From ff540126a161fbc0cdff8f71bbb4938a7e459e7b Mon Sep 17 00:00:00 2001
From: June <june@jsts.xyz>
Date: Sun, 16 Feb 2025 02:34:14 +0100
Subject: [PATCH] add chaosknoten to hosts and new hypervisors group

Also exclude that group from the tasks otherwise targeting all hosts.
---
 inventories/chaosknoten/hosts.yaml | 5 +++++
 playbooks/deploy.yaml              | 4 ++--
 playbooks/maintenance.yaml         | 4 ++--
 3 files changed, 9 insertions(+), 4 deletions(-)

diff --git a/inventories/chaosknoten/hosts.yaml b/inventories/chaosknoten/hosts.yaml
index 97ef4bb..4949dc5 100644
--- a/inventories/chaosknoten/hosts.yaml
+++ b/inventories/chaosknoten/hosts.yaml
@@ -4,6 +4,8 @@ all:
       ansible_host: ccchoir-intern.hamburg.ccc.de
       ansible_user: chaos
       ansible_ssh_common_args: -J ssh://chaos@public-reverse-proxy.hamburg.ccc.de
+    chaosknoten:
+      ansible_host: chaosknoten.hamburg.ccc.de
     cloud:
       ansible_host: cloud-intern.hamburg.ccc.de
       ansible_user: chaos
@@ -57,6 +59,9 @@ all:
       ansible_host: zammad-intern.hamburg.ccc.de
       ansible_user: chaos
       ansible_ssh_common_args: -J ssh://chaos@public-reverse-proxy.hamburg.ccc.de
+hypervisors:
+  hosts:
+    chaosknoten:
 base_config_hosts:
   hosts:
     ccchoir:
diff --git a/playbooks/deploy.yaml b/playbooks/deploy.yaml
index 66f03de..d7dcdac 100644
--- a/playbooks/deploy.yaml
+++ b/playbooks/deploy.yaml
@@ -59,8 +59,8 @@
   roles:
     - prometheus_node_exporter
 
-- name: Configure unattended upgrades
-  hosts: all
+- name: Configure unattended upgrades for all non-hypervisors
+  hosts: all:!hypervisors
   become: true
   roles:
     - role: debops.debops.unattended_upgrades
diff --git a/playbooks/maintenance.yaml b/playbooks/maintenance.yaml
index 8ce7caa..31c817b 100644
--- a/playbooks/maintenance.yaml
+++ b/playbooks/maintenance.yaml
@@ -26,8 +26,8 @@
       vars:
         nginx__version_spec: "{{ nextcloud__nginx_version_spec | default('') }}"
 
-- name: Make Sure System Package Are Up-To-Date
-  hosts: all
+- name: Make Sure System Package Are Up-To-Date for all non-hypervisors
+  hosts: all:!hypervisors
   roles:
     - apt_update_and_upgrade