Commit graph

  • 97c569fb35 Align GTK app with Apple home surface main Conrad Kramer 2026-05-03 17:36:55 -07:00
  • 9244a0476a Fix Zulip SAML provisioning Conrad Kramer 2026-04-19 14:37:18 -07:00
  • 7540110713 Wait for Zulip supervisor before nginx patching Conrad Kramer 2026-04-19 14:09:26 -07:00
  • 836ccc93cd Patch Zulip uwsgi scheme at runtime Conrad Kramer 2026-04-19 14:04:42 -07:00
  • 6cd0f3b1ae Fix Zulip SAML callback scheme handling Conrad Kramer 2026-04-19 13:59:01 -07:00
  • eb9327a99f Map Burrow admins to Zulip owners Conrad Kramer 2026-04-19 03:43:57 -07:00
  • 5598fc18fc Enable Zulip SAML auto signup Conrad Kramer 2026-04-19 03:37:42 -07:00
  • 78d83c5079 Pin Zulip SAML ACS to https Conrad Kramer 2026-04-19 01:49:25 -07:00
  • 4c3dcdd17b Force https-only Zulip SAML login Conrad Kramer 2026-04-19 01:43:43 -07:00
  • 2af7618f52 Fix tailscale landing and zulip bootstrap Conrad Kramer 2026-04-19 01:31:45 -07:00
  • 142c2ef778 Allow postgres bootstrap to read generated SQL Conrad Kramer 2026-04-19 01:22:32 -07:00
  • 2ef804fa10 Use runuser for Zulip Postgres bootstrap Conrad Kramer 2026-04-19 01:20:55 -07:00
  • 601bedcc59 Fix Zulip Postgres bootstrap runtime Conrad Kramer 2026-04-19 01:19:01 -07:00
  • 42df7b5618 Run Zulip on host-managed services Conrad Kramer 2026-04-19 01:11:37 -07:00
  • fa2806e4b3 Bootstrap Zulip from the live app container Conrad Kramer 2026-04-19 00:59:34 -07:00
  • b70b62dfef Fix Zulip bootstrap user handling Conrad Kramer 2026-04-19 00:56:35 -07:00
  • 824bbd9d67 Run Zulip bootstrap non-interactively Conrad Kramer 2026-04-19 00:55:07 -07:00
  • b8cad4c028 Grant Tailnet access and harden Zulip bootstrap Conrad Kramer 2026-04-19 00:52:16 -07:00
  • 801e0fb419 Declare Zulip compose secrets Conrad Kramer 2026-04-19 00:30:08 -07:00
  • bd13ff3ee9 Bind Zulip memcached and RabbitMQ config files Conrad Kramer 2026-04-19 00:25:16 -07:00
  • 8ac1a5c70e Use unified tailnet launcher and fix Zulip RabbitMQ Conrad Kramer 2026-04-19 00:22:13 -07:00
  • 7567ab194b Fix Tailscale default app and Zulip metadata fetch Conrad Kramer 2026-04-19 00:16:51 -07:00
  • 44f437c33c Expose Tailscale and add Zulip SAML deployment Conrad Kramer 2026-04-19 00:13:10 -07:00
  • 7d3e7a6ec5 Make Linear SCIM object sync best-effort Conrad Kramer 2026-04-18 19:34:26 -07:00
  • 7421834ebc Relax Linear Authentik sync verification Conrad Kramer 2026-04-18 19:32:29 -07:00
  • 6dea4e4557 Fix Authentik Linear application patch paths Conrad Kramer 2026-04-18 19:30:06 -07:00
  • 4c12dafa6d Fix Linear SAML verification and reseal SCIM token Conrad Kramer 2026-04-18 19:26:55 -07:00
  • ebcfc4bf8d Add Linear SCIM role sync Conrad Kramer 2026-04-18 19:23:53 -07:00
  • 4d3257995b Add Authentik SSO apps for Linear and 1Password Conrad Kramer 2026-04-18 19:10:18 -07:00
  • 5a4fe58b86 Add Jett forge access and rekey secrets Conrad Kramer 2026-04-18 17:47:17 -07:00
  • 4f88f0b1e0 Align Burrow operator access on forge Conrad Kramer 2026-04-18 17:09:20 -07:00
  • abd5a35970 Make Jett a Burrow admin Conrad Kramer 2026-04-18 02:42:01 -07:00
  • c58d06dfc1 Move Burrow Google account aliases into agenix Conrad Kramer 2026-04-18 02:18:22 -07:00
  • bc85e256f2 Stabilize Forgejo site build Conrad Kramer 2026-04-09 20:59:31 -07:00
  • aa577c5616 Inline Forgejo workflow checkout Conrad Kramer 2026-04-06 04:22:34 -07:00
  • fbe8643914 Restart Forgejo runner when registration changes Conrad Kramer 2026-04-06 01:15:46 -07:00
  • 5e58aafb07 Align Forgejo runner labels with workflows Conrad Kramer 2026-04-06 01:12:47 -07:00
  • e2a2c73922 Install nsc on burrow forge host Conrad Kramer 2026-04-06 01:08:24 -07:00
  • 70607e874c Move forgejo-nsc credentials into agenix Conrad Kramer 2026-04-05 23:08:23 -07:00
  • e40a947223 Add forge-owned Namespace auth portal Conrad Kramer 2026-04-05 20:52:52 -07:00
  • 64103abbea Refocus Tailnet flow on Tailscale Conrad Kramer 2026-04-05 02:10:49 -07:00
  • 3ebb0a8e61 Fix tailnet auth flow provider lookup Conrad Kramer 2026-04-05 01:36:52 -07:00
  • 8de798469b Bind tailnet auth flow to tailscale Conrad Kramer 2026-04-05 01:34:32 -07:00
  • c8aa036ade Add Tailscale Authentik OIDC app Conrad Kramer 2026-04-04 23:53:33 -07:00
  • b15b6624cb Add Forgejo namespace release workflow Conrad Kramer 2026-04-04 22:21:03 -07:00
  • 9e3e8fa783 Use upstream nsc-autoscaler on burrow forge Conrad Kramer 2026-04-04 22:20:55 -07:00
  • 3d80e772c8 Add tailnet connectivity smoke path Conrad Kramer 2026-04-03 17:49:11 -07:00
  • 5079786515 Allow local UI test secret decryption Conrad Kramer 2026-04-03 03:08:06 -07:00
  • 75bcfaf655 Add Tailnet UI auth test flow Conrad Kramer 2026-04-03 03:03:17 -07:00
  • 0c660acd1e Add daemon-owned Tailnet login flow Conrad Kramer 2026-04-03 02:09:58 -07:00
  • d1e28b8817 Route Tailnet Apple flows through daemon gRPC Conrad Kramer 2026-04-03 01:36:55 -07:00
  • f6a7f0922d Add governance and identity registry scaffolding Conrad Kramer 2026-04-03 01:36:10 -07:00
  • 1da00ecdf3 Add email-based tailnet discovery to Apple app Conrad Kramer 2026-04-03 00:42:39 -07:00
  • baf1408060 Add Tailnet landing page Conrad Kramer 2026-04-03 00:17:12 -07:00
  • 72b7f1467b Disable Forgejo local password sign-in Conrad Kramer 2026-04-02 21:44:10 -07:00
  • 3332bf5c53 Fix Forgejo OIDC account linking Conrad Kramer 2026-04-01 13:43:47 -07:00
  • bb05bd9014 Add Burrow Authentik admin directory sync Conrad Kramer 2026-04-01 11:39:29 -07:00
  • 1ff8270a01 Advertise OIDC discovery on burrow.net Conrad Kramer 2026-04-01 01:26:08 -07:00
  • 0e68c25a99 Wire Forgejo sign-in through Authentik Conrad Kramer 2026-04-01 01:12:15 -07:00
  • 7f280c08cf Commit remaining Burrow platform work ck/ipv6 Conrad Kramer 2026-03-31 23:35:36 -07:00
  • fff5475914 Probe Headscale reachability in Apple UI Conrad Kramer 2026-03-31 23:28:42 -07:00
  • be5b7d90db Enable Google Authentik login on forge Conrad Kramer 2026-03-31 23:28:35 -07:00
  • 20964e8ed7 Move forge tailnet secrets to agenix Conrad Kramer 2026-03-31 16:38:02 -07:00
  • 8aebf56d6d Resolve Burrow forge domains locally Conrad Kramer 2026-03-31 14:59:30 -07:00
  • b8347f62ba Fix Headscale bootstrap policy syntax Conrad Kramer 2026-03-31 14:56:27 -07:00
  • de25f240d5 Add Burrow forge infrastructure and tailnet control plane Conrad Kramer 2026-03-31 14:53:48 -07:00
  • d1ed826389 Unify Tailnet config presentation Conrad Kramer 2026-03-31 14:32:14 -07:00
  • 014bca073f Polish Apple network config sheets Conrad Kramer 2026-03-31 14:27:14 -07:00
  • 2f69987742 Fix iOS config sheet width Conrad Kramer 2026-03-31 13:46:11 -07:00
  • 36a54628ba Simplify iOS network add flow Conrad Kramer 2026-03-31 13:40:13 -07:00
  • 35f3b3ce4e Use AuthenticationServices for Tailnet sign-in Conrad Kramer 2026-03-31 13:09:07 -07:00
  • 7670a75840 Add Tailnet accounts and Tailscale login flow Conrad Kramer 2026-03-31 12:52:21 -07:00
  • f9062eae33 Fix Apple simulator and Swift 6 build plumbing Conrad Kramer 2026-03-31 12:50:28 -07:00
  • cdf8d22055 Add Linux tor-exec namespace runtime Conrad Kramer 2026-03-30 20:01:55 -07:00
  • 7ade60646b Allow no-tunnel passthrough mode Conrad Kramer 2026-03-30 19:30:22 -07:00
  • 450e9c6fcd Drive daemon tunnels from stored networks Conrad Kramer 2026-03-30 19:01:58 -07:00
  • b0e4351a9d Fallback macos ssh bootstrap to nsc forgejo-main-pre-sync-20260401 codex/arti-system-tcp Conrad Kramer 2026-03-19 14:11:40 -07:00
  • a4cabf9fb7 Rotate forgejo nsc secrets Conrad Kramer 2026-03-19 14:06:57 -07:00
  • 283209d364 Harden macos runner cleanup Conrad Kramer 2026-03-19 14:01:37 -07:00
  • fc79766a31 Skip tun tokio test without tun access Conrad Kramer 2026-03-19 04:56:56 -07:00
  • 8957af0e05 Use published forgejo 11.x macos runner Conrad Kramer 2026-03-19 04:48:39 -07:00
  • db443bcb50 Align macos runner lifecycle with forgejo Conrad Kramer 2026-03-19 04:43:55 -07:00
  • dd369bd0f8 Tolerate macos nsc ssh handoff exit Conrad Kramer 2026-03-19 04:37:01 -07:00
  • ff5736a817 Skip tun configure tests without tun access Conrad Kramer 2026-03-19 04:33:54 -07:00
  • 1964d1fa6e Fix linux nix develop workflow shells Conrad Kramer 2026-03-19 04:26:11 -07:00
  • 3210570ff3 Refresh namespace runtime config and linux nix env Conrad Kramer 2026-03-19 04:23:37 -07:00
  • c47f0e6bea Enable Nix and refresh linux cache volumes Conrad Kramer 2026-03-19 04:18:38 -07:00
  • 0310ef17dc Install nix on linux namespace runners Conrad Kramer 2026-03-19 04:12:11 -07:00
  • 5b09f3a742 Stabilize forgejo namespace auth and secrets Conrad Kramer 2026-03-19 04:08:10 -07:00
  • 5c0a9b3f54 Work around Xcode 26 tunnel isolation Conrad Kramer 2026-03-19 03:51:56 -07:00
  • 028627bfcb Wire namespace caches and agenix secrets Conrad Kramer 2026-03-19 03:51:53 -07:00
  • 5bd95b7a7c Avoid oslog on iOS simulator builds Conrad Kramer 2026-03-19 03:42:12 -07:00
  • e0fe21fad8 Fix Apple runner toolchain alignment Conrad Kramer 2026-03-19 03:36:11 -07:00
  • 9fcaf137ac Use active rustup toolchain in Apple build Conrad Kramer 2026-03-19 03:27:14 -07:00
  • f7193728df Relax tunnel provider isolation for Xcode 26 Conrad Kramer 2026-03-19 03:21:26 -07:00
  • 9a5f147585 Use shared macOS cache for runner bootstrap Conrad Kramer 2026-03-19 02:18:04 -07:00
  • 52c3048458 Refresh Forgejo NSC agenix secrets Conrad Kramer 2026-03-19 02:13:46 -07:00
  • 8678ef61ba Shard macOS Namespace caches by lane Conrad Kramer 2026-03-19 02:13:12 -07:00
  • bf4b270db5 Increase macOS Namespace cache volume Conrad Kramer 2026-03-19 02:07:41 -07:00
  • 2da0244d42 Stabilize Apple Namespace build caches Conrad Kramer 2026-03-19 02:06:24 -07:00