tangled.org
This is a WIP, mostly vibe coded PR that should show the direction of the implementation. Hopefully it gets the point across.
I haven't been able to run this yet because struggling to get my local environment working.
Monorepo for Tangled — https://tangled.org
WIP: OIDC Authenticated Pipelines #454
closed
opened by
tom.sherman.is
targeting
master
from
[deleted fork]:
spindle-oidc
expand 29 commits
hide 29 commits
a73e3189
gitignore: add .envrc for the direnv users
3c8332c6
nix: use filesets instead of gitignore.nix
This allows us to easily do things like ignoring Nix source files within our
source tree (also done in this commit), which prevents unnecessary rebuilds.
Signed-off-by: Winter <winter@winter.cafe>
16255f92
nix: bump gomod2nix.toml
Signed-off-by: oppiliappan <me@oppi.li>
48467689
nix: add secrets config to spindle module
Signed-off-by: oppiliappan <me@oppi.li>
4e03f297
spindle: set worker count to 5
Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.sh>
23776d5e
spindle: improve member ingestion
Signed-off-by: oppiliappan <me@oppi.li>
15f63d03
nix: update lexgen package
Now we can generate the same files that have been committed recently. ;)
3fb08dd7
appview/oauth: add to default spindle
Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.sh>
2bc0d160
appview/signup: wrap the TXT record content in quotes
Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.sh>
f42b2ad0
spindle: subscribe to all DIDs on boot
Signed-off-by: oppiliappan <me@oppi.li>
879790a5
spindle/secrets: delete metadata so key doesn't persist
Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.sh>
b185e73d
docs: fix typo
0e941b22
docs: spindle: openbao: add force flag when generating secret id
Signed-off-by: dusk <y.bera003.06@protonmail.com>
3d6e9ffc
nix/vm: add aarch64 support
Signed-off-by: Winter <winter@winter.cafe>
cf07090e
nix/vm: don't hardcode knot secret and spindle owner
Signed-off-by: Winter <winter@winter.cafe>
9e7cdea4
nix/vm: fix on non-Linux systems
Signed-off-by: Winter <winter@winter.cafe>
64d963ad
nix/vm: isolate it a bit more
I personally don't like that nixos-shell inherits a ton of stuff from the
host by default, even mounting my home directory as r/w! I imagine I'm not
the only one with this opinion, so let's put a stop to it by default.
Signed-off-by: Winter <winter@winter.cafe>
1b0033f6
nix/vm: add debugging tools mentioned in docs
Needed now that we're isolating things for everyone.
Signed-off-by: Winter <winter@winter.cafe>
10cd7fbb
nix: add script to do the lexgen dance
h/t https://github.com/bluesky-social/indigo/issues/931#issuecomment-2635675099
for the inspiration
Signed-off-by: Winter <winter@winter.cafe>
64bc1297
appview/db: fix comparing against []byte
SQLite stores byte sequences as blobs, which we were not handling properly,
causing (at least) actions relating to artifacts to break. (Not sure
when they broke, sorry!)
Signed-off-by: Winter <winter@winter.cafe>
7a076be1
appview: pages/templates/repo: fix styling for file tree items
Signed-off-by: Safwan Parkar <safwanparkar6@gmail.com>
bdf27f0d
nix: dedup appview static files into a package, and use that everywhere, including copying before watching appview
Signed-off-by: dusk <y.bera003.06@protonmail.com>
7dda8376
appview: strings: return 404 page if string wasnt found
Signed-off-by: dusk <y.bera003.06@protonmail.com>
730a252f
nix: fmt
Signed-off-by: oppiliappan <me@oppi.li>
3941b800
spindle: ensure that event source is identical to the repo's knot
thanks @winter.bsky.social for the report!
Signed-off-by: oppiliappan <me@oppi.li>
6f334923
nix: don't use cp --verbose
It's noisy, especially upon entering every devshell.
Signed-off-by: Winter <winter@winter.cafe>
886b5a75
appview/pages: remove repo/settings.html
this file is unused
Signed-off-by: oppiliappan <me@oppi.li>
7e4a93c0
appview/pages: unify tab styles
Signed-off-by: oppiliappan <me@oppi.li>
fb64beba
Initial implementation sketch