2b5f261cd3
docker(role): move automatic cleanup of unused Docker data here
...
/ Ansible Lint (push) Successful in 2m20s
Move the automatic cleanup of unused Docker data to the docker role from
the docker_compose role, so that hosts, which only use Docker (like
renovate) also have an automatic cleanup set up.
Also use a systemd timer instead of cron.
2026-03-06 21:09:47 +01:00
0788fde69d
only allow sops encryption of *.sops.* files
/ Ansible Lint (pull_request) Successful in 2m31s
/ Ansible Lint (push) Successful in 13m55s
2026-03-06 20:21:33 +01:00
f345ff5e00
renovate: make exclusion of CalVer non-patch/-minor upgrades work
...
/ Ansible Lint (push) Successful in 2m27s
Pretix and Pretalx both use CalVer, so we don't want to have upgrades to
their second number be identified as minor updates and get grouped with
all the other minor and patch updates.
The regex to re-classify the second number as major doesn't work.
Probably because of:
"Important: all capture groups must contain only purely numeric values."
(https://docs.renovatebot.com/modules/versioning/regex/ )
So instead match on the minor update type for Pretix and Pretalx and set
the group name to null.
2026-03-06 19:53:24 +01:00
e98f6d68bd
Revert "wip: test renovate"
...
/ Ansible Lint (push) Successful in 6m51s
This reverts commit 05d8c39b75
2026-03-06 19:15:55 +01:00
4f3caaf5ed
add bitwhisker to sops
/ Ansible Lint (push) Successful in 2m28s
2026-03-05 20:18:53 +01:00
05d8c39b75
wip: test renovate
/ Ansible Lint (push) Successful in 2m14s
2026-03-05 15:26:51 +01:00
fee18bd349
certbot(role): allow empty list of certificate domains
...
/ Ansible Lint (push) Successful in 11m4s
Also explicitly document that they are used with the HTTP-01 challenge.
This is in preparation for adding a new option with DNS-01 challenge
support.
2026-03-05 14:37:17 +01:00
3820a97584
certbot(role): move arguments documentation into README
...
Do this to match how it's done in newer roles.
2026-03-05 14:37:17 +01:00
0331c77d55
grafana: fuxnoc macht mehr internet mit ipv6
/ Ansible Lint (push) Successful in 2m32s
2026-03-01 21:32:10 +01:00
711f2f1c64
certbot(role): don't use certbot__version_spec anymore as its not used
/ Ansible Lint (push) Successful in 8m7s
2026-03-01 20:08:49 +01:00
165487884c
setup reverse-proxying for *.staging.diday.org
/ Ansible Lint (push) Successful in 2m12s
2026-02-27 21:51:09 +01:00
bc9e76b8ed
remove did.hamburg.ccc.de from public-reverse-proxy
2026-02-27 21:51:09 +01:00
983584a510
configure reverse proxy map explicitly for hostnames
2026-02-27 21:51:09 +01:00
7ca446457a
onlyoffice: support custom fonts and add di.day fonts
/ Ansible Lint (push) Successful in 2m12s
2026-02-26 23:13:30 +01:00
fcc0d615a7
configure diday.org on public-reverse-proxy
/ Ansible Lint (push) Successful in 3m27s
2026-02-26 18:01:52 +01:00
41dc9c8529
configure www2 nginx
/ Ansible Lint (push) Successful in 2m21s
2026-02-26 17:44:24 +01:00
3e3cedd357
add www2 and www3 hosts
2026-02-24 19:09:20 +01:00
ac013ca8a1
Fix template syntax
/ Ansible Lint (push) Successful in 2m8s
2026-02-22 18:37:16 +01:00
08101ccef1
Fix permission
2026-02-22 18:37:01 +01:00
7a1ea7d40e
Override base.html template to brand site
/ Ansible Lint (push) Successful in 2m9s
2026-02-22 18:22:12 +01:00
d26fbf2577
Allow syncing an arbitrary set of files to the target
2026-02-22 18:21:47 +01:00
a3c514d18d
Ignore pycaches
2026-02-22 18:21:15 +01:00
bb06f21c53
configure diday website deployment
/ Ansible Lint (push) Successful in 2m17s
2026-02-18 11:57:21 +01:00
e823c46a2d
stb updated key
/ Ansible Lint (push) Successful in 2m15s
2026-02-18 09:51:25 +01:00
910655adfb
Explain how to update GPG keys
2026-02-18 09:34:27 +01:00
5f31392a27
Remove authoritative-dns as its not needed anymore
/ Ansible Lint (pull_request) Successful in 2m15s
/ Ansible Lint (push) Successful in 2m18s
2026-02-11 10:38:04 +01:00
fe647da3bf
mjolnir: deploy mjolnir using docker compose
...
/ Ansible Lint (push) Successful in 2m9s
Moving from mjolnir from nix-infra to ansible-infra.
Also using native encryption now instead of the deprecated pantalaimon
and having protectAllJoinedRooms set to true for easier and quicker
usage.
2026-02-11 03:10:43 +01:00
db70d666d1
vscode settings: exclude vendored collections and roles from search
/ Ansible Lint (push) Failing after 12m53s
2026-02-09 19:53:27 +01:00
7b8dab07b6
distribution_check(role): remove role as it's not really needed
...
As the roles are used internally only anyway, we don't need to specify
compatbilities like this and don't properly use it anyway.
2026-02-09 17:49:49 +01:00
2f67cb875d
status(host): rotate age key
/ Ansible Lint (push) Failing after 1m55s
2026-02-09 17:43:25 +01:00
2350710177
Use new entry after acmedns db reset
/ Ansible Lint (push) Successful in 2m25s
2026-02-08 18:38:37 +01:00
3086c2b60c
Use new name for sqlite driver
/ Ansible Lint (push) Successful in 2m13s
2026-02-08 14:19:02 +01:00
196f1d70cf
downgrade acme-dns to v1.0
/ Ansible Lint (push) Successful in 2m9s
2026-02-08 11:37:14 +01:00
f6c15773e1
ansible-lint: add collections and roles directories to excluded paths
/ Ansible Lint (pull_request) Successful in 2m47s
/ Ansible Lint (push) Successful in 2m11s
2026-02-06 22:27:18 +01:00
2aed20393f
Vendor Galaxy Roles and Collections
/ Ansible Lint (push) Failing after 5m45s
/ Ansible Lint (pull_request) Failing after 4m59s
2026-02-06 22:07:16 +01:00
c1e1897cda
grafana: more alertmanager config
/ Ansible Lint (push) Successful in 2m16s
2026-02-06 17:17:26 +01:00
17ba7c04f2
acmdns(host): expose and monitor health endpoint
/ Ansible Lint (push) Successful in 2m8s
2026-02-01 23:14:15 +01:00
536eedeffc
status(host): add monitoring for ACME DNS
/ Ansible Lint (push) Successful in 2m10s
2026-02-01 22:44:42 +01:00
397285655b
status(host): add monitoring for spaceapi.ccc.de
/ Ansible Lint (push) Successful in 2m6s
2026-02-01 21:38:57 +01:00
8e75f1ad14
status(host): add monitoring for cpu.ccc.de and aliases
/ Ansible Lint (push) Successful in 2m5s
2026-02-01 21:30:40 +01:00
c3b20abab3
status(host): use custom alert for Matrix to make it work with PAT
...
/ Ansible Lint (push) Successful in 2m15s
The Personal Access Token we use isn't compatible with the default
Matrix alerting provider, so use a custom alert.
2026-02-01 20:49:33 +01:00
9c2fe5ea9b
public-reverse-proxy(host): remove cpuccc.hamburg.ccc.de alias
/ Ansible Lint (push) Successful in 2m19s
2026-01-28 15:32:29 +01:00
06ae220857
Remove spaceapiccc.hamburg.ccc.de
/ Ansible Lint (push) Successful in 2m9s
2026-01-27 22:35:28 +01:00
1f2a08cf15
Spell stuff correctly
/ Ansible Lint (push) Successful in 2m10s
2026-01-27 20:16:57 +01:00
2e5b0ab940
nginx(role): to not log IPs, just disable the access log
/ Ansible Lint (push) Successful in 2m16s
2026-01-27 18:18:17 +01:00
3bba747dab
Configure seperate server for spaceapi.ccc.de
/ Ansible Lint (push) Successful in 2m32s
2026-01-27 16:30:00 +01:00
b90a57ffb0
Merge branch 'main' of git.hamburg.ccc.de:CCCHH/ansible-infra
/ Ansible Lint (push) Successful in 2m20s
2026-01-27 16:21:20 +01:00
ad783e4a15
now in production
2026-01-27 16:21:18 +01:00
200e8019ed
public-reverse-proxy: add config for local/lokal.ccc.de
...
/ Ansible Lint (push) Successful in 2m13s
local/lokal.ccc.de points to cpu.ccc.de.
2026-01-27 15:49:38 +01:00
4f0c4bb276
Explain need to re-encrypt after adding a host
/ Ansible Lint (push) Successful in 2m7s
2026-01-27 09:47:01 +01:00
