165487884c
setup reverse-proxying for *.staging.diday.org
/ Ansible Lint (push) Successful in 2m12s
2026-02-27 21:51:09 +01:00
bc9e76b8ed
remove did.hamburg.ccc.de from public-reverse-proxy
2026-02-27 21:51:09 +01:00
983584a510
configure reverse proxy map explicitly for hostnames
2026-02-27 21:51:09 +01:00
7ca446457a
onlyoffice: support custom fonts and add di.day fonts
/ Ansible Lint (push) Successful in 2m12s
2026-02-26 23:13:30 +01:00
fcc0d615a7
configure diday.org on public-reverse-proxy
/ Ansible Lint (push) Successful in 3m27s
2026-02-26 18:01:52 +01:00
41dc9c8529
configure www2 nginx
/ Ansible Lint (push) Successful in 2m21s
2026-02-26 17:44:24 +01:00
3e3cedd357
add www2 and www3 hosts
2026-02-24 19:09:20 +01:00
ac013ca8a1
Fix template syntax
/ Ansible Lint (push) Successful in 2m8s
2026-02-22 18:37:16 +01:00
08101ccef1
Fix permission
2026-02-22 18:37:01 +01:00
7a1ea7d40e
Override base.html template to brand site
/ Ansible Lint (push) Successful in 2m9s
2026-02-22 18:22:12 +01:00
d26fbf2577
Allow syncing an arbitrary set of files to the target
2026-02-22 18:21:47 +01:00
a3c514d18d
Ignore pycaches
2026-02-22 18:21:15 +01:00
bb06f21c53
configure diday website deployment
/ Ansible Lint (push) Successful in 2m17s
2026-02-18 11:57:21 +01:00
e823c46a2d
stb updated key
/ Ansible Lint (push) Successful in 2m15s
2026-02-18 09:51:25 +01:00
910655adfb
Explain how to update GPG keys
2026-02-18 09:34:27 +01:00
5f31392a27
Remove authoritative-dns as its not needed anymore
/ Ansible Lint (pull_request) Successful in 2m15s
/ Ansible Lint (push) Successful in 2m18s
2026-02-11 10:38:04 +01:00
fe647da3bf
mjolnir: deploy mjolnir using docker compose
...
/ Ansible Lint (push) Successful in 2m9s
Moving from mjolnir from nix-infra to ansible-infra.
Also using native encryption now instead of the deprecated pantalaimon
and having protectAllJoinedRooms set to true for easier and quicker
usage.
2026-02-11 03:10:43 +01:00
db70d666d1
vscode settings: exclude vendored collections and roles from search
/ Ansible Lint (push) Failing after 12m53s
2026-02-09 19:53:27 +01:00
7b8dab07b6
distribution_check(role): remove role as it's not really needed
...
As the roles are used internally only anyway, we don't need to specify
compatbilities like this and don't properly use it anyway.
2026-02-09 17:49:49 +01:00
2f67cb875d
status(host): rotate age key
/ Ansible Lint (push) Failing after 1m55s
2026-02-09 17:43:25 +01:00
2350710177
Use new entry after acmedns db reset
/ Ansible Lint (push) Successful in 2m25s
2026-02-08 18:38:37 +01:00
3086c2b60c
Use new name for sqlite driver
/ Ansible Lint (push) Successful in 2m13s
2026-02-08 14:19:02 +01:00
196f1d70cf
downgrade acme-dns to v1.0
/ Ansible Lint (push) Successful in 2m9s
2026-02-08 11:37:14 +01:00
f6c15773e1
ansible-lint: add collections and roles directories to excluded paths
/ Ansible Lint (pull_request) Successful in 2m47s
/ Ansible Lint (push) Successful in 2m11s
2026-02-06 22:27:18 +01:00
2aed20393f
Vendor Galaxy Roles and Collections
/ Ansible Lint (push) Failing after 5m45s
/ Ansible Lint (pull_request) Failing after 4m59s
2026-02-06 22:07:16 +01:00
c1e1897cda
grafana: more alertmanager config
/ Ansible Lint (push) Successful in 2m16s
2026-02-06 17:17:26 +01:00
17ba7c04f2
acmdns(host): expose and monitor health endpoint
/ Ansible Lint (push) Successful in 2m8s
2026-02-01 23:14:15 +01:00
536eedeffc
status(host): add monitoring for ACME DNS
/ Ansible Lint (push) Successful in 2m10s
2026-02-01 22:44:42 +01:00
397285655b
status(host): add monitoring for spaceapi.ccc.de
/ Ansible Lint (push) Successful in 2m6s
2026-02-01 21:38:57 +01:00
8e75f1ad14
status(host): add monitoring for cpu.ccc.de and aliases
/ Ansible Lint (push) Successful in 2m5s
2026-02-01 21:30:40 +01:00
c3b20abab3
status(host): use custom alert for Matrix to make it work with PAT
...
/ Ansible Lint (push) Successful in 2m15s
The Personal Access Token we use isn't compatible with the default
Matrix alerting provider, so use a custom alert.
2026-02-01 20:49:33 +01:00
9c2fe5ea9b
public-reverse-proxy(host): remove cpuccc.hamburg.ccc.de alias
/ Ansible Lint (push) Successful in 2m19s
2026-01-28 15:32:29 +01:00
06ae220857
Remove spaceapiccc.hamburg.ccc.de
/ Ansible Lint (push) Successful in 2m9s
2026-01-27 22:35:28 +01:00
1f2a08cf15
Spell stuff correctly
/ Ansible Lint (push) Successful in 2m10s
2026-01-27 20:16:57 +01:00
2e5b0ab940
nginx(role): to not log IPs, just disable the access log
/ Ansible Lint (push) Successful in 2m16s
2026-01-27 18:18:17 +01:00
3bba747dab
Configure seperate server for spaceapi.ccc.de
/ Ansible Lint (push) Successful in 2m32s
2026-01-27 16:30:00 +01:00
b90a57ffb0
Merge branch 'main' of git.hamburg.ccc.de:CCCHH/ansible-infra
/ Ansible Lint (push) Successful in 2m20s
2026-01-27 16:21:20 +01:00
ad783e4a15
now in production
2026-01-27 16:21:18 +01:00
200e8019ed
public-reverse-proxy: add config for local/lokal.ccc.de
...
/ Ansible Lint (push) Successful in 2m13s
local/lokal.ccc.de points to cpu.ccc.de.
2026-01-27 15:49:38 +01:00
4f0c4bb276
Explain need to re-encrypt after adding a host
/ Ansible Lint (push) Successful in 2m7s
2026-01-27 09:47:01 +01:00
3abc375984
Re-encrypt for spaceapiccc
2026-01-27 09:46:47 +01:00
c8edde4d11
Pretty up
/ Ansible Lint (push) Failing after 56s
2026-01-26 00:20:27 +01:00
ca20721f04
add missing grafana.grafana collection dependency
/ Ansible Lint (push) Failing after 57s
2026-01-25 23:55:57 +01:00
42b23eb181
get collections from repos directly instead of using Ansible Galaxy
...
As Ansible Galaxy is currently down, switch to using the repos directly.
This avoids reliancy on Ansible Galaxy in the future as well.
2026-01-25 23:55:48 +01:00
0f3cd2c70a
amcedns to enable Let's Encrypt DNS-01 challenges
/ Ansible Lint (push) Failing after 38s
2026-01-25 22:41:42 +01:00
c33ae36af3
Enable IPv6 by default
2026-01-25 22:40:36 +01:00
2cd0811b29
Fix warning
2026-01-25 22:40:36 +01:00
6a92aa68c1
light: fix tls cert expiring and not renewing
/ Ansible Lint (push) Failing after 39s
2026-01-25 22:36:30 +01:00
5693989c38
add alloy to the z9 hosts and some cleanup
/ Ansible Lint (push) Failing after 45s
2026-01-25 21:44:49 +01:00
c7d51af5b4
rollout Alloy to replace prometheus_node_exporter
...
With the new network we need to deploy a push based solution in order to get metrics into prometheus
2026-01-25 21:44:49 +01:00
