snix/ops
Florian Klink d9ca20a5cc feat(ops/keycloak): configure Forgejo Roles
There's two Roles for the Forgejo application, "Admin" and
"Contributors".
Everyone gets the "Contributor" role assigned automatically (it doesn't
really give you a ton of privileges).

Regarding mapping Gerrit groups, it seems there's no support for this in
the `gerrit-oauth-provider` plugin (yet) -
see https://github.com/davido/gerrit-oauth-provider/issues/170.

Fixes #73.

Change-Id: I3cbb968e664125b1f08235db3008d1dbf778922a
Reviewed-on: https://cl.snix.dev/c/snix/+/30477
Tested-by: besadii
Reviewed-by: Jonas Chevalier <zimbatm@zimbatm.com>
Autosubmit: Florian Klink <flokli@flokli.de>
2025-05-05 12:36:30 +00:00
..
besadii doc(ops/besadii): update docstring 2025-05-02 01:11:06 +00:00
buildkite feat(*): initialize new Snix infrastructure 2025-03-17 17:15:07 +00:00
buildkite-api-proxy feat(ops/buildkite-api-proxy): init 2025-05-03 22:36:42 +00:00
dashboards fix(treewide): add missing final newlines 2025-03-21 13:33:32 +00:00
dns feat(ops): Deploy harmonia on cache.snix.dev 2025-03-31 12:39:21 +00:00
gerrit-autosubmit chore(ops/gerrit-autosubmit): clean up warnings & clippy lints 2024-01-03 20:28:56 +00:00
gerrit-tvl fix(ops/gerrit-tvl): query buildkite-status endpoint and re-enable 2025-05-03 22:49:43 +00:00
hcloud fix(ops): delete email config for now 2025-03-18 21:52:06 +00:00
hetzner-s3 feat(*): initialize new Snix infrastructure 2025-03-17 17:15:07 +00:00
keycloak feat(ops/keycloak): configure Forgejo Roles 2025-05-05 12:36:30 +00:00
machines feat(ops/gerrit01): provide buildkite-api-proxy-token.age 2025-05-03 22:36:42 +00:00
modules feat(ops/keycloak): configure Forgejo Roles 2025-05-05 12:36:30 +00:00
pipelines fix(ops): add +x for /nix/var/nix/gcroots 2025-03-23 15:02:22 +00:00
secrets feat(ops/gerrit01): provide buildkite-api-proxy-token.age 2025-05-03 22:36:42 +00:00
users refactor(ops): use ops.users for ssh keys consistently 2025-03-20 12:21:44 +00:00
nixos.nix chore(ops/nixos): drop ops.rebuild-system 2025-03-22 15:57:46 +00:00