Commit Graph
100 Commits
Author SHA1 Message Date
Zack Pollard 1c8de082a2 fix: zizmor action permissions (#976) 2025-09-15 18:56:56 +01:00
Zack Pollard 33c35d9756 fix: rename yaml to yml workflows and zizmor workflow triggers (#975) 2025-09-15 18:46:06 +01:00
Zack Pollard ac85430094 feat: org wide conventional commit and zizmor checks (#974) 2025-09-15 18:25:35 +01:00
Zack Pollard 28dd592d7c feat: docs.immich.app (#968) 2025-09-11 16:52:45 +01:00
Zack Pollard 2c731c7660 feat: yucca discord channels (#944) 2025-09-05 15:30:00 +01:00
Zack Pollard eb12c404be feat: tigris api keys (#941) 2025-09-03 22:56:38 +01:00
Zack Pollard e02eddc229 feat: digitalocean api token secret (#930)
* feat: digitalocean api token secret

* chore: manual secret
2025-09-03 17:44:21 +01:00
Zack Pollard b0c2bf7948 feat: services repo (#931) 2025-09-03 16:22:54 +01:00
Zack Pollard 8e07a28a39 feat: add jnsq to team (#937) 2025-09-02 14:50:32 +02:00
Zack Pollard 6834401cf4 fix: potentially fix custom domains breaking upon creation (#924) 2025-08-20 18:47:50 +01:00
Zack Pollard ffa0b2ad8f feat: add kenny to one-click repo maintain role (#923) 2025-08-20 17:04:26 +01:00
Zack Pollard fcb729690c feat: add one-click repo (#917) 2025-08-20 15:55:07 +01:00
Zack Pollard 0cbf04ecff feat: team voice high bitrate (#898) 2025-07-31 14:04:13 +02:00
Zack Pollard cb7e372542 chore: remove org required checks (#889) 2025-07-28 14:16:10 -04:00
Zack Pollard c8d6568d27 chore: remove wuzihao051119 from contributor team (#888) 2025-07-25 11:10:38 -05:00
Zack Pollard b507dde355 feat: give support crew access to outline (#884) 2025-07-22 15:19:40 +01:00
Zack Pollard 8deb0435ff fix: sha256 r2 api key secret (#877) 2025-07-18 13:27:19 +01:00
Zack Pollard 7e1cae86e9 chore: pin mise version with composite action (#876) 2025-07-18 12:44:28 +01:00
Zack Pollard 0b0342bf0a chore: change renovate config to use the global defaults (#875) 2025-07-18 12:29:51 +02:00
Zack Pollard e01e4d4aef fix: run approval checks whenever PR changes are made (#850) 2025-07-10 16:58:35 +01:00
Zack Pollard 1513bbe135 fix: missing cwd dir on mise commands (#846) 2025-07-09 18:44:12 +01:00
Zack Pollard f8fe638fc4 fix: r2 shared module api key permissions (#845) 2025-07-09 16:40:45 +00:00
Zack Pollard 57d2101d38 fix: don't deploy files for archived repos (#844) 2025-07-09 17:14:42 +01:00
Zack Pollard 4fd3b4a167 feat: github security hardening (#834) 2025-07-09 16:21:53 +01:00
Zack Pollard ff968b21a7 chore: add koen (#840) 2025-07-09 13:53:31 +01:00
Zack Pollard 881380cc12 chore: bump grafana tf lock file version (#837) 2025-07-08 18:36:48 +01:00
Zack Pollard ea56f1d161 refactor: github org tf split for faster deployments (#831) 2025-07-08 11:53:04 +01:00
Zack Pollard 28de0a1979 chore: tf 1.10 (#825) 2025-07-07 15:13:30 +01:00
Zack Pollard 6b31091f2c chore: rename incorrectly named secret (#788) 2025-06-25 17:27:29 +01:00
Zack Pollard b91ab5d48b ci: push turnstile site key to github secrets (#787) 2025-06-25 17:19:24 +01:00
Zack Pollard 6531fcffb2 feat: pages project production branch should match env type (#725) 2025-06-10 13:01:18 +01:00
Zack Pollard a9d649dd1e fix: capitalisation of immich... (#721) 2025-06-09 21:22:28 +02:00
Zack Pollard 02fd841f61 fix: missing weblate bot perms (#720) 2025-06-09 19:03:58 +01:00
Zack Pollard 919a985f8d fix: helm version quoting (#719) 2025-06-09 19:21:55 +02:00
Zack Pollard 1858cb3ca1 chore: require codeowner approval for devtools PRs (#717) 2025-06-09 12:26:51 +01:00
Zack Pollard 82a48d1f3c chore: github user IaC (#678) 2025-06-06 17:55:14 +00:00
Zack Pollard 896c03002d fix: update action invalid first name (#710) 2025-06-06 14:38:36 +01:00
Zack Pollard d04ea68a5d fix: nick_name not nickname (#711) 2025-06-06 14:38:01 +01:00
Zack Pollard 20184ea4b5 fix: outline secret should be 64 hex chars, 32 bytes (#708) 2025-06-06 14:36:27 +01:00
Zack Pollard 6a2fa655fc fix: ignore changes to zitadel user nickname (#709) 2025-06-06 14:19:56 +01:00
Zack Pollard 11ccb86742 feat: specify generated secret types (#707) 2025-06-06 13:43:10 +02:00
Zack Pollard d8fc62cb29 fix: containerssh zitadel oidc config (#704) 2025-06-06 11:23:42 +01:00
Zack PollardandDaniel Dietzler eb8e2e2f96 feat: zitadel IaC (#698)
Co-authored-by: Daniel Dietzler <mail@ddietzler.dev>
2025-06-05 18:08:15 +01:00
Zack Pollard 4a7a6617fd feat: allow generated secrets to specify length (#657) 2025-05-30 13:30:04 +01:00
Zack Pollard a9c20365ff refactor: move discord users list out to an external file for re-use (#642) 2025-05-27 17:35:52 +01:00
Zack Pollard 767a955bd4 chore: update team discord permissions (#573) 2025-05-08 15:27:18 +01:00
Zack Pollard 50a6fe3d41 fix: incorrect write permissions for certain channels (#572) 2025-05-08 15:04:47 +01:00
Zack Pollard 7ac703e730 feat: discord channel permissions IaC (#570) 2025-05-08 11:34:38 +01:00
Zack Pollard 0d8d940883 fix: re-add removed everyone permission (#568) 2025-05-07 12:42:49 +01:00
Zack Pollard 1ef3500bf1 ci: discord dev environment (#567) 2025-05-07 12:28:09 +01:00
Zack Pollard 0c4e6aabcc chore: discord role colours (#565) 2025-05-06 19:14:12 +01:00
Zack Pollard 2757ce5dbd feat: alert infra and add env based state (#553) 2025-05-06 18:37:46 +01:00
Zack Pollard 24ff8939e6 chore: discord changes (#563) 2025-05-06 17:57:34 +01:00
Zack Pollard 7fbb56846a feat: discord role IaC (#561) 2025-05-06 13:21:49 +01:00
Zack Pollard d07e9a6331 feat: grafana IaC (#526) 2025-04-29 16:32:33 +01:00
Zack Pollard f7cf6ff631 chore: bump max mich runners to 10 (#537)
This is a temporary change until we get around to making different runner pools with actual CPU limits/quotas
2025-04-24 18:24:44 -04:00
Zack Pollard fae31613f9 feat: discord IaC (#515) 2025-04-22 14:50:27 +01:00
Zack Pollardandbo0tzz 6b4225cbbd chore: flux webhooks (#514)
Co-authored-by: bo0tzz <git@bo0tzz.me>
2025-04-14 17:29:42 +01:00
Zack Pollard 957f59398e chore: add discord tf bot token (#513) 2025-04-14 12:40:30 +01:00
Zack Pollard 1a7d86ca33 fix: echo -e not supported in certain shells causes -e to get output (#510) 2025-04-11 17:48:18 +02:00
Zack Pollard 3350d097ce fix: certificates always converted so they exist on disk (#509) 2025-04-11 16:37:29 +02:00
Zack Pollard d5ae5cd1cd fix: broken terraform deployments (#506) 2025-04-11 15:54:00 +02:00
Zack Pollard c06b763fac feat: modules for generated, manual and github app secrets (#497) 2025-04-11 14:46:53 +01:00
Zack Pollard 055a5ad279 feat: manual secrets created in seperate vaults (#489) 2025-04-03 14:51:30 +01:00
Zack Pollard 0814f9d5a5 Add merch store to funding.yml (#423) 2025-02-27 14:25:36 +00:00
Zack Pollard ca2008cb07 feat: add d1 permissions for tofu (#396) 2025-02-19 14:43:26 +00:00
Zack Pollard f68558bfdf chore: new dns zone and dns records (#363) 2025-01-29 13:31:26 +00:00
Zack Pollard ada4070845 feat: get.immich.app redirects iOS and Android with cookie bypass (#331)
* feat: get.immich.app redirects iOS and Android with cookie bypass

* chore: remove get.immich.app dns record
this is moving to the static-pages repo
2025-01-06 12:42:55 -05:00
Zack Pollard 6548ff15ee fix: vmetrics admin route wildcard (#316) 2024-12-20 15:21:24 +00:00
Zack Pollard cd1909e6d0 feat: cloudflare pages project tf module (#290) 2024-11-28 14:21:57 +01:00
Zack Pollard 1cd1d85405 ci: cloudflare extra api key perms (#291) 2024-11-28 14:11:03 +01:00
Zack Pollard 9ab78e52d2 ci: domain stage should default to empty string (#292) 2024-11-28 14:10:36 +01:00
Zack Pollard 4854395ba5 chore: set pages production branch to prod instead of main (#288) 2024-11-26 15:09:24 +00:00
Zack Pollard 17716f9956 feat: cloudflare pages and domain name tf modules (#287) 2024-11-26 13:15:31 +00:00
Zack Pollard 4a6e0083af chore: combined cloudflare pages output object (#280) 2024-11-22 14:34:33 +00:00
Zack Pollard e4abdaf5ac chore: k8s secrets need to also exist in the tf vaults (#283) 2024-11-21 18:30:47 +00:00
Zack Pollard 686642ec80 feat: pull TF env from 1pass (#277) 2024-11-19 12:32:06 +00:00
Zack Pollard 63b58247ac feat: move tf into tf folder and prepare for shared modules (#273) 2024-11-13 18:36:38 +00:00
Zack Pollard e24ac6cc55 chore: pull npm read/write tokens from 1pass for github secrets (#243) 2024-10-22 12:20:57 +01:00
Zack Pollard 0a7d467d0e feat: docker hub org terraform (#241) 2024-10-22 12:04:08 +01:00
Zack Pollard e13b4bfdd3 feat: queues read/write permissions for terraform (#222) 2024-10-09 12:49:35 +02:00
Zack Pollard 5cf7f1fc11 feat: add worker route permissions to github terraform API key (#216) 2024-10-04 16:23:52 +01:00
Zack Pollard 620ae867cd feat: default zone settings utilise cloudflare CDN speedups (#206) 2024-10-03 02:28:56 +01:00
Zack Pollard eae679ceb5 feat: get.immich.app (#210) 2024-10-02 12:26:21 +01:00
Zack Pollard edde184b20 fix: pull the repository name from the repository resource to force a dependency (#205) 2024-09-30 14:12:15 -04:00
Zack Pollard 270161b675 fix: missing www dns record (#191) 2024-09-18 13:42:43 +02:00
Zack Pollard ab57682d89 feat: apply spf 50 (#184) 2024-09-10 14:31:28 +01:00
Zack Pollard aa719abdea feat: enable dmarc for immich.app email (#183) 2024-09-10 14:17:20 +01:00
Zack Pollard 6aa2352689 feat: native_video_player repo and fork support (#177)
* fix: ignore all .terragrunt files in default repo files

* feat: add support for forks in repo tf code

* feat: add native_video_player forked repo to tf
2024-08-30 17:23:02 +01:00
Zack Pollard cd5b8f4f37 feat: separate ruleset for custom repository rules (#175) 2024-08-27 17:31:51 +01:00
Zack Pollard e4b4b5d696 feat: push-o-matic bypass branch protections (#174) 2024-08-27 16:50:42 +01:00
Zack Pollard a25a489813 feat: kv r2 tile server token (#172)
* feat: kv r2 tile server token

* feat: push-o-matic
2024-08-27 16:22:52 +01:00
Zack Pollard 3b532bffef chore: enable full tls strict mode on our cloudflare zones and edge ttl for static assets (#154) 2024-08-07 14:42:09 +01:00
Zack Pollard 3510590b8f feat: give terraform cloudflare API token KV permissions (#131) 2024-07-29 13:08:30 +02:00
Zack Pollard df2be7e1b6 feat: add r2 static assets bucket with static.immich.cloud domain (#127) 2024-07-26 15:35:02 +01:00
Zack Pollard bf4681f390 feat: add worker script permissions to terraform cloudflare api key (#117) 2024-07-25 14:46:10 +01:00
Zack Pollard ce088713f0 feat: geoshenanigans and cleanup (#114) 2024-07-25 12:22:32 +02:00
Zack Pollard fcd42e6102 fix: webhook recreation every time tofu runs (#82) 2024-07-11 17:25:32 +01:00
Zack Pollard de1d171263 feat: cloudflare R2 billing alerts to email and discord channel (#80) 2024-07-11 16:42:38 +01:00
Zack Pollardandbo0tzz cb4643509f fix: permissions for mich r2 token and 1password provider update (#79)
Co-authored-by: bo0tzz <git@bo0tzz.me>
2024-07-11 16:31:35 +01:00