| Age | Commit message (Collapse) | Author |
|---|
|
|
|
- authelia/: Full Authelia stack (docker-compose, config, setup guide, nginx snippet)
- Forward-auth for Netdata, Cockpit, Nexus, registry
- OIDC provider for Jenkins (oic-auth plugin, authorization_policy: one_factor)
- HTTP header auth for Gerrit (X-Forwarded-User on /login/ only)
- authelia_network: 172.26.0.0/16
- nginx/nginx.conf:
- auth.swave.lol server block
- /_authelia-auth internal subrequest locations (resolver 127.0.0.11)
- auth_request on Gerrit /login/, Jenkins, Nexus, registry
- OIDC finishLogin bypass for Jenkins
- swave.lol/gerrit and swave.lol/jenkins redirect to subdomains
- proxy_redirect for Gerrit container hostname rewrites
- nginx/docker-compose.yaml: joined authelia_network
- nginx/run_certbot.sh: added auth.swave.lol
- jenkins/docker-compose.yaml: removed --prefix=/jenkins (Jenkins now at /)
- cockpit/nginx-authelia.conf, netdata/nginx-netdata.conf: added auth_request
- git-server/gerrit.config.example: Gerrit config template (real config gitignored)
- .gitignore: added users_database.yml, gerrit.config
- CLAUDE.md: updated Jenkins, Gerrit, Authelia entries; added key files
- doc/setup-guide.md: Authelia section, updated startup order and service table
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
|
Nexus: cap heap at 1024m (down from default 2703m)
Jenkins: cap heap at 512m (was unbounded)
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
|
|
Mount jenkins/init.groovy.d/ into the container to auto-clean corrupted
flow executions on startup (JENKINS-50407). Document both the prevention
(Performance-optimized durability setting) and recovery (groovy cleanup
script) in the setup guide.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
|
|
Custom Debian bookworm image with all dependencies for building the
Linux kernel (gcc, flex, bison, libelf, libssl, dwarves, etc.).
Includes example Jenkinsfile showing kernel build with artifact archiving.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
|
|
Set the container's docker group GID to 990 to match the host's
docker socket ownership, allowing Jenkins to spawn sibling containers.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
|
|
Define subnet 172.23.0.0/16 for jenkins_network with static IPs:
jenkins (172.23.0.2), git-server (172.23.0.3), gerrit (172.23.0.4).
This allows git-server to communicate directly with Jenkins for
build triggers and webhook integrations.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
|
|
- Dockerfile extends jenkins:lts with Docker CLI and docker-workflow plugin
so Jenkins can spawn sibling build containers via host's docker.sock
- docker-compose.yaml mounts docker.sock, persists jenkins_home,
uses --prefix=/jenkins for path-based access
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
|
