2cfe5d352e
Update docker.io/library/postgres Docker tag to v13
/ build (pull_request) Successful in 31s
/ Ansible Lint (push) Successful in 3m15s
/ Ansible Lint (pull_request) Successful in 3m10s
2026-11-04 20:17:26 +00:00
947d8fd0a0
ansible-pull(role): deploy failure notify service using the copy loop
...
/ build (pull_request) Successful in 32s
/ build (push) Successful in 37s
/ cleanup-staging (pull_request) Successful in 41s
/ Ansible Lint (pull_request) Successful in 3m47s
/ Ansible Lint (push) Successful in 3m45s
Deploy the ansible-pull-failure-notify.service using the loop using
ansible.builtin.copy as it doesn't have any template logic.
2026-11-04 17:28:05 +01:00
a4a92448dc
ansible-pull(role): have failure notify deploy match other script deploy
...
Have the deployment of the ansible-pull-failure-notify script match the
deployment of the other helper scripts.
2026-11-04 17:28:05 +01:00
96a7eabbac
ansible-pull(role): move ansible-pull reboot logic to script as well
...
Do this to unify the way these helper scripts get deployed.
2026-11-04 17:28:05 +01:00
1157c98ff5
ansible-pull(role): make successful run timestamp exporter work
...
The successful run timestamp exporter didn't work, because the
ansible-pull user wouldn't necessarily have the necessary permissions
and because the command wouldn't properly work.
Move the timestamp export as well as the reboot to separate services,
which always run as root, to ensure these operations work and to have a
clean setup using systemd services.
Also move the successful run timestamp exporter to a custom script to
have it work properly.
2026-11-04 17:28:03 +01:00
f6f6cc4804
ansible-pull(role): export last successful run timestamp statistic
...
/ build (push) Successful in 31s
/ Ansible Lint (push) Successful in 2m39s
Using the node exporter textfile collector, expose the timestamp of the
last successful ansible-pull run.
2026-11-03 19:58:03 +01:00
52d3d8ecd9
alloy(role): enable node exporter textfile collector
...
Enable the node exporter textfile collector, which allows for collecting
custom statistics in a simple way.
https://github.com/prometheus/node_exporter#textfile-collector
2026-11-03 19:58:03 +01:00
94430cb43a
hta: Enable OIDC login
/ build (push) Successful in 27s
/ Ansible Lint (push) Successful in 2m28s
2026-11-03 00:23:15 +01:00
6a87ba0562
Add Hackertours Admin (hta) ( #182 )
...
/ build (push) Successful in 26s
/ Ansible Lint (push) Successful in 2m52s
The two images are built in https://git.hamburg.ccc.de/CCCHH/hackertours-admin
Reviewed-on: #182
Reviewed-by: chris <c6ristian+git-ccchh@christian.moe>
2026-11-02 18:51:09 +01:00
04f2b1d25c
Limit the size of logs more severly
...
/ build (push) Successful in 31s
/ Ansible Lint (push) Successful in 3m47s
The goal is to:
* limit the amount of (potentially) PII data by limiting retention time
* make sure the disk doesn't fill up with log data
* make it easier to look at logs on the system without having to wade through many old entries
2026-11-02 18:28:50 +01:00
04bb14c6f4
update matrix moderation guidelines based on infra-team discussion
/ build (pull_request) Successful in 29s
/ cleanup-staging (pull_request) Successful in 32s
/ build (push) Successful in 27s
/ Ansible Lint (pull_request) Successful in 2m31s
/ Ansible Lint (push) Successful in 4m42s
2026-11-01 22:58:26 +01:00
c28d7706a3
autoremove apt packages after upgrades
/ build (pull_request) Successful in 30s
/ Ansible Lint (pull_request) Successful in 2m37s
/ cleanup-staging (pull_request) Successful in 23s
/ build (push) Successful in 32s
/ Ansible Lint (push) Successful in 2m31s
2026-10-31 16:27:51 +01:00
8fb44f13ce
add dooris-pve
/ build (pull_request) Successful in 27s
/ Ansible Lint (pull_request) Successful in 2m13s
/ cleanup-staging (pull_request) Successful in 32s
/ build (push) Successful in 43s
/ Ansible Lint (push) Successful in 2m38s
2026-10-30 00:39:38 +01:00
30ab1f2238
bump draupnir to 3.2.0
/ build (push) Successful in 27s
/ Ansible Lint (push) Successful in 2m37s
2026-10-29 19:45:34 +01:00
47d4da604a
ansible-lint: ignore more directories that aren't part of the repo
/ build (push) Successful in 26s
/ Ansible Lint (push) Successful in 2m24s
2026-10-29 15:50:53 +01:00
5c558950e4
Add log rotation
/ build (push) Successful in 28s
/ Ansible Lint (push) Has been cancelled
2026-10-29 15:50:04 +01:00
df4f065a30
Sync about every 2 minutes
2026-10-29 15:50:04 +01:00
1dc38a5de0
Add matrix-sync compose setup
2026-10-29 15:50:04 +01:00
13f47cce68
add static ip and dns for openwebrx
/ build (push) Successful in 27s
/ Ansible Lint (push) Successful in 2m35s
2026-10-27 23:22:30 +01:00
d7ef159455
add static ip and dns for crabsdr
/ build (push) Successful in 28s
/ Ansible Lint (push) Successful in 2m30s
2026-10-27 23:08:55 +01:00
e56e03176e
auth-dns(host): fix club-assistant acme cname
/ build (push) Successful in 27s
/ Ansible Lint (push) Successful in 3m53s
2026-10-22 16:54:08 +02:00
88887b3109
Update docker.io/library/nginx Docker tag to v1.31.8
/ build (push) Successful in 56s
/ Ansible Lint (push) Successful in 3m25s
2026-10-22 02:17:06 +00:00
f078b902b3
Re-enable ccchoir blog
/ build (push) Successful in 29s
/ Ansible Lint (push) Successful in 3m6s
2026-10-21 23:29:02 +02:00
39028a6557
dokuwiki(role): set php strict_mode and disable upload_progress
/ build (pull_request) Successful in 33s
/ Ansible Lint (pull_request) Successful in 4m52s
/ cleanup-staging (pull_request) Successful in 8s
/ build (push) Successful in 29s
/ Ansible Lint (push) Successful in 2m53s
2026-10-21 18:02:13 +02:00
be76c3d792
wiki.ccchh.net is not longer in the dns
...
/ build (push) Successful in 27s
/ Ansible Lint (push) Successful in 3m19s
so we remove it from all other configs as well
2026-10-21 16:55:32 +02:00
311404a6be
dokuwiki(role): add support for Debian 13 & remove for 11
/ build (push) Successful in 31s
/ Ansible Lint (push) Successful in 2m59s
2026-10-21 16:33:55 +02:00
ec2be61327
Update docker.io/grafana/loki Docker tag to v3.7.9
/ build (push) Successful in 57s
/ Ansible Lint (push) Successful in 3m42s
2026-10-21 02:17:27 +00:00
56ecf7ff18
grafana: remove ccchh opnsense for scrape jobs
/ build (push) Successful in 32s
/ Ansible Lint (push) Successful in 3m4s
2026-10-20 20:52:10 +02:00
ce96105463
Make Jitsi JVB work correctly with IPv6
...
/ build (push) Successful in 25s
/ Ansible Lint (push) Successful in 3m43s
Since the Jitsi Docker Compose stack does not properly take IPv6 into consideration, patch the JVB config to add mappings from the private IPv6 address of the Docker network to the public IPv6 address.
This should be the source of the reported problems with conferences with 3+ people.
2026-10-20 15:34:05 +02:00
442231323c
disable ccchoir.de for now
/ build (push) Successful in 26s
/ Ansible Lint (push) Successful in 3m30s
2026-10-20 15:05:55 +02:00
c02b7e6f35
Merge branch 'main' into jitsi-docker-compose-role
/ cleanup-staging (pull_request) Successful in 3s
/ build (pull_request) Successful in 49s
/ build (push) Successful in 29s
/ Ansible Lint (push) Successful in 4m16s
/ Ansible Lint (pull_request) Successful in 4m19s
2026-10-20 15:04:15 +02:00
9032e5b34a
also fix www.didays.de monitoring
/ build (push) Successful in 26s
/ Ansible Lint (push) Successful in 2m35s
2026-10-19 13:17:54 +02:00
7061ff8b14
fix didays.de monitoring
/ build (push) Successful in 43s
/ Ansible Lint (push) Successful in 3m29s
2026-10-19 13:11:43 +02:00
8e0bc6c406
fix onlyoffice monitoring
/ build (pull_request) Successful in 53s
/ Ansible Lint (pull_request) Successful in 2m57s
/ cleanup-staging (pull_request) Successful in 6s
/ build (push) Successful in 27s
/ Ansible Lint (push) Successful in 3m7s
2026-10-16 17:49:13 +02:00
c970e5fb83
Update docker.io/library/nginx Docker tag to v1.31.7
/ build (push) Successful in 55s
/ Ansible Lint (push) Successful in 3m28s
2026-10-15 14:16:47 +00:00
c898a0ec0e
Merge branch 'main' into jitsi-docker-compose-role
/ build (pull_request) Successful in 58s
/ Ansible Lint (push) Successful in 3m14s
/ Ansible Lint (pull_request) Successful in 3m14s
2026-10-14 12:57:38 +02:00
743a7d609c
Update docker.io/onlyoffice/documentserver Docker tag to v10
/ build (pull_request) Successful in 31s
/ Ansible Lint (pull_request) Successful in 6m47s
/ cleanup-staging (pull_request) Successful in 6s
/ build (push) Successful in 25s
/ Ansible Lint (push) Successful in 2m35s
2026-10-12 20:17:02 +00:00
42df2e4af1
revert 106a5cb97a
...
/ build (push) Successful in 29s
/ Ansible Lint (push) Successful in 6m13s
revert auth-dns: dooris has wrong ipv6 address
2026-10-11 00:01:24 +02:00
106a5cb97a
auth-dns: dooris has wrong ipv6 address
/ build (push) Successful in 25s
/ Ansible Lint (push) Has been cancelled
2026-10-10 23:58:31 +02:00
086eb9ff46
auth-dns: add ptouch-print-server to ccchh.net
/ build (push) Successful in 50s
/ Ansible Lint (push) Successful in 3m32s
2026-10-10 23:38:48 +02:00
54a4015bb0
Add matrix-sync
/ build (push) Successful in 26s
/ Ansible Lint (push) Successful in 6m58s
2026-10-08 14:27:27 +02:00
816c7497fa
Merge branch 'main' into jitsi-docker-compose-role
/ build (pull_request) Successful in 30s
/ Ansible Lint (push) Successful in 5m9s
/ Ansible Lint (pull_request) Successful in 5m46s
2026-10-08 11:12:38 +02:00
8bf5690275
Customize with our logos
/ build (pull_request) Successful in 30s
/ Ansible Lint (push) Successful in 2m58s
/ Ansible Lint (pull_request) Successful in 3m15s
2026-10-08 10:50:48 +02:00
610a1faca8
Allow UI customization
2026-10-08 10:50:23 +02:00
86e793c624
Use jitsi role to configure jitsi
...
/ Ansible Lint (push) Successful in 3m47s
/ build (pull_request) Successful in 44s
/ Ansible Lint (pull_request) Successful in 3m45s
The host has been manually cleaned up (removed old packages and config) and this config has been deployed already.
2026-10-08 10:24:38 +02:00
dbac5ede16
Add a role for Jitsi in Docker Compose
...
We need this role to follow the recommended deployment approach from https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-docker/
This role enables us to keep our config and customizations separate from releases of the Compose setup the Jitsi project publishs.
2026-10-08 10:23:17 +02:00
0f23f117a7
Update docker.io/pretix/standalone Docker tag to v2026.8
/ build (pull_request) Successful in 32s
/ Ansible Lint (pull_request) Successful in 2m38s
/ cleanup-staging (pull_request) Successful in 6s
/ build (push) Successful in 27s
/ Ansible Lint (push) Successful in 6m38s
2026-10-04 14:16:17 +00:00
78ee1382d5
Confige sending mail with auth
/ build (push) Successful in 45s
/ Ansible Lint (push) Successful in 2m30s
2026-10-04 15:05:06 +02:00
d03264c256
set client_max_body_size to 100m on pad nginx
/ build (push) Successful in 44s
/ Ansible Lint (push) Successful in 2m43s
2026-10-02 16:21:07 +02:00
08d6f039ca
Update quay.io/oauth2-proxy/oauth2-proxy Docker tag to v7.15.5
/ build (push) Successful in 29s
/ Ansible Lint (push) Successful in 3m6s
2026-10-01 14:16:30 +00:00