1517 )
2026-04-22 15:54:54 +01:00
Zack Pollard
9d02d06c06
feat: add immich discord role for employees ( #1495 )
2026-04-09 16:48:50 +01:00
Zack Pollard
7d776b9d0e
fix: tune vmsingle resource limits and query settings ( #1494 )
2026-04-08 13:56:07 +02:00
Zack Pollard
dcf5decf98
feat: add tigris write secrets to github actions for geoshenanigans ( #1480 )
2026-04-01 01:44:30 +00:00
Zack Pollard
5d02b075c6
feat(zitadel): gitlab oauth and role mapping ( #1383 )
2026-03-31 17:24:33 +01:00
Zack Pollard
18a296ac0f
feat: add o11y 1pass connect credentials ( #1478 )
2026-03-31 13:03:18 +01:00
Zack Pollard
08c368e665
fix: edit existing terraform plan PR comment instead of posting new ones ( #1464 )
2026-03-30 15:26:18 +01:00
Zack Pollard
10aa7d9453
feat: add o11y 1password vaults to futo account module ( #1463 )
2026-03-30 12:42:35 +00:00
Zack Pollard
465ad6b9f2
feat: futo internal zitadel instance ( #1415 )
2026-03-26 19:23:26 +00:00
Zack Pollard
d6597891f4
feat: add futo zitadel cloud profile json manual secret ( #1462 )
2026-03-26 18:57:39 +00:00
Zack Pollard
e28d6eaced
fix: strip hyphens from webhook id to match cloudflare api format ( #1461 )
2026-03-26 17:58:23 +00:00
Zack Pollard
464be4a34c
feat: add terraform plan pr comments separated by module ( #1460 )
2026-03-26 17:45:38 +00:00
Zack Pollard
207d2f5432
chore: add 1password secrets for internal zitadel oauth ( #1414 )
2026-03-25 13:19:02 +00:00
Zack Pollard
ed20786261
feat: add retro repository to github org and make it public ( #1459 )
2026-03-25 11:36:33 +00:00
Zack Pollard
402f24dfa4
feat: migrate 1pass provider to use connect server ( #1454 )
2026-03-24 18:57:48 +00:00
Zack Pollard
53cac29f46
fix: replace null_resource + local_file with external data source for cert conversion ( #1455 )
2026-03-24 17:52:25 +00:00
Zack Pollard
be50f5fb82
fix(yucca): use object format for generated secret definition ( #1457 )
2026-03-24 17:52:16 +00:00
Zack Pollard
e842c82ec6
feat: enable parallel requests for github provider ( #1456 )
2026-03-24 17:52:13 +00:00
Zack Pollard
065ec98688
fix: perpetual diff in github app secrets module ( #1412 )
2026-03-23 14:20:57 +00:00
Zack Pollard
838151963c
feat: yucca secrets and secret module improvements ( #1121 )
2026-03-19 16:39:04 +00:00
Zack Pollard
6b628c37b3
fix: lelunz github username casing ( #1411 )
2026-03-19 09:44:59 +00:00
Zack Pollard
2e34b577cf
feat: add yucca-slop repo and support private repos ( #1385 )
2026-03-06 15:48:53 +00:00
Zack Pollard
192105bfe9
chore: add secrets for upcoming gitLab oauth and outline-role-sync ( #1382 )
2026-03-05 03:38:23 +00:00
Zack Pollard
dec3aa88ea
feat(zitadel): ovh saml integration ( #1380 )
2026-03-04 13:58:39 +00:00
Zack Pollard
e8632d8464
revert: remove OVH SAML integration accidentally merged into main ( #1378 )
2026-03-03 23:27:59 +00:00
Zack Pollard
af99b19f90
feat(discord): grant pin_messages and bypass_slow_mode to privileged roles ( #1377 )
2026-03-03 16:21:34 +00:00
Zack Pollard
9ad2a628c6
chore: new yucca members should have team role ( #1366 )
2026-02-27 22:30:06 +00:00
Zack Pollard
6d38a5a718
feat: add new yucca team members ( #1365 )
2026-02-27 16:36:46 +00:00
Zack Pollard
0cd3e9e4f6
fix: discord terraform problems ( #1364 )
2026-02-27 15:58:54 +00:00
Zack Pollard
1bb2937da8
chore: add IMMICH_DISCORD_BOT_TOKEN to dev and prod environments ( #1361 )
2026-02-25 17:45:31 +00:00
Zack Pollard
c177f944d4
chore: change ui library to MIT license ( #1351 )
2026-02-18 15:00:36 -06:00
Zack Pollard
e050bed623
chore: update users.json ( #1290 )
2026-01-26 19:02:56 +00:00
Zack Pollard
62ec03b096
fix: revert "chore(deps): update terraform grafana to v4" ( #1205 )
2025-12-03 13:59:24 +00:00
Zack Pollard
0a69c98d4c
fix: yucca members didn't have access to oauth apps ( #1152 )
2025-11-11 11:28:29 +00:00
Zack Pollard
e37425a55e
fix: yucca role gets github org access ( #1141 )
2025-11-10 14:45:58 +00:00
Zack Pollard
13e08ee583
feat: yucca role ( #1140 )
2025-11-10 14:36:56 +00:00
Zack Pollard
0c65c16ed1
feat: futo role and add eron ( #1139 )
2025-11-10 13:59:51 +00:00
Zack Pollard
9f61bd0e2c
feat: secrets for outline to git sync ( #1124 )
2025-11-01 16:01:06 +01:00
Zack Pollard
2283a809e1
feat: yucca repo ( #1123 )
2025-10-30 12:22:42 +00:00
Zack Pollard
59f63de1e5
feat: add insert to team ( #1094 )
2025-10-27 21:38:43 +00:00
Zack Pollard
80e4e374f7
feat: app store secrets ( #1089 )
...
* feat: app store secrets
* feat: ios certificate secrets
2025-10-23 11:54:26 -05:00
Zack Pollard
037a4576aa
feat: yucca o11y repository ( #1086 )
2025-10-23 14:31:46 +01:00
Zack Pollard
c75241ab78
fix: import immich build zone in tf ( #1067 )
2025-10-20 19:11:54 +01:00
Zack Pollard
ad2ff0877b
feat: immich.build ( #1063 )
2025-10-20 11:57:06 +01:00
Zack Pollard
599407c03c
fix: automatically get file list for discord images ( #1038 )
2025-10-09 23:09:26 +01:00
Zack Pollard
c2b1415419
feat: google play store signing key secrets ( #1021 )
2025-10-03 18:06:36 +01:00
Zack Pollard
29d21d495d
feat: immich.cc and immich.pro redirects to immich.app ( #1004 )
2025-09-25 23:25:06 +00:00
Zack Pollard
749e2dbad7
chore: remove docs.immich.app domain ( #1003 )
2025-09-25 16:47:29 +01:00
Zack Pollard
0c198b8d7e
feat: docs.immich.app redirects ( #967 )
2025-09-25 15:58:50 +01:00
Zack Pollard
387b25fd8c
feat: new cloudflare zones for domains ( #1002 )
2025-09-24 23:25:04 +01:00
Zack Pollard
3b705ad17b
chore: vultr api token not key ( #1001 )
2025-09-24 13:20:30 +01:00
Zack Pollard
0675b9d573
feat: vultr api key secret ( #1000 )
2025-09-24 13:14:30 +01:00
Zack Pollard
c804185d1a
feat: alerts when vmetrics is unavailable from grafana ( #987 )
2025-09-22 18:11:14 +01:00
Zack Pollard
f9053edc4d
feat: org wide required approval check ( #978 )
2025-09-16 19:24:57 +01:00
Zack