Commit graph

211 commits

Author SHA1 Message Date
Conrad Kramer
97c569fb35 Align GTK app with Apple home surface
Some checks failed
Build Rust / Cargo Test (push) Successful in 3m50s
Build Site / Next.js Build (push) Failing after 2s
Lint Governance / BEP Metadata (push) Successful in 0s
Add the GTK home screen, local account store, daemon gRPC wrapper, and embedded Linux daemon startup path so the Linux app follows the Apple client UX and daemon boundary.

Document the GTK parity expectations and update the daemon IPC and Tailnet BEPs with the cross-platform client model.
2026-05-03 17:36:55 -07:00
Conrad Kramer
9244a0476a Fix Zulip SAML provisioning 2026-04-19 14:48:16 -07:00
Conrad Kramer
7540110713 Wait for Zulip supervisor before nginx patching 2026-04-19 14:09:26 -07:00
Conrad Kramer
836ccc93cd Patch Zulip uwsgi scheme at runtime 2026-04-19 14:04:42 -07:00
Conrad Kramer
6cd0f3b1ae Fix Zulip SAML callback scheme handling 2026-04-19 13:59:01 -07:00
Conrad Kramer
eb9327a99f Map Burrow admins to Zulip owners
Some checks failed
Build Site / Next.js Build (push) Failing after 2s
Lint Governance / BEP Metadata (push) Successful in 0s
Build Rust / Cargo Test (push) Successful in 4m2s
2026-04-19 03:43:57 -07:00
Conrad Kramer
5598fc18fc Enable Zulip SAML auto signup 2026-04-19 03:37:42 -07:00
Conrad Kramer
78d83c5079 Pin Zulip SAML ACS to https
Some checks failed
Build Rust / Cargo Test (push) Successful in 3m55s
Build Site / Next.js Build (push) Failing after 2s
Lint Governance / BEP Metadata (push) Successful in 0s
2026-04-19 01:49:25 -07:00
Conrad Kramer
4c3dcdd17b Force https-only Zulip SAML login 2026-04-19 01:43:43 -07:00
Conrad Kramer
2af7618f52 Fix tailscale landing and zulip bootstrap
Some checks failed
Build Rust / Cargo Test (push) Successful in 3m55s
Build Site / Next.js Build (push) Failing after 2s
Lint Governance / BEP Metadata (push) Successful in 0s
2026-04-19 01:31:45 -07:00
Conrad Kramer
142c2ef778 Allow postgres bootstrap to read generated SQL 2026-04-19 01:22:32 -07:00
Conrad Kramer
2ef804fa10 Use runuser for Zulip Postgres bootstrap 2026-04-19 01:20:55 -07:00
Conrad Kramer
601bedcc59 Fix Zulip Postgres bootstrap runtime 2026-04-19 01:19:01 -07:00
Conrad Kramer
42df7b5618 Run Zulip on host-managed services 2026-04-19 01:11:37 -07:00
Conrad Kramer
fa2806e4b3 Bootstrap Zulip from the live app container 2026-04-19 00:59:34 -07:00
Conrad Kramer
b70b62dfef Fix Zulip bootstrap user handling 2026-04-19 00:56:35 -07:00
Conrad Kramer
824bbd9d67 Run Zulip bootstrap non-interactively 2026-04-19 00:55:07 -07:00
Conrad Kramer
b8cad4c028 Grant Tailnet access and harden Zulip bootstrap 2026-04-19 00:52:16 -07:00
Conrad Kramer
801e0fb419 Declare Zulip compose secrets 2026-04-19 00:30:08 -07:00
Conrad Kramer
bd13ff3ee9 Bind Zulip memcached and RabbitMQ config files 2026-04-19 00:25:16 -07:00
Conrad Kramer
8ac1a5c70e Use unified tailnet launcher and fix Zulip RabbitMQ 2026-04-19 00:22:13 -07:00
Conrad Kramer
7567ab194b Fix Tailscale default app and Zulip metadata fetch 2026-04-19 00:16:51 -07:00
Conrad Kramer
44f437c33c Expose Tailscale and add Zulip SAML deployment 2026-04-19 00:13:10 -07:00
Conrad Kramer
7d3e7a6ec5 Make Linear SCIM object sync best-effort
Some checks failed
Build Rust / Cargo Test (push) Successful in 3m51s
Build Site / Next.js Build (push) Failing after 2s
Lint Governance / BEP Metadata (push) Successful in 0s
2026-04-18 19:34:26 -07:00
Conrad Kramer
7421834ebc Relax Linear Authentik sync verification 2026-04-18 19:32:29 -07:00
Conrad Kramer
6dea4e4557 Fix Authentik Linear application patch paths 2026-04-18 19:30:06 -07:00
Conrad Kramer
4c12dafa6d Fix Linear SAML verification and reseal SCIM token 2026-04-18 19:26:55 -07:00
Conrad Kramer
ebcfc4bf8d Add Linear SCIM role sync 2026-04-18 19:23:53 -07:00
Conrad Kramer
4d3257995b Add Authentik SSO apps for Linear and 1Password 2026-04-18 19:10:18 -07:00
Conrad Kramer
5a4fe58b86 Add Jett forge access and rekey secrets
Some checks failed
Build Rust / Cargo Test (push) Successful in 3m47s
Build Site / Next.js Build (push) Failing after 2s
Lint Governance / BEP Metadata (push) Successful in 0s
2026-04-18 17:47:17 -07:00
Conrad Kramer
4f88f0b1e0 Align Burrow operator access on forge
Some checks failed
Build Rust / Cargo Test (push) Successful in 3m48s
Build Site / Next.js Build (push) Failing after 2s
Lint Governance / BEP Metadata (push) Successful in 0s
2026-04-18 17:09:20 -07:00
Conrad Kramer
abd5a35970 Make Jett a Burrow admin
Some checks failed
Build Rust / Cargo Test (push) Successful in 3m47s
Build Site / Next.js Build (push) Failing after 2s
Lint Governance / BEP Metadata (push) Successful in 0s
2026-04-18 02:42:01 -07:00
Conrad Kramer
c58d06dfc1 Move Burrow Google account aliases into agenix 2026-04-18 02:18:22 -07:00
Conrad Kramer
bc85e256f2 Stabilize Forgejo site build
Some checks failed
Build Rust / Cargo Test (push) Successful in 3m46s
Build Site / Next.js Build (push) Failing after 2s
Lint Governance / BEP Metadata (push) Successful in 0s
2026-04-09 20:59:31 -07:00
Conrad Kramer
aa577c5616 Inline Forgejo workflow checkout
Some checks failed
Build Rust / Cargo Test (push) Successful in 4m45s
Build Site / Next.js Build (push) Failing after 4s
Lint Governance / BEP Metadata (push) Successful in 0s
2026-04-06 04:22:34 -07:00
Conrad Kramer
fbe8643914 Restart Forgejo runner when registration changes
Some checks failed
Build Rust / Cargo Test (push) Failing after 0s
Build Site / Next.js Build (push) Failing after 0s
Lint Governance / BEP Metadata (push) Failing after 0s
2026-04-06 01:15:46 -07:00
Conrad Kramer
5e58aafb07 Align Forgejo runner labels with workflows
Some checks failed
Build Rust / Cargo Test (push) Failing after 4s
Build Site / Next.js Build (push) Failing after 0s
Lint Governance / BEP Metadata (push) Failing after 0s
2026-04-06 01:12:47 -07:00
Conrad Kramer
e2a2c73922 Install nsc on burrow forge host
Some checks are pending
Build Rust / Cargo Test (push) Waiting to run
Build Site / Next.js Build (push) Waiting to run
Lint Governance / BEP Metadata (push) Waiting to run
2026-04-06 01:08:24 -07:00
Conrad Kramer
70607e874c Move forgejo-nsc credentials into agenix
Some checks are pending
Build Rust / Cargo Test (push) Waiting to run
Build Site / Next.js Build (push) Waiting to run
Lint Governance / BEP Metadata (push) Waiting to run
2026-04-05 23:08:23 -07:00
Conrad Kramer
e40a947223 Add forge-owned Namespace auth portal 2026-04-05 20:52:52 -07:00
Conrad Kramer
64103abbea Refocus Tailnet flow on Tailscale 2026-04-05 02:10:49 -07:00
Conrad Kramer
3ebb0a8e61 Fix tailnet auth flow provider lookup
Some checks are pending
Build Rust / Cargo Test (push) Waiting to run
Build Site / Next.js Build (push) Waiting to run
Lint Governance / BEP Metadata (push) Waiting to run
2026-04-05 01:36:52 -07:00
Conrad Kramer
8de798469b Bind tailnet auth flow to tailscale 2026-04-05 01:34:32 -07:00
Conrad Kramer
c8aa036ade Add Tailscale Authentik OIDC app 2026-04-04 23:53:33 -07:00
Conrad Kramer
b15b6624cb Add Forgejo namespace release workflow 2026-04-04 22:21:03 -07:00
Conrad Kramer
9e3e8fa783 Use upstream nsc-autoscaler on burrow forge 2026-04-04 22:20:55 -07:00
Conrad Kramer
3d80e772c8 Add tailnet connectivity smoke path 2026-04-03 17:49:11 -07:00
Conrad Kramer
5079786515 Allow local UI test secret decryption 2026-04-03 03:08:06 -07:00
Conrad Kramer
75bcfaf655 Add Tailnet UI auth test flow 2026-04-03 03:03:17 -07:00
Conrad Kramer
0c660acd1e Add daemon-owned Tailnet login flow 2026-04-03 02:09:58 -07:00