Self Host Blocks releases

Update

nix flake update selfhostblocks --override-input selfhostblocks github:ibizaman/selfhostblocks/v0.8.0

See https://shb.skarabox.com/usage.html#usage-flake-tag

Breaking Changes

• Bump of Nextcloud version to 32 and 33 because of nixpkgs bump. All provided apps are verified compatible with Nextcloud 33 thanks to new tests.

New Features

• Added Immich Public Proxy service
• Add homepage service with dashboard contract implemented by all services
• Add scrutiny service.
• ZFS module now supports setting permissions
• Add landing page for mailserver and dashboard contract integration

Bug Fixes

• Use configurable dataDir in arr stack
• Forgejo ensures ldap is setup when sso is configured
• Add nixpkgs patches on aarch64-linux too
• Self-signed certs are now idempotent
• Prometheus scrapes metrics at 15s interval instead of 1m

Other Changes

• Arr stack declares ldap groups, declare ApiKeys and bypasses auth for readarr when sso is enabled
• Forgejo declares ldap group

New Contributors

• @Danguilhen made their first contribution in https://github.com/ibizaman/selfhostblocks/pull/654
• @dniku made their first contribution in https://github.com/ibizaman/selfhostblocks/pull/666

Changelog: https://github.com/ibizaman/selfhostblocks/blob/v0.8.0/CHANGELOG.md
Commit: https://github.com/ibizaman/selfhostblocks/compare/v0.7.3...v0.8.0

v0.7.3

New Features

• Add mailserver module integrating with Simple NixOS Mailserver and allowing full backup of an email provider.
• Bump nixpkgs from https://github.com/NixOS/nixpkgs/commit/5e2a59a5b1a82f89f2c7e598302a9cacebb72a67 to https://github.com/NixOS/nixpkgs/commit/bfc1b8a4574108ceef22f02bafcf6611380c100d. Full diff.
  On top of minor changes, the most notable one was:
  • Updated Jellyfin LDAP and SSO plugins and configuration. @Codys-Wright

Bug Fixes

• Fix Restic and Authelia modules referencing systemd services without the .service suffix and leading to

Changelog: https://github.com/ibizaman/selfhostblocks/blob/v0.7.3/CHANGELOG.md
Commit: https://github.com/ibizaman/selfhostblocks/compare/v0.7.2...v0.7.3

What's Changed

New Features

• Forgejo uses secrets contract for smtp password.
• Add Firefly-iii service.
• Jellyfin can install plugins declaratively.
  (Support is quite crude and WIP).
• Jellyfin configures LDAP and SSO fully declaratively, including installing necessary plugins.
• Nextcloud 32 is fully supported thanks to tests for version 31 and 32.

Fixes

• Revert Authelia to continue using dots in systemd service names.
  This caused issue with nginx name resolution.

Other Changes

• Authelia uses non deprecated smtp.address option.
• Add documentation for Nginx block
• Now a user which is only member of the admin LDAP group of a service can login.
  Before, some services required a user to be member of both the user and admin LDAP group.
  This is ensured by regression tests going forward.

Changelog: https://github.com/ibizaman/selfhostblocks/blob/v0.7.2/CHANGELOG.md
Commit: https://github.com/ibizaman/selfhostblocks/compare/v0.7.1...v0.7.2

Big changes are:

• Enhance Grafana dashboard showing SSL certificate renewal jobs. https://shb.skarabox.com/blocks-monitoring.html#blocks-monitoring-ssl
• Fix let's encrypt certificate renewal jobs by removing duplicated domain name.
  Also adds an assertion to catch these kinds of errors.

In the documentation:

• Distinguish description for contract databasebackup from backup's by @KiaraGrouwstra in https://github.com/ibizaman/selfhostblocks/pull/598

Changelog: https://github.com/ibizaman/selfhostblocks/blob/v0.7.1/CHANGELOG.md
Commit: https://github.com/ibizaman/selfhostblocks/compare/v0.7.0...v0.7.1

Big changes are:

• Fix pkgs overrides not being passed to users of SelfHostBlocks.
  This will require to update your flake to follow the example in the Usage section.
• Add a Grafana dashboard showing stats on backup jobs
  and also an alert if a backup job did not run in the last 24 hours or never succeeded in the last 24 hours.
• Add SSO integration in Grafana.
• Add Paperless service.
• Allow to upload big files in Immich.

In the documentation:

• Add recipe to setup DNS server with DNSSEC.

Changelog: https://github.com/ibizaman/selfhostblocks/blob/v0.7.0/CHANGELOG.md
Commits: https://github.com/ibizaman/selfhostblocks/compare/v0.6.1...v0.7.0

Big changes are:

• Implement backup and databasebackup contracts with BorgBackup block.

Changelog: https://github.com/ibizaman/selfhostblocks/blob/v0.6.0/CHANGELOG.md
Commits: https://github.com/ibizaman/selfhostblocks/compare/v0.6.0...v0.6.1

Big changes are:

• Removed support for Nextcloud 30 and add support for Nextcloud 32.
• Meilisearch is now configured with production environment setting and master key.
• Added new demo for "minimal" SelfHostBlocks setup, which is tested in CI.
• Format all files in repo and make sure they are formatted in CI.

Changelog: https://github.com/ibizaman/selfhostblocks/blob/v0.6.0/CHANGELOG.md
Commits: https://github.com/ibizaman/selfhostblocks/compare/v0.5.1...v0.6.0

New Features

• Added Karakeep service with SSO integration.
• Add SelfHostBlocks' lib into pkgs.lib.shb. Integrates with Skarabox too.

Other Changes

• Moved implementation guide under contributing section: https://shb.skarabox.com/contributing.html#contributing-code

Changelog: https://github.com/ibizaman/selfhostblocks/blob/v0.5.1/CHANGELOG.md
Commits: https://github.com/ibizaman/selfhostblocks/compare/v0.5.0...v0.5.1

Breaking Changes

• Modules in the nixosModules output field do not anymore have the system in their path.
  selfhostblocks.nixosModules.x86_64-linux.home-assistant becomes selfhostblocks.nixosModules.home-assistant
  like it always should have been.

Fixes

• Added test case making sure a user belonging to a not authorized LDAP group cannot login.
  Fixed Open WebUI module.
• Now importing a single module, like selfhostblocks.nixosModules.home-assistant, will
  import all needed block modules at the same time.

Other Changes

• Nextcloud module can now setup SSO integration without setting up LDAP integration.

Changelog: https://github.com/ibizaman/selfhostblocks/blob/v0.5.0/CHANGELOG.md
Commits: https://github.com/ibizaman/selfhostblocks/compare/v0.4.4...v0.5.0

3 new services in this release :slightly_smiling_face:

New Features

• Added Pinchflat service with SSO integration. Declarative user creation only supported through SSO integration.
• Added Immich service with SSO integration.
• Added Open WebUI service with SSO integration.

Changelog: https://github.com/ibizaman/selfhostblocks/blob/v0.4.4/CHANGELOG.md
Commits: https://github.com/ibizaman/selfhostblocks/compare/v0.4.3...v0.4.4

New Features

• Allow user to change their SSO password in Authelia.
• Make Audiobookshelf SSO integration respect admin users.

Fixes

• Fix permission on Nextcloud systemd service.
• Delete Forgejo backups correctly to avoid them piling up.

Other Changes

• Add recipes section to the documentation.

Changelog: https://github.com/ibizaman/selfhostblocks/blob/v0.4.3/CHANGELOG.md
Commits: https://github.com/ibizaman/selfhostblocks/compare/v0.4.2...v0.4.3

New Features

• The LLDAP and Authelia modules gain a debug mode where a mitmdump instance is added so all traffic is printed.

Fixes

• By default, LLDAP module only enforces groups declaratively. Users that are not defined declaratively
  are not anymore deleted by inadvertence.
• SSO integration with most services got fixed. A recent incompatible change in upstream Authelia broke most of them.
• Fixed PostgreSQL and Home Assistant modules after nixpkgs updates.
• Fixed Nextcloud module SSO integration with Authelia.
• Make Nextcloud SSO integration respect admin users.

Changelog: https://github.com/ibizaman/selfhostblocks/blob/v0.4.2/CHANGELOG.md
Commits: https://github.com/ibizaman/selfhostblocks/compare/v0.4.1...v0.4.2

This release exposes individual nixos modules in the flake output. One can now only import home-assistant with selfhostblocks.nixosModules.x86_64-linux.home-assistant.

LLDAP now manages users, groups, user attributes and group attributes declaratively.

New Contributors

• @charmoniumQ made their first contribution in https://github.com/ibizaman/selfhostblocks/pull/506

Changelog: https://github.com/ibizaman/selfhostblocks/blob/v0.4.1/CHANGELOG.md
Commits: https://github.com/ibizaman/selfhostblocks/compare/v0.4.0...v0.4.1

This release makes the Jellyfin service setup declarative, including the initial admin user. It was made possible thanks to a new CLI tool written in C# upstreamed in the Jellyfin repo.

The only breaking change here is renaming all options from shb.ldap to shb.lldap.

Changelog: https://github.com/ibizaman/selfhostblocks/blob/v0.4.0/CHANGELOG.md
Commits: https://github.com/ibizaman/selfhostblocks/compare/v0.3.1...v0.4.0

This release celebrates all the tests to bump nixpkgs being fixed. SelfHostBlocks is now up-to-date again with nixpkgs.

New Contributors

• @KiaraGrouwstra made their first contribution in https://github.com/ibizaman/selfhostblocks/pull/470

Changelog: https://github.com/ibizaman/selfhostblocks/blob/v0.3.1/CHANGELOG.md
Commits: https://github.com/ibizaman/selfhostblocks/compare/v0.3.0...v0.3.1

This release changes a lot on the infrastructure of SelfHostBlocks and on the testing side.

The bump of Nextcloud to 29 is the only breaking change requiring a version bump.

New Features

• Add option to add extra args to hledger command.

Breaking Changes

• Default version of Nextcloud is now 29.

Fixes

• Home Assistant config gets correctly generated with secrets
  even if LDAP integration is not enabled.
• Fix Jellyfin SSO plugin which was left badly configured
  after a code refactoring.

Other Changes

• Add a lot of playwright tests for services.
• Add service implementation manual page to document
  how to integrate a service in SHB.
• Add update-redirects command to manage the redirect.json page.
• Add home-assistant manual.

New Contributors

• @eahlberg made their first contribution in https://github.com/ibizaman/selfhostblocks/pull/452
• @DoomHammer made their first contribution in https://github.com/ibizaman/selfhostblocks/pull/461
• @ak2k made their first contribution in https://github.com/ibizaman/selfhostblocks/pull/465
• @arminfro made their first contribution in https://github.com/ibizaman/selfhostblocks/pull/466

Full Changelog: https://github.com/ibizaman/selfhostblocks/compare/v0.2.10...v0.3.0