CCCHH/ansible-infra
CCCHH/ansible-infra
4
2
Fork 2
Code Issues 6 Pull requests 5 Wiki Activity Actions

disable digest pinning for our images, since Forgejo cleans them up
Some checks failed
/ Ansible Lint (push) Failing after 1m59s
Details

Browse source 
Since Forgejo seems to clean up older tag versions, so older digests,
disable digest pinning for our images.
While generally resulting in undeployable config, with ansible-pull the
breakage is especially noticeable.
This commit is contained in:
June 2025-10-30 05:50:42 +01:00
commit a11ccaf16c
Signed by: june
SSH key fingerprint: SHA256:o9EAq4Y9N9K0pBQeBTqhSDrND5E7oB+60ZNx0U1yPe0
5 changed files with 14 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

6
renovate.json
View file

@ -28,6 +28,12 @@
"matchDatasources": ["docker"], "matchDatasources": ["docker"],
"matchPackageNames": ["docker.io/pretix/standalone"], "matchPackageNames": ["docker.io/pretix/standalone"],
"versioning": "regex:^(?<major>\\d+\\.\\d+)(?:\\.(?<minor>\\d+))$" "versioning": "regex:^(?<major>\\d+\\.\\d+)(?:\\.(?<minor>\\d+))$"
},
// Since Forgejo seems to clean up older tag versions, so older digests, disable digest pinning for our images.
{
"matchDatasources": ["docker"],
"matchPackageNames": ["git.hamburg.ccc.de/*"],
"pinDigests": false
} }
], ],
"customManagers": [ "customManagers": [

8
resources/chaosknoten/keycloak/docker_compose/compose.yaml.j2
View file

@ -22,7 +22,7 @@
services: services:
keycloak: keycloak:
image: git.hamburg.ccc.de/ccchh/oci-images/keycloak:26.4@sha256:06bfa760dfa40bd3d4305a67ce02e9dc70113151f09820a3bc6c75f5f7ece855 image: git.hamburg.ccc.de/ccchh/oci-images/keycloak:26.4
pull_policy: always pull_policy: always
restart: unless-stopped restart: unless-stopped
command: start --optimized command: start --optimized
@ -58,7 +58,7 @@ services:
POSTGRES_DB: keycloak POSTGRES_DB: keycloak
id-invite-web: id-invite-web:
image: git.hamburg.ccc.de/ccchh/id-invite/id-invite:latest@sha256:ba011f410bc1d2e112135857c236412f65b727f15197dbea1fffd955e0487a6a image: git.hamburg.ccc.de/ccchh/id-invite/id-invite:latest
command: web command: web
restart: unless-stopped restart: unless-stopped
networks: networks:
@ -84,7 +84,7 @@ services:
- "BOTTLE_HOST=0.0.0.0" - "BOTTLE_HOST=0.0.0.0"
id-invite-email: id-invite-email:
image: git.hamburg.ccc.de/ccchh/id-invite/id-invite:latest@sha256:ba011f410bc1d2e112135857c236412f65b727f15197dbea1fffd955e0487a6a image: git.hamburg.ccc.de/ccchh/id-invite/id-invite:latest
command: email command: email
restart: unless-stopped restart: unless-stopped
networks: networks:
@ -99,7 +99,7 @@ services:
- "SMTP_PASSWORD={{ secret__id_no_reply_smtp }}" - "SMTP_PASSWORD={{ secret__id_no_reply_smtp }}"
id-invite-keycloak: id-invite-keycloak:
image: git.hamburg.ccc.de/ccchh/id-invite/id-invite:latest@sha256:ba011f410bc1d2e112135857c236412f65b727f15197dbea1fffd955e0487a6a image: git.hamburg.ccc.de/ccchh/id-invite/id-invite:latest
command: keycloak command: keycloak
restart: unless-stopped restart: unless-stopped
networks: networks:

2
resources/chaosknoten/pad/docker_compose/compose.yaml.j2
View file

@ -46,7 +46,7 @@ services:
- database - database
hedgedoc-expire: hedgedoc-expire:
image: git.hamburg.ccc.de/ccchh/hedgedoc-expire/hedgedoc-expire:latest@sha256:9be261712a8ee57ff89068c3926a8c5d7c96ff80aa629f98eec239786c6158b1 image: git.hamburg.ccc.de/ccchh/hedgedoc-expire/hedgedoc-expire:latest
# command: "emailcheck" # command: "emailcheck"
command: "cron" command: "cron"
environment: environment:

2
resources/z9/dooris/docker_compose/compose.yaml.j2
View file

@ -2,7 +2,7 @@
services: services:
dooris: dooris:
image: git.hamburg.ccc.de/ccchh/hmdooris/hmdooris:latest@sha256:a895989b0955936cbe0641de0309bcb343a9da9c2c8d6184d906a66bf1151303 image: git.hamburg.ccc.de/ccchh/hmdooris/hmdooris:latest
environment: environment:
HMDOORIS_ALLOWED_IPS: "2a07:c481:1:c8::/64 2a01:170:118b::/56 172.31.200.0/23 172.31.202.0/27" HMDOORIS_ALLOWED_IPS: "2a07:c481:1:c8::/64 2a01:170:118b::/56 172.31.200.0/23 172.31.202.0/27"
HMDOORIS_CCUJACK_CERTIFICATE_PATH: false HMDOORIS_CCUJACK_CERTIFICATE_PATH: false

4
resources/z9/yate/docker_compose/compose.yaml.j2
View file

@ -2,7 +2,7 @@
services: services:
yate: yate:
image: git.hamburg.ccc.de/ccchh/yate-image/yate-image:latest@sha256:66f77d63dc52c9aeb09481e48b9d62f5f95439f86eab3766fce94daea7b2e26a image: git.hamburg.ccc.de/ccchh/yate-image/yate-image:latest
# command: # command:
# - sh # - sh
# - "-c" # - "-c"
@ -17,4 +17,4 @@ services:
- ./configs/accfile.conf:/opt/yate/etc/yate/accfile.conf - ./configs/accfile.conf:/opt/yate/etc/yate/accfile.conf
- ./configs/regexroute.conf:/opt/yate/etc/yate/regexroute.conf - ./configs/regexroute.conf:/opt/yate/etc/yate/regexroute.conf
- ./configs/regfile.conf:/opt/yate/etc/yate/regfile.conf - ./configs/regfile.conf:/opt/yate/etc/yate/regfile.conf
- ./lib-yate:/var/lib/yate - ./lib-yate:/var/lib/yate