CCCHH/ansible-infra
CCCHH/ansible-infra
18
0
Fork 0
Code Issues 5 Pull requests Wiki Activity
97 commits 1 branch 0 tags 1.6 MiB
Commit graph

97 commits

This branch
This branch
All branches
Author SHA1 Message Date
June 1b45e94960 Add redhat.ansible extension to VSCode Workspace Recommendations 2023-07-30 19:30:06 +02:00
June 1613e2d25c Describe new way of secret storage 2023-07-30 19:27:04 +02:00
Dario 59520b4db6
AES: disable goodies and vouchers 2023-07-30 16:13:49 +02:00
Dario b89789c37a
fix aes contact email 2023-07-30 15:36:25 +02:00
June a7565d5f35 Deploy SSH Server config to public-reverse-proxy and wiki hosts 2023-07-30 07:06:26 +02:00
June 6994cfa123 Use correct ansible_host for mqtt host 2023-07-30 07:01:06 +02:00
June 317c822ab5 Combine playbooks for indiviual hosts into one playbook 
This makes a full deployment of all hosts easier and parallelises
execution of roles, which are used for multiple hosts.
You can still easily deploy only a subset of hosts using the -l flag for
ansible-playbook.
 2023-07-30 06:57:30 +02:00
June 042ff7c2ec Move keycloak and public-reverse-proxy to new debian_12 group 
Do this, since they are on Debian 12.
 2023-07-30 05:53:39 +02:00
June c9dee93874 Deploy ssh server config on keycloak VM 2023-07-30 05:51:40 +02:00
June c6926b0a0f Remove incorrect check from deploy_ssh_server_config role 2023-07-30 05:49:46 +02:00
June c2a183c013 Add missing "become: true" 2023-07-30 05:25:43 +02:00
June 2efdfcad6d Setup repo pin. to ensure nginx package gets installed from NGINX repos 2023-07-30 05:19:22 +02:00
June 38fc33ce70 Don't use apt-key anymore, since it's deprecated 2023-07-30 01:21:43 +02:00
jtbx efc72f70f6 audiopi: Update role 2023-07-30 01:04:25 +02:00
June 8a2c2769c8 Use new secrets path, bc of noc pass store merge into general store 2023-07-29 23:15:00 +02:00
June 23deedf0d6 Update deploy_ssh_server_config role for Debian 12 support 2023-07-29 20:17:22 +02:00
June f62135e263 Don't reference obsolete secret env files 2023-07-29 01:47:21 +02:00
June a12b38b284 Provide secrets for engelsystem VM from pass 2023-07-29 01:46:30 +02:00
June f695afa981 Provide network_key for zigbee2mqtt from pass 2023-07-29 01:28:44 +02:00
June 69edb75112 Use correct variable for initial config in zigbee2mqtt role 2023-07-29 01:16:49 +02:00
June 51c1b667f4 Provide secrets for keycloak VM from pass 2023-07-29 00:59:01 +02:00
Dario 8fa4e5af3e Merge branch 'feature/aes_lingo_patches' into 'main' 
AES: patch code and l10n to add train drivers license

See merge request ccchh/thinkcccentre-ansible!3
 2023-07-28 22:26:04 +00:00
Dario c3fc040751
AES: patch code and l10n to add train drivers license 2023-07-28 23:59:02 +02:00
June 727cd0bc74 Bump Keycloak to 22.0 2023-07-28 23:16:46 +02:00
June 2f7e3ae893 Build on docker compose up as well 2023-07-28 23:16:27 +02:00
yuri 18990b3b5f
Bump zigbee2mqtt to 1.32.1 2023-07-27 18:26:47 +02:00
yuri 1570b0c04e
Bump esphome to 2023.7.0 2023-07-27 18:22:58 +02:00
jtbx d5285a3fd2 deploy an engelsystem named AES 2023-07-09 01:57:55 +02:00
June b536e5c2fb Fix: Add necessary becomes 2023-07-09 00:26:20 +02:00
jtbx b2e9c22821 cert, nginx: Update for debian 12 2023-07-09 00:03:38 +02:00
jtbx 67483ece20 docker roles: Support debian 12 2023-07-08 23:47:04 +02:00
June 82b64e24c6 Fix variable name 
Thanks jtbx for pointing that out!
 2023-07-08 23:41:12 +02:00
June 8bc60e42a8 Extend distribution_check role to account for Ansible changes reg. facts 
Somewhere between ansible [core 2.14.4] and ansible [core 2.15.0] the
logic for the distribution_version Ansible fact got changed. With the
newer Ansible version Debians distribution_version gets reported as 11.7
as opposed to getting reported as 11 with the old Ansible version. To
still allow for useful distribution checks, extend the
distribution_check role by allowing the specification of
distribution_major_versions and distribution_releases as well.
This way you can check for an Ubuntu version by using
distribution_version (which for example resolves to 18.04, while
distribution_major_version would resolve to 18 in that case) and check
for a Debian version by using distribution_major_version (which for
example resolves to 11, while distribution_version would resolve to 11.7
in that case).
 2023-07-08 19:58:02 +02:00
June 0c62a8f3e0 Add role for deploying SSH config and also add mailserver-endpoint host 2023-06-06 23:37:42 +02:00
June ebfa591484 Use larger buf. size to fix 502s sometimes occur. when going through PVE 2023-05-26 03:27:56 +02:00
June 55506a003a Make Rspamd configs world-readable 2023-05-26 03:27:56 +02:00
Dario e37d84c60d
clean up foobazdmx role 
make git repo url and version to check out a variable instead of a
hard-coded value the role, and update host_vars to match.
 2023-05-21 15:12:42 +02:00
yuri 2d5f116ff3
Use access token with Reporter role for foobazdmx 2023-05-21 03:03:02 +02:00
yuri da710bcf8f
Reduce maximum AirPlay volume for Audio Pi 2023-05-21 01:29:25 +02:00
yuri 49bfcbc987 Merge branch 'foobazdmx-update' into 'main' 
Update foobazdmx repository url and release target

See merge request ccchh/thinkcccentre-ansible!2
 2023-05-20 21:19:47 +00:00
Dario a6db315138
Update foobazdmx repository url and release target 
Update foobazdmx repository url in foobazdmx role to main repo.
Change commit to be checked out by ansible to latest commit on main.
 2023-05-20 22:58:24 +02:00
yuri 0972ce1e24
Remove printserver from inventory 2023-05-10 18:02:10 +02:00
yuri 8d50e73888
Use chaos user as ansible user for VMs 2023-05-10 18:02:10 +02:00
yuri 544abc1c27
Rename automation host to mqtt 2023-05-10 18:02:10 +02:00
yuri 33d1cfca1f
Move become: true into esphome role 
Move become: true into zigbee2mqtt role

Remove become: true from deploy_public_reverse_proxy playbook

Remove become: true from deploy_dokuwiki playbook

Move become: true from deploy_audio_pi and deploy_light playbooks into roles

Remove become: true from deploy_keycloak playbook

Move become: true from deploy_automation playbook to mosquitto role
 2023-05-10 18:02:10 +02:00
June b56ca3899d Add send_only_mailserver role and deploy Send-Only-Mailserver with it 
Co-authored-by: yuri <yuri@nekover.se>
 2023-05-09 23:01:57 +02:00
June f4a79fb4e2 Make it possible to set custom permissions for certificate files 
This is in preparation for a role using OpenSMTPD.
 2023-05-09 22:07:44 +02:00
yuri 7bb741c8e3
Bump esphome to 2023.4.4 2023-05-09 21:03:03 +02:00
yuri 35ad23a44c
Bump zigbee2mqtt to 1.30.4 2023-05-09 21:02:34 +02:00
yuri 78023f5198
Use cert role to deploy a valid certificate for esphome.ccchh.net 2023-05-09 21:02:32 +02:00