498 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Renovate	44ddea895d	Update docker.io/library/redis Docker tag to v8	2025-11-04 01:45:52 +00:00
June	ae60d6fea6	docker_compose(role): use community.docker.docker_compose_v2 module ... Use the community.docker.docker_compose_v2 module as it supports proper changed handling out of the box, making the roles code more straightforward and work. Also just do a docker compose restart instead of having the custom docker compose reload script. https://docs.ansible.com/ansible/latest/collections/community/docker/docker_compose_v2_module.html	2025-11-02 23:13:20 +01:00
June	9f8d2d89cd	docker_compose(role): move argument documentation to README ... Do this to match newer roles and since reading documentation from argument_specs is quite unergonomic.	2025-11-02 22:32:20 +01:00
June	e390b7c202	docker_compose(role): remove unnecessary hosts section from README ... The hosts section isn't really relevant for that role, so remove it.	2025-11-02 22:32:20 +01:00
June	8cefd07618	docker_compose(role): remove distribution check ... The distribution check isn't really needed in our setup anyway and just adds unnecessary noise.	2025-11-02 22:32:20 +01:00
ViMaSter	c3f71b1f08	sunders: replace password in healthcheck with dynamic secret ... #55 Co-authored-by: ViMaSter <vincent@mahn.ke> Co-committed-by: ViMaSter <vincent@mahn.ke>	2025-11-02 20:24:55 +01:00
June	dc6c7cbfb7	sunders(host): deploy sunders using docker compose ... https://git.hamburg.ccc.de/CCCHH/sunders	2025-11-01 17:53:08 +01:00
June	a11ccaf16c	disable digest pinning for our images, since Forgejo cleans them up ... Since Forgejo seems to clean up older tag versions, so older digests, disable digest pinning for our images. While generally resulting in undeployable config, with ansible-pull the breakage is especially noticeable.	2025-10-30 05:50:42 +01:00
June	0f4fb68c97	netbox(role): don't try to deploy removed housekeeping service and timer ... https://github.com/netbox-community/netbox/releases/tag/v4.4.0 https://github.com/netbox-community/netbox/issues/18349	2025-10-30 05:25:26 +01:00
Renovate	ea5b4b8d69	Update dependency netbox to v4.4.5	2025-10-30 04:17:13 +00:00
June	23ea666906	renovate(role): always pull and use full image source ... Ensure we're always running the latest Renovate version.	2025-10-30 05:13:23 +01:00
June	f7918e7b6f	add renovate comment for custom regex matcher to inventory version vars	2025-10-30 05:01:02 +01:00
June	83fd868977	docker(role): use full image sources	2025-10-30 04:49:44 +01:00
June	a979fccd12	renovate: add custom regex manager for inventory vars dependencies ... Inspiration taken from/documentation: https://docs.renovatebot.com/presets-customManagers/#custommanagersdockerfileversions https://docs.renovatebot.com/modules/manager/regex/	2025-10-30 04:47:10 +01:00
Renovate	a03ed9a362	Update all stable non-major dependencies	2025-10-29 23:45:38 +00:00
Renovate	01890fecbd	Update all digest updates	2025-10-29 00:30:36 +00:00
June	df32e1cac8	zammad(host): move to latest upstream compose file version (v14.1.1) ... It hopefully fixes bugs we had in the past, so removing the workarounds and it also comes with default values now, so removing all variables set to those defaults.	2025-10-24 22:57:03 +02:00
June	747e5b2d4c	zammad(host): change to .env configuration ... Align the compose.yaml to upstreams v11.2.0 version. This is a first step to hopefully then just use the upstreams version directly and not vendor it.	2025-10-24 22:15:48 +02:00
June	3840553f9d	docker_compose(role): add support for deploying optional .env file ... This is needed for situations, where one wants to use a vendor-provided compose file and configure it using environment variables. Like for example: https://github.com/zammad/zammad-docker-compose	2025-10-24 22:05:54 +02:00
June	839a9b2c0a	renovate: group all digest updates together ... https://docs.renovatebot.com/presets-group/#groupalldigest	2025-10-24 19:59:35 +02:00
June	37cedb1ad0	renovate: label all PRs with the "renovate" label	2025-10-24 19:28:49 +02:00
June	658a50d19b	renovate: use rebase stale PRs preset to rebase once base branch updated ... Use this configuration to always have the fast-forward option. https://docs.renovatebot.com/presets-default/#rebasestaleprs	2025-10-24 19:18:04 +02:00
June	b2961c5664	renovate: disable rate-limiting	2025-10-24 18:59:58 +02:00
Renovate	a13d23c7ea	Update actions/checkout action to v5	2025-10-23 13:45:41 +00:00
Renovate	2f8897751b	Pin dependencies	2025-10-23 12:15:38 +00:00
Renovate	a60946b3b8	Update https://github.com/ansible/ansible-lint action to v25	2025-10-22 21:50:08 +00:00
June	8f612d1d9c	renovate: add persistent volume for base (and therefore cache) dir	2025-10-22 19:42:20 +02:00
June	d0d517d97d	renovate: add custom package rule for pretix calendar versioning ... Add custom package rule accounting for pretix calendar versioning to not have Renovate classify month updates as minor version updates, but major version updates instead.	2025-10-22 16:42:02 +02:00
June	78a6be6f5d	renovate: disable semantic commits	2025-10-22 00:47:05 +02:00
June	43fac32424	use full image source and set version for all Chaosknoten compose images ... Use a full image source and set and explicit version for all images in Chaosknoten (docker-)compose files. With Renovate now set up, it is feasible to explicitly set versions.	2025-10-21 23:59:56 +02:00
June	282e82728b	renovate: match file compose jinja2 templates (.j2) as well	2025-10-21 23:12:34 +02:00
June	f842723e9a	remove daily schedule for Renovate (for now?)	2025-10-21 23:03:02 +02:00
June	7de516dc43	introduce first Renovate configuration ... Introduce pretty basic first Renovate configuration with a package rule for grouping all stable non-major dependency updates together.	2025-10-21 02:37:10 +02:00
June	94e1920388	setup ansible-pull for all Chaosknoten hosts ... Additionally setup ansible-pull for: ccchoir, tickets, keycloak, lists, mumble, pad, public-reverse-proxy, zammad, ntfy	2025-10-20 21:25:56 +02:00
c6ristian	f3902b43b1	update keycloak and nextcloud	2025-10-20 21:11:28 +02:00
June	425d302fa9	zammad(host): fix compose by using different elasticsearch image ... Also execute manual update steps as outlined here: https://github.com/zammad/zammad-docker-compose/releases/tag/v14.0.0 Note that this is updating only a part of the compose file and other parts still are out-of-date and should be updated (like the Postgres).	2025-10-20 01:36:00 +02:00
June	b46747d251	deploy_ssh_server_config(role): add Debian 13 sshd_config reference	2025-10-17 21:27:29 +02:00
June	2aa55770d9	renovate(host): update keys adding renovate for group_vars/all.sops.yaml	2025-10-17 16:05:04 +02:00
June	8a8fdf5f97	renovate(host): set platform to forgejo	2025-10-17 01:26:18 +02:00
June	cad2f036e5	renovate(host): replace non-working GitHub token with working one ... Replace the token with one created from a new CCCHH GitHub service account.	2025-10-17 01:18:17 +02:00
June	4b1c64b615	renovate(host): remove deprecated and no longer working logLevel option ... Remove deprecated and no longer working logLevel config option. Debug output can be enabled by using the LOG_LEVEL environment variable on demand.	2025-10-16 18:08:29 +02:00
June	e76c66d74c	renovate(host): set up Renovate using role and exisiting config ... Set up Renovate using role and existing config from current Forgejo/GitHub Actions-based deployment.	2025-10-16 17:52:30 +02:00
June	a32998d8da	renovate(host): initialize renovate host	2025-10-16 17:44:23 +02:00
June	8388657d33	renovate(role): introduce first basic Renovate role ... Sets up Renovate using Docker and systemd service and timer to run regularly. Also add accompanying host group and playbook play.	2025-10-16 17:42:13 +02:00
June	dce4e7c4d4	ansible_pull(role): add git as a dependency to ensure is installed	2025-10-16 09:40:34 +02:00
June	f646cc0bf2	fix creation rules for eh22-wiki, sunders and wiki hosts ... Also update the keys of the secret files accordingly. This should then fix ansible-pull on these hosts.	2025-10-15 10:45:54 +02:00
June	dea66771e0	ansible_pull(role): ensure SOPS is installed ... Also add the SOPS community collection as a requirement for this repo.	2025-10-15 02:33:42 +02:00
June	9afbc71801	ansible_pull(role): ensure role and collection dependencies are present	2025-10-15 02:18:07 +02:00
June	1d6d1094bc	setup ansible-pull for 7 more hosts ... Setup for: cloud, eh22-wiki, grafana, onlyoffice, pretalx, sunders and wiki.	2025-10-15 01:59:29 +02:00
June	eadae7a09b	ansible_pull(role): add failure notifications	2025-10-14 22:20:27 +02:00