Zack Pollard
1c8de082a2
fix: zizmor action permissions ( #976 )
2025-09-15 18:56:56 +01:00
Zack Pollard
33c35d9756
fix: rename yaml to yml workflows and zizmor workflow triggers ( #975 )
2025-09-15 18:46:06 +01:00
Zack Pollard
ac85430094
feat: org wide conventional commit and zizmor checks ( #974 )
2025-09-15 18:25:35 +01:00
Zack Pollard
28dd592d7c
feat: docs.immich.app ( #968 )
2025-09-11 16:52:45 +01:00
Zack Pollard
2c731c7660
feat: yucca discord channels ( #944 )
2025-09-05 15:30:00 +01:00
Zack Pollard
eb12c404be
feat: tigris api keys ( #941 )
2025-09-03 22:56:38 +01:00
Zack Pollard
e02eddc229
feat: digitalocean api token secret ( #930 )
...
* feat: digitalocean api token secret
* chore: manual secret
2025-09-03 17:44:21 +01:00
Zack Pollard
b0c2bf7948
feat: services repo ( #931 )
2025-09-03 16:22:54 +01:00
Zack Pollard
8e07a28a39
feat: add jnsq to team ( #937 )
2025-09-02 14:50:32 +02:00
Zack Pollard
6834401cf4
fix: potentially fix custom domains breaking upon creation ( #924 )
2025-08-20 18:47:50 +01:00
Zack Pollard
ffa0b2ad8f
feat: add kenny to one-click repo maintain role ( #923 )
2025-08-20 17:04:26 +01:00
Zack Pollard
fcb729690c
feat: add one-click repo ( #917 )
2025-08-20 15:55:07 +01:00
Zack Pollard
0cbf04ecff
feat: team voice high bitrate ( #898 )
2025-07-31 14:04:13 +02:00
Zack Pollard
cb7e372542
chore: remove org required checks ( #889 )
2025-07-28 14:16:10 -04:00
Zack Pollard
c8d6568d27
chore: remove wuzihao051119 from contributor team ( #888 )
2025-07-25 11:10:38 -05:00
Zack Pollard
b507dde355
feat: give support crew access to outline ( #884 )
2025-07-22 15:19:40 +01:00
Zack Pollard
8deb0435ff
fix: sha256 r2 api key secret ( #877 )
2025-07-18 13:27:19 +01:00
Zack Pollard
7e1cae86e9
chore: pin mise version with composite action ( #876 )
2025-07-18 12:44:28 +01:00
Zack Pollard
0b0342bf0a
chore: change renovate config to use the global defaults ( #875 )
2025-07-18 12:29:51 +02:00
Zack Pollard
e01e4d4aef
fix: run approval checks whenever PR changes are made ( #850 )
2025-07-10 16:58:35 +01:00
Zack Pollard
1513bbe135
fix: missing cwd dir on mise commands ( #846 )
2025-07-09 18:44:12 +01:00
Zack Pollard
f8fe638fc4
fix: r2 shared module api key permissions ( #845 )
2025-07-09 16:40:45 +00:00
Zack Pollard
57d2101d38
fix: don't deploy files for archived repos ( #844 )
2025-07-09 17:14:42 +01:00
Zack Pollard
4fd3b4a167
feat: github security hardening ( #834 )
2025-07-09 16:21:53 +01:00
Zack Pollard
ff968b21a7
chore: add koen ( #840 )
2025-07-09 13:53:31 +01:00
Zack Pollard
881380cc12
chore: bump grafana tf lock file version ( #837 )
2025-07-08 18:36:48 +01:00
Zack Pollard
ea56f1d161
refactor: github org tf split for faster deployments ( #831 )
2025-07-08 11:53:04 +01:00
Zack Pollard
28de0a1979
chore: tf 1.10 ( #825 )
2025-07-07 15:13:30 +01:00
Zack Pollard
6b31091f2c
chore: rename incorrectly named secret ( #788 )
2025-06-25 17:27:29 +01:00
Zack Pollard
b91ab5d48b
ci: push turnstile site key to github secrets ( #787 )
2025-06-25 17:19:24 +01:00
Zack Pollard
6531fcffb2
feat: pages project production branch should match env type ( #725 )
2025-06-10 13:01:18 +01:00
Zack Pollard
a9d649dd1e
fix: capitalisation of immich... ( #721 )
2025-06-09 21:22:28 +02:00
Zack Pollard
02fd841f61
fix: missing weblate bot perms ( #720 )
2025-06-09 19:03:58 +01:00
Zack Pollard
919a985f8d
fix: helm version quoting ( #719 )
2025-06-09 19:21:55 +02:00
Zack Pollard
1858cb3ca1
chore: require codeowner approval for devtools PRs ( #717 )
2025-06-09 12:26:51 +01:00
Zack Pollard
82a48d1f3c
chore: github user IaC ( #678 )
2025-06-06 17:55:14 +00:00
Zack Pollard
896c03002d
fix: update action invalid first name ( #710 )
2025-06-06 14:38:36 +01:00
Zack Pollard
d04ea68a5d
fix: nick_name not nickname ( #711 )
2025-06-06 14:38:01 +01:00
Zack Pollard
20184ea4b5
fix: outline secret should be 64 hex chars, 32 bytes ( #708 )
2025-06-06 14:36:27 +01:00
Zack Pollard
6a2fa655fc
fix: ignore changes to zitadel user nickname ( #709 )
2025-06-06 14:19:56 +01:00
Zack Pollard
11ccb86742
feat: specify generated secret types ( #707 )
2025-06-06 13:43:10 +02:00
Zack Pollard
d8fc62cb29
fix: containerssh zitadel oidc config ( #704 )
2025-06-06 11:23:42 +01:00
Zack Pollard and Daniel Dietzler
eb8e2e2f96
feat: zitadel IaC ( #698 )
...
Co-authored-by: Daniel Dietzler <mail@ddietzler.dev >
2025-06-05 18:08:15 +01:00
Zack Pollard
4a7a6617fd
feat: allow generated secrets to specify length ( #657 )
2025-05-30 13:30:04 +01:00
Zack Pollard
a9c20365ff
refactor: move discord users list out to an external file for re-use ( #642 )
2025-05-27 17:35:52 +01:00
Zack Pollard
767a955bd4
chore: update team discord permissions ( #573 )
2025-05-08 15:27:18 +01:00
Zack Pollard
50a6fe3d41
fix: incorrect write permissions for certain channels ( #572 )
2025-05-08 15:04:47 +01:00
Zack Pollard
7ac703e730
feat: discord channel permissions IaC ( #570 )
2025-05-08 11:34:38 +01:00
Zack Pollard
0d8d940883
fix: re-add removed everyone permission ( #568 )
2025-05-07 12:42:49 +01:00
Zack Pollard
1ef3500bf1
ci: discord dev environment ( #567 )
2025-05-07 12:28:09 +01:00
Zack Pollard
0c4e6aabcc
chore: discord role colours ( #565 )
2025-05-06 19:14:12 +01:00
Zack Pollard
2757ce5dbd
feat: alert infra and add env based state ( #553 )
2025-05-06 18:37:46 +01:00
Zack Pollard
24ff8939e6
chore: discord changes ( #563 )
2025-05-06 17:57:34 +01:00
Zack Pollard
7fbb56846a
feat: discord role IaC ( #561 )
2025-05-06 13:21:49 +01:00
Zack Pollard
d07e9a6331
feat: grafana IaC ( #526 )
2025-04-29 16:32:33 +01:00
Zack Pollard
f7cf6ff631
chore: bump max mich runners to 10 ( #537 )
...
This is a temporary change until we get around to making different runner pools with actual CPU limits/quotas
2025-04-24 18:24:44 -04:00
Zack Pollard
fae31613f9
feat: discord IaC ( #515 )
2025-04-22 14:50:27 +01:00
Zack Pollard and bo0tzz
6b4225cbbd
chore: flux webhooks ( #514 )
...
Co-authored-by: bo0tzz <git@bo0tzz.me >
2025-04-14 17:29:42 +01:00
Zack Pollard
957f59398e
chore: add discord tf bot token ( #513 )
2025-04-14 12:40:30 +01:00
Zack Pollard
1a7d86ca33
fix: echo -e not supported in certain shells causes -e to get output ( #510 )
2025-04-11 17:48:18 +02:00
Zack Pollard
3350d097ce
fix: certificates always converted so they exist on disk ( #509 )
2025-04-11 16:37:29 +02:00
Zack Pollard
d5ae5cd1cd
fix: broken terraform deployments ( #506 )
2025-04-11 15:54:00 +02:00
Zack Pollard
c06b763fac
feat: modules for generated, manual and github app secrets ( #497 )
2025-04-11 14:46:53 +01:00
Zack Pollard
055a5ad279
feat: manual secrets created in seperate vaults ( #489 )
2025-04-03 14:51:30 +01:00
Zack Pollard
0814f9d5a5
Add merch store to funding.yml ( #423 )
2025-02-27 14:25:36 +00:00
Zack Pollard
ca2008cb07
feat: add d1 permissions for tofu ( #396 )
2025-02-19 14:43:26 +00:00
Zack Pollard
f68558bfdf
chore: new dns zone and dns records ( #363 )
2025-01-29 13:31:26 +00:00
Zack Pollard
ada4070845
feat: get.immich.app redirects iOS and Android with cookie bypass ( #331 )
...
* feat: get.immich.app redirects iOS and Android with cookie bypass
* chore: remove get.immich.app dns record
this is moving to the static-pages repo
2025-01-06 12:42:55 -05:00
Zack Pollard
6548ff15ee
fix: vmetrics admin route wildcard ( #316 )
2024-12-20 15:21:24 +00:00
Zack Pollard
cd1909e6d0
feat: cloudflare pages project tf module ( #290 )
2024-11-28 14:21:57 +01:00
Zack Pollard
1cd1d85405
ci: cloudflare extra api key perms ( #291 )
2024-11-28 14:11:03 +01:00
Zack Pollard
9ab78e52d2
ci: domain stage should default to empty string ( #292 )
2024-11-28 14:10:36 +01:00
Zack Pollard
4854395ba5
chore: set pages production branch to prod instead of main ( #288 )
2024-11-26 15:09:24 +00:00
Zack Pollard
17716f9956
feat: cloudflare pages and domain name tf modules ( #287 )
2024-11-26 13:15:31 +00:00
Zack Pollard
4a6e0083af
chore: combined cloudflare pages output object ( #280 )
2024-11-22 14:34:33 +00:00
Zack Pollard
e4abdaf5ac
chore: k8s secrets need to also exist in the tf vaults ( #283 )
2024-11-21 18:30:47 +00:00
Zack Pollard
686642ec80
feat: pull TF env from 1pass ( #277 )
2024-11-19 12:32:06 +00:00
Zack Pollard
63b58247ac
feat: move tf into tf folder and prepare for shared modules ( #273 )
2024-11-13 18:36:38 +00:00
Zack Pollard
e24ac6cc55
chore: pull npm read/write tokens from 1pass for github secrets ( #243 )
2024-10-22 12:20:57 +01:00
Zack Pollard
0a7d467d0e
feat: docker hub org terraform ( #241 )
2024-10-22 12:04:08 +01:00
Zack Pollard
e13b4bfdd3
feat: queues read/write permissions for terraform ( #222 )
2024-10-09 12:49:35 +02:00
Zack Pollard
5cf7f1fc11
feat: add worker route permissions to github terraform API key ( #216 )
2024-10-04 16:23:52 +01:00
Zack Pollard
620ae867cd
feat: default zone settings utilise cloudflare CDN speedups ( #206 )
2024-10-03 02:28:56 +01:00
Zack Pollard
eae679ceb5
feat: get.immich.app ( #210 )
2024-10-02 12:26:21 +01:00
Zack Pollard
edde184b20
fix: pull the repository name from the repository resource to force a dependency ( #205 )
2024-09-30 14:12:15 -04:00
Zack Pollard
270161b675
fix: missing www dns record ( #191 )
2024-09-18 13:42:43 +02:00
Zack Pollard
ab57682d89
feat: apply spf 50 ( #184 )
2024-09-10 14:31:28 +01:00
Zack Pollard
aa719abdea
feat: enable dmarc for immich.app email ( #183 )
2024-09-10 14:17:20 +01:00
Zack Pollard
6aa2352689
feat: native_video_player repo and fork support ( #177 )
...
* fix: ignore all .terragrunt files in default repo files
* feat: add support for forks in repo tf code
* feat: add native_video_player forked repo to tf
2024-08-30 17:23:02 +01:00
Zack Pollard
cd5b8f4f37
feat: separate ruleset for custom repository rules ( #175 )
2024-08-27 17:31:51 +01:00
Zack Pollard
e4b4b5d696
feat: push-o-matic bypass branch protections ( #174 )
2024-08-27 16:50:42 +01:00
Zack Pollard
a25a489813
feat: kv r2 tile server token ( #172 )
...
* feat: kv r2 tile server token
* feat: push-o-matic
2024-08-27 16:22:52 +01:00
Zack Pollard
3b532bffef
chore: enable full tls strict mode on our cloudflare zones and edge ttl for static assets ( #154 )
2024-08-07 14:42:09 +01:00
Zack Pollard
3510590b8f
feat: give terraform cloudflare API token KV permissions ( #131 )
2024-07-29 13:08:30 +02:00
Zack Pollard
df2be7e1b6
feat: add r2 static assets bucket with static.immich.cloud domain ( #127 )
2024-07-26 15:35:02 +01:00
Zack Pollard
bf4681f390
feat: add worker script permissions to terraform cloudflare api key ( #117 )
2024-07-25 14:46:10 +01:00
Zack Pollard
ce088713f0
feat: geoshenanigans and cleanup ( #114 )
2024-07-25 12:22:32 +02:00
Zack Pollard
fcd42e6102
fix: webhook recreation every time tofu runs ( #82 )
2024-07-11 17:25:32 +01:00
Zack Pollard
de1d171263
feat: cloudflare R2 billing alerts to email and discord channel ( #80 )
2024-07-11 16:42:38 +01:00
Zack Pollard and bo0tzz
cb4643509f
fix: permissions for mich r2 token and 1password provider update ( #79 )
...
Co-authored-by: bo0tzz <git@bo0tzz.me >
2024-07-11 16:31:35 +01:00