Commit graph

958 commits

Author SHA1 Message Date
2cfe5d352e Update docker.io/library/postgres Docker tag to v13
All checks were successful
/ build (pull_request) Successful in 31s
/ Ansible Lint (push) Successful in 3m15s
/ Ansible Lint (pull_request) Successful in 3m10s
2026-11-04 20:17:26 +00:00
947d8fd0a0
ansible-pull(role): deploy failure notify service using the copy loop
All checks were successful
/ build (pull_request) Successful in 32s
/ build (push) Successful in 37s
/ cleanup-staging (pull_request) Successful in 41s
/ Ansible Lint (pull_request) Successful in 3m47s
/ Ansible Lint (push) Successful in 3m45s
Deploy the ansible-pull-failure-notify.service using the loop using
ansible.builtin.copy as it doesn't have any template logic.
2026-11-04 17:28:05 +01:00
a4a92448dc
ansible-pull(role): have failure notify deploy match other script deploy
Have the deployment of the ansible-pull-failure-notify script match the
deployment of the other helper scripts.
2026-11-04 17:28:05 +01:00
96a7eabbac
ansible-pull(role): move ansible-pull reboot logic to script as well
Do this to unify the way these helper scripts get deployed.
2026-11-04 17:28:05 +01:00
1157c98ff5
ansible-pull(role): make successful run timestamp exporter work
The successful run timestamp exporter didn't work, because the
ansible-pull user wouldn't necessarily have the necessary permissions
and because the command wouldn't properly work.
Move the timestamp export as well as the reboot to separate services,
which always run as root, to ensure these operations work and to have a
clean setup using systemd services.
Also move the successful run timestamp exporter to a custom script to
have it work properly.
2026-11-04 17:28:03 +01:00
f6f6cc4804 ansible-pull(role): export last successful run timestamp statistic
All checks were successful
/ build (push) Successful in 31s
/ Ansible Lint (push) Successful in 2m39s
Using the node exporter textfile collector, expose the timestamp of the
last successful ansible-pull run.
2026-11-03 19:58:03 +01:00
52d3d8ecd9 alloy(role): enable node exporter textfile collector
Enable the node exporter textfile collector, which allows for collecting
custom statistics in a simple way.
https://github.com/prometheus/node_exporter#textfile-collector
2026-11-03 19:58:03 +01:00
94430cb43a hta: Enable OIDC login
All checks were successful
/ build (push) Successful in 27s
/ Ansible Lint (push) Successful in 2m28s
2026-11-03 00:23:15 +01:00
stb
6a87ba0562 Add Hackertours Admin (hta) (#182)
All checks were successful
/ build (push) Successful in 26s
/ Ansible Lint (push) Successful in 2m52s
The two images are built in https://git.hamburg.ccc.de/CCCHH/hackertours-admin

Reviewed-on: #182
Reviewed-by: chris <c6ristian+git-ccchh@christian.moe>
2026-11-02 18:51:09 +01:00
04f2b1d25c Limit the size of logs more severly
All checks were successful
/ build (push) Successful in 31s
/ Ansible Lint (push) Successful in 3m47s
The goal is to:
* limit the amount of  (potentially) PII data by limiting retention time
* make sure the disk doesn't fill up with log data
* make it easier to look at logs on the system without having to wade through many old entries
2026-11-02 18:28:50 +01:00
04bb14c6f4
update matrix moderation guidelines based on infra-team discussion
All checks were successful
/ build (pull_request) Successful in 29s
/ cleanup-staging (pull_request) Successful in 32s
/ build (push) Successful in 27s
/ Ansible Lint (pull_request) Successful in 2m31s
/ Ansible Lint (push) Successful in 4m42s
2026-11-01 22:58:26 +01:00
Max
c28d7706a3
autoremove apt packages after upgrades
All checks were successful
/ build (pull_request) Successful in 30s
/ Ansible Lint (pull_request) Successful in 2m37s
/ cleanup-staging (pull_request) Successful in 23s
/ build (push) Successful in 32s
/ Ansible Lint (push) Successful in 2m31s
2026-10-31 16:27:51 +01:00
8fb44f13ce add dooris-pve
All checks were successful
/ build (pull_request) Successful in 27s
/ Ansible Lint (pull_request) Successful in 2m13s
/ cleanup-staging (pull_request) Successful in 32s
/ build (push) Successful in 43s
/ Ansible Lint (push) Successful in 2m38s
2026-10-30 00:39:38 +01:00
30ab1f2238
bump draupnir to 3.2.0
All checks were successful
/ build (push) Successful in 27s
/ Ansible Lint (push) Successful in 2m37s
2026-10-29 19:45:34 +01:00
47d4da604a ansible-lint: ignore more directories that aren't part of the repo
All checks were successful
/ build (push) Successful in 26s
/ Ansible Lint (push) Successful in 2m24s
2026-10-29 15:50:53 +01:00
5c558950e4 Add log rotation
Some checks failed
/ build (push) Successful in 28s
/ Ansible Lint (push) Has been cancelled
2026-10-29 15:50:04 +01:00
df4f065a30 Sync about every 2 minutes 2026-10-29 15:50:04 +01:00
1dc38a5de0 Add matrix-sync compose setup 2026-10-29 15:50:04 +01:00
13f47cce68
add static ip and dns for openwebrx
All checks were successful
/ build (push) Successful in 27s
/ Ansible Lint (push) Successful in 2m35s
2026-10-27 23:22:30 +01:00
d7ef159455
add static ip and dns for crabsdr
All checks were successful
/ build (push) Successful in 28s
/ Ansible Lint (push) Successful in 2m30s
2026-10-27 23:08:55 +01:00
e56e03176e
auth-dns(host): fix club-assistant acme cname
All checks were successful
/ build (push) Successful in 27s
/ Ansible Lint (push) Successful in 3m53s
2026-10-22 16:54:08 +02:00
88887b3109 Update docker.io/library/nginx Docker tag to v1.31.8
All checks were successful
/ build (push) Successful in 56s
/ Ansible Lint (push) Successful in 3m25s
2026-10-22 02:17:06 +00:00
f078b902b3 Re-enable ccchoir blog
All checks were successful
/ build (push) Successful in 29s
/ Ansible Lint (push) Successful in 3m6s
2026-10-21 23:29:02 +02:00
39028a6557
dokuwiki(role): set php strict_mode and disable upload_progress
All checks were successful
/ build (pull_request) Successful in 33s
/ Ansible Lint (pull_request) Successful in 4m52s
/ cleanup-staging (pull_request) Successful in 8s
/ build (push) Successful in 29s
/ Ansible Lint (push) Successful in 2m53s
2026-10-21 18:02:13 +02:00
be76c3d792
wiki.ccchh.net is not longer in the dns
All checks were successful
/ build (push) Successful in 27s
/ Ansible Lint (push) Successful in 3m19s
so we remove it from all other configs as well
2026-10-21 16:55:32 +02:00
311404a6be
dokuwiki(role): add support for Debian 13 & remove for 11
All checks were successful
/ build (push) Successful in 31s
/ Ansible Lint (push) Successful in 2m59s
2026-10-21 16:33:55 +02:00
ec2be61327 Update docker.io/grafana/loki Docker tag to v3.7.9
All checks were successful
/ build (push) Successful in 57s
/ Ansible Lint (push) Successful in 3m42s
2026-10-21 02:17:27 +00:00
56ecf7ff18
grafana: remove ccchh opnsense for scrape jobs
All checks were successful
/ build (push) Successful in 32s
/ Ansible Lint (push) Successful in 3m4s
2026-10-20 20:52:10 +02:00
ce96105463 Make Jitsi JVB work correctly with IPv6
All checks were successful
/ build (push) Successful in 25s
/ Ansible Lint (push) Successful in 3m43s
Since the Jitsi Docker Compose stack does not properly take IPv6 into consideration, patch the JVB config to add mappings from the private IPv6 address of the Docker network to the public IPv6 address.

This should be the source of the reported problems with conferences with 3+ people.
2026-10-20 15:34:05 +02:00
442231323c disable ccchoir.de for now
All checks were successful
/ build (push) Successful in 26s
/ Ansible Lint (push) Successful in 3m30s
2026-10-20 15:05:55 +02:00
stb
c02b7e6f35 Merge branch 'main' into jitsi-docker-compose-role
All checks were successful
/ cleanup-staging (pull_request) Successful in 3s
/ build (pull_request) Successful in 49s
/ build (push) Successful in 29s
/ Ansible Lint (push) Successful in 4m16s
/ Ansible Lint (pull_request) Successful in 4m19s
2026-10-20 15:04:15 +02:00
9032e5b34a
also fix www.didays.de monitoring
All checks were successful
/ build (push) Successful in 26s
/ Ansible Lint (push) Successful in 2m35s
2026-10-19 13:17:54 +02:00
7061ff8b14
fix didays.de monitoring
All checks were successful
/ build (push) Successful in 43s
/ Ansible Lint (push) Successful in 3m29s
2026-10-19 13:11:43 +02:00
Max
8e0bc6c406
fix onlyoffice monitoring
All checks were successful
/ build (pull_request) Successful in 53s
/ Ansible Lint (pull_request) Successful in 2m57s
/ cleanup-staging (pull_request) Successful in 6s
/ build (push) Successful in 27s
/ Ansible Lint (push) Successful in 3m7s
2026-10-16 17:49:13 +02:00
c970e5fb83 Update docker.io/library/nginx Docker tag to v1.31.7
All checks were successful
/ build (push) Successful in 55s
/ Ansible Lint (push) Successful in 3m28s
2026-10-15 14:16:47 +00:00
stb
c898a0ec0e Merge branch 'main' into jitsi-docker-compose-role
All checks were successful
/ build (pull_request) Successful in 58s
/ Ansible Lint (push) Successful in 3m14s
/ Ansible Lint (pull_request) Successful in 3m14s
2026-10-14 12:57:38 +02:00
743a7d609c Update docker.io/onlyoffice/documentserver Docker tag to v10
All checks were successful
/ build (pull_request) Successful in 31s
/ Ansible Lint (pull_request) Successful in 6m47s
/ cleanup-staging (pull_request) Successful in 6s
/ build (push) Successful in 25s
/ Ansible Lint (push) Successful in 2m35s
2026-10-12 20:17:02 +00:00
42df2e4af1 revert 106a5cb97a
All checks were successful
/ build (push) Successful in 29s
/ Ansible Lint (push) Successful in 6m13s
revert auth-dns: dooris has wrong ipv6 address
2026-10-11 00:01:24 +02:00
106a5cb97a
auth-dns: dooris has wrong ipv6 address
Some checks failed
/ build (push) Successful in 25s
/ Ansible Lint (push) Has been cancelled
2026-10-10 23:58:31 +02:00
086eb9ff46
auth-dns: add ptouch-print-server to ccchh.net
All checks were successful
/ build (push) Successful in 50s
/ Ansible Lint (push) Successful in 3m32s
2026-10-10 23:38:48 +02:00
54a4015bb0 Add matrix-sync
All checks were successful
/ build (push) Successful in 26s
/ Ansible Lint (push) Successful in 6m58s
2026-10-08 14:27:27 +02:00
stb
816c7497fa Merge branch 'main' into jitsi-docker-compose-role
All checks were successful
/ build (pull_request) Successful in 30s
/ Ansible Lint (push) Successful in 5m9s
/ Ansible Lint (pull_request) Successful in 5m46s
2026-10-08 11:12:38 +02:00
8bf5690275 Customize with our logos
All checks were successful
/ build (pull_request) Successful in 30s
/ Ansible Lint (push) Successful in 2m58s
/ Ansible Lint (pull_request) Successful in 3m15s
2026-10-08 10:50:48 +02:00
610a1faca8 Allow UI customization 2026-10-08 10:50:23 +02:00
86e793c624 Use jitsi role to configure jitsi
All checks were successful
/ Ansible Lint (push) Successful in 3m47s
/ build (pull_request) Successful in 44s
/ Ansible Lint (pull_request) Successful in 3m45s
The host has been manually cleaned up (removed old packages and config) and this config has been deployed already.
2026-10-08 10:24:38 +02:00
dbac5ede16 Add a role for Jitsi in Docker Compose
We need this role to follow the recommended deployment approach from https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-docker/

This role enables us to keep our config and customizations separate from releases of the Compose setup the Jitsi project publishs.
2026-10-08 10:23:17 +02:00
0f23f117a7 Update docker.io/pretix/standalone Docker tag to v2026.8
All checks were successful
/ build (pull_request) Successful in 32s
/ Ansible Lint (pull_request) Successful in 2m38s
/ cleanup-staging (pull_request) Successful in 6s
/ build (push) Successful in 27s
/ Ansible Lint (push) Successful in 6m38s
2026-10-04 14:16:17 +00:00
78ee1382d5 Confige sending mail with auth
All checks were successful
/ build (push) Successful in 45s
/ Ansible Lint (push) Successful in 2m30s
2026-10-04 15:05:06 +02:00
d03264c256
set client_max_body_size to 100m on pad nginx
All checks were successful
/ build (push) Successful in 44s
/ Ansible Lint (push) Successful in 2m43s
2026-10-02 16:21:07 +02:00
08d6f039ca Update quay.io/oauth2-proxy/oauth2-proxy Docker tag to v7.15.5
All checks were successful
/ build (push) Successful in 29s
/ Ansible Lint (push) Successful in 3m6s
2026-10-01 14:16:30 +00:00