612 Commits

Author SHA1 Message Date
Aarnav Tale
bcd87453bd
chore: update go mods 2025-08-20 11:30:10 -04:00
Aarnav Tale
797ed56c07
chore: remove github pages workflow 2025-08-19 17:53:34 -04:00
Aarnav Tale
ae2bd35cbf
chore: update biome to v2 2025-08-19 17:52:26 -04:00
Aarnav Tale
d2c4f5eb2b
feat: completely overhaul the auth model
* Cookies are now encrypted JWTs (GHSA-wrqq-v7qw-r5w7)
* Authentication is stored in the SQLite database (auto-migrated)
* Session logic is much cleaner
2025-08-19 17:52:16 -04:00
Aarnav Tale
8cb91cd45b
feat: overhaul hp_agent lifecycle handling
* Added backoff and liveness probes for better management
* Switched IPC to a simple text based system
* Lookups don't directly touch the agent now
* Use the database as a source of truth
2025-08-19 00:10:06 -04:00
Aarnav Tale
a4a037ed68
feat: update to rolldown-vite and typescript-go 2025-08-18 16:42:29 -04:00
Aarnav Tale
17712cbb1c
feat: upgrade react-router + hono-server 2025-08-18 16:05:51 -04:00
Aarnav Tale
616b63bb71
chore: add wrangler.toml 2025-08-18 13:37:53 -04:00
Aarnav Tale
361bc493c0
chore: pin vitepress to 2.0.0 and add sponsor link 2025-08-18 13:28:16 -04:00
Aarnav Tale
bc3fc5ec5d
fix: turns out we need isSsrBuild in vite.config.ts still 2025-08-18 13:11:17 -04:00
Igor Ramazanov
c98dc5ed1d feat: nix: docs: improve NixOS docs generations 2025-08-18 13:10:38 -04:00
Igor Ramazanov
9192013bfe feat: documentation website using Vitepress
Adds documentation website using https://vitepress.dev.

Some decisions are questionable, for example creation of a symbolic link
for the README in the `docs/`. I wanted to preserve the ability to read
docs using Github. Maybe not needed.

Another issue, is the page outline for the `NixOS` chapter is too
narrow.

But should serve as a scaffold/basis for doing it properly.
2025-08-18 13:10:38 -04:00
Igor Ramazanov
fdbfe584c5 feat: nix: add a new mise task and nix flake output to generate NixOS docs
Adds a new Nix flake output `headplane-nixos-docs` which generates a
Markdown page with all NixOS `services.headplane.settings.*` options.

Replaces existing handwritten options documentation.
2025-08-18 13:10:38 -04:00
Igor Ramazanov
cdcb38f11e fix: nix: hash 2025-08-09 17:09:00 -04:00
Aarnav Tale
1355e1535d
chore: update changelog 2025-08-05 14:33:29 -04:00
Aarnav Tale
ebd219b622
chore: update pnpm nix deps hash 2025-08-05 13:40:43 -04:00
Igor Ramazanov
1ce0dc375e fix: remove direnv and envrc from the repo
I've found it being clumsy and getting in the way.

For example, in my `.envrc` I do `use flake . --override-input nixpkgs
"$NIXPKGS"` to reuse an already existing instance of the `nixpkgs` on my
machine.

Feels like it should be up to a developer on how to use `nix
develop`/`direnv`
2025-08-05 13:16:02 -04:00
Igor Ramazanov
1eaf3abe21 feat: nix: use updated pnpm fetcher version
see:
https://nixos.org/manual/nixpkgs/stable/#javascript-pnpm-fetcherVersion
2025-08-05 13:16:02 -04:00
Igor Ramazanov
8a9235836a fix: agent inherits UID/GID from the parent process 2025-08-05 13:16:02 -04:00
Igor Ramazanov
344901d38c fix: debug log level when searching for a Headscale process 2025-08-05 13:16:02 -04:00
Igor Ramazanov
ea004df2bb feat: nix: add debug logging flag 2025-08-05 13:16:02 -04:00
Igor Ramazanov
c59632a0b7 feat: nix: match NixOS module to the config schema 2025-08-05 13:16:02 -04:00
Igor Ramazanov
89e38e1356 feat: nix: rename hp_ssh_wasm to headplane-ssh-wasm for consistency 2025-08-05 13:16:02 -04:00
Igor Ramazanov
d257b22f91 chore: nix: nix fmt 2025-08-05 13:16:02 -04:00
StealthBadger747
441e31690b Cleanup doc and set sane defaults 2025-08-05 13:16:02 -04:00
Igor Ramazanov
e0fde7d0f4 Turn integration.proc.enabled by default 2025-08-05 13:16:02 -04:00
Igor Ramazanov
943e5d2a15 Remove inlined secrets options
Leaving only `_path` variants.
2025-08-05 13:16:02 -04:00
Erik Parawell
7f952bcb3b Nix changes 2025-08-05 13:16:02 -04:00
StealthBadger747
c3112507b5 Copy drizzle as well 2025-08-05 13:16:02 -04:00
StealthBadger747
8b3d0e9bb6 Maybe actually fix builds 2025-08-05 13:16:02 -04:00
StealthBadger747
7a34a01dd0 Got the build working 2025-08-05 13:16:02 -04:00
Igor Ramazanov
51a85e1bfe fix: nix update hash 2025-08-05 13:16:02 -04:00
StealthBadger747
5ab9686460 Update the configuration README
Revert flake.nix and package.nix to main; drop wasm.nix
2025-08-05 13:15:03 -04:00
Erik Parawell
5cfd9e411b Implement path loading
Got the build working

Maybe actually fix builds

Copy drizzle as well
2025-08-05 13:15:03 -04:00
Aarnav Tale
7691f74d43
fix: basename should always be prefix??? 2025-07-10 11:30:23 -04:00
Aarnav Tale
ce4617d0e1
chore: walk back on nonroot, its too much of a breaking change 2025-06-24 12:23:05 -04:00
Aarnav Tale
6d99aca058
feat: add matrix build for release 2025-06-24 12:06:23 -04:00
Aarnav Tale
d809eea564
feat: finalize split debug and distroless container (closes #255) 2025-06-24 11:28:55 -04:00
Aarnav Tale
eacde3deb8
chore: attestation is sha256 based, we dont need tags 2025-06-24 11:15:28 -04:00
Aarnav Tale
fc7bedc8b1
feat: append -next to pre-release versions in pnpm build 2025-06-24 11:04:24 -04:00
Aarnav Tale
ecc547601f
fix: pass in github token for mise ratelimits 2025-06-24 11:01:16 -04:00
Aarnav Tale
eed12d348e
feat: build a debug-shell and distroless container 2025-06-24 10:56:43 -04:00
Aarnav Tale
5a254b746b
docs: enforce node lts 22.16 which has sqlite support unflagged 2025-06-24 10:39:51 -04:00
Aarnav Tale
2cc4339499
chore: update changelog 2025-06-23 00:35:50 -04:00
Aarnav Tale
84c820efb1
chore: merge remote-tracking branch 'origin' into next 2025-06-23 00:35:04 -04:00
Gabe Cook
779af42601 fix: username never falling back to email 2025-06-23 00:33:29 -04:00
Aarnav Tale
f990670e86
Merge remote-tracking branch 'origin/main' into next 2025-06-22 17:59:03 -04:00
Peder 'hayer' Husom
0344f17887 Proc mode: try to guess PID based on PPID when multiple found 2025-06-22 17:57:52 -04:00
Aarnav Tale
f28bfd5f86
fix: add attestation perms to gha 2025-06-22 17:36:22 -04:00
Aarnav Tale
8f1b577b5e
fix: allow id-token write in gh actions 2025-06-22 17:32:39 -04:00