Author	SHA1	Message	Date
June	947d8fd0a0	ansible-pull(role): deploy failure notify service using the copy loop ... Deploy the ansible-pull-failure-notify.service using the loop using ansible.builtin.copy as it doesn't have any template logic.	2026-11-04 17:28:05 +01:00
June	a4a92448dc	ansible-pull(role): have failure notify deploy match other script deploy ... Have the deployment of the ansible-pull-failure-notify script match the deployment of the other helper scripts.	2026-11-04 17:28:05 +01:00
June	96a7eabbac	ansible-pull(role): move ansible-pull reboot logic to script as well ... Do this to unify the way these helper scripts get deployed.	2026-11-04 17:28:05 +01:00
June	1157c98ff5	ansible-pull(role): make successful run timestamp exporter work ... The successful run timestamp exporter didn't work, because the ansible-pull user wouldn't necessarily have the necessary permissions and because the command wouldn't properly work. Move the timestamp export as well as the reboot to separate services, which always run as root, to ensure these operations work and to have a clean setup using systemd services. Also move the successful run timestamp exporter to a custom script to have it work properly.	2026-11-04 17:28:03 +01:00
June	f6f6cc4804	ansible-pull(role): export last successful run timestamp statistic ... Using the node exporter textfile collector, expose the timestamp of the last successful ansible-pull run.	2026-11-03 19:58:03 +01:00
June	52d3d8ecd9	alloy(role): enable node exporter textfile collector ... Enable the node exporter textfile collector, which allows for collecting custom statistics in a simple way. https://github.com/prometheus/node_exporter#textfile-collector	2026-11-03 19:58:03 +01:00
Stefan Bethke	04f2b1d25c	Limit the size of logs more severly ... The goal is to: * limit the amount of (potentially) PII data by limiting retention time * make sure the disk doesn't fill up with log data * make it easier to look at logs on the system without having to wade through many old entries	2026-11-02 18:28:50 +01:00
Max	c28d7706a3	autoremove apt packages after upgrades	2026-10-31 16:27:51 +01:00
chris	39028a6557	dokuwiki(role): set php strict_mode and disable upload_progress	2026-10-21 18:02:13 +02:00
chris	311404a6be	dokuwiki(role): add support for Debian 13 & remove for 11	2026-10-21 16:33:55 +02:00
Stefan Bethke	ce96105463	Make Jitsi JVB work correctly with IPv6 ... Since the Jitsi Docker Compose stack does not properly take IPv6 into consideration, patch the JVB config to add mappings from the private IPv6 address of the Docker network to the public IPv6 address. This should be the source of the reported problems with conferences with 3+ people.	2026-10-20 15:34:05 +02:00
Stefan Bethke	610a1faca8	Allow UI customization	2026-10-08 10:50:23 +02:00
Stefan Bethke	86e793c624	Use jitsi role to configure jitsi ... The host has been manually cleaned up (removed old packages and config) and this config has been deployed already.	2026-10-08 10:24:38 +02:00
Stefan Bethke	dbac5ede16	Add a role for Jitsi in Docker Compose ... We need this role to follow the recommended deployment approach from https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-docker/ This role enables us to keep our config and customizations separate from releases of the Compose setup the Jitsi project publishs.	2026-10-08 10:23:17 +02:00
Max	b9cc68bda1	reduce renovate executions to twice every six hours	2026-09-26 00:51:51 +02:00
lilly	4bdd36b8f7	update knot role to support more operational variety ... Now secondary zones, dynamic zones, interpeted catalog zones, etc. are supported by our knot role	2026-09-11 10:52:33 +02:00
chris	00524f7bab	base_config: only install kitty-terminfo, not kitty	2026-08-11 23:55:03 +02:00
lilly	379aa7c451	add configuration required for dooris -> spaceapid integration	2026-08-11 20:54:27 +02:00
lilly	73760a9995	fix ansible-lint warnings	2026-08-11 17:38:51 +02:00
bitwhisker	ebdafb997f	unbound(role): also over write fallback_dns in resolvd	2026-08-07 23:36:22 +02:00
bitwhisker	1ec54ad502	secrets(role): add parent folder settings	2026-08-07 23:10:54 +02:00
bitwhisker	4fbac5cfe6	unbound(role): add config flag in README	2026-08-07 22:56:07 +02:00
bitwhisker	c45fb91f76	kea_dhcp(role): seperate package installes	2026-08-07 22:55:57 +02:00
bitwhisker	47fbd96642	kea_dhcp(role): update README	2026-08-07 22:55:57 +02:00
bitwhisker	897ee5fa43	kea_dhcp(role): remove unused	2026-08-07 22:55:57 +02:00
bitwhisker	7eabd88e2c	unbound(role): update readme and move task block to top level and remove unused	2026-08-07 22:55:57 +02:00
bitwhisker	32caa40f77	unbound(role): fix some unbound setup stuff	2026-08-07 22:55:55 +02:00
bitwhisker	8d9cb0007c	kea_dhcp(role): update to newest fux noc version	2026-08-07 22:55:55 +02:00
bitwhisker	9271cbda97	unbound(role): fix systemd unit of prometheus exporter	2026-08-07 22:55:34 +02:00
bitwhisker	83f654037a	unbound(role): fix unbound prometheus exporter install on debian ... - download debian image from github und verify checksum - setup systemd service unit	2026-08-07 22:55:33 +02:00
bitwhisker	6b05c4b05a	unbound(role): fix unbound config template ... - fix some indentation problems - fix access control - fix remote control unix socket and thrust anchor file (because debain appamour ist annoying) - add unbound-anchor package	2026-08-07 22:55:33 +02:00
bitwhisker	db6ef3fcb2	kea_dhcp(role): fix include wars check	2026-08-07 22:55:33 +02:00
bitwhisker	a0b0e8188f	unbound(role): move resolvd vars to task	2026-08-07 22:55:33 +02:00
bitwhisker	5423558ab4	unbound(role): make unbound thread number configurable	2026-08-07 22:55:32 +02:00
bitwhisker	bb141ddab3	unbound(role): reformat config template and use all vcpus	2026-08-07 22:55:32 +02:00
bitwhisker	9a5dafb2bc	unbound(role): remove tags inside role	2026-08-07 22:55:32 +02:00
bitwhisker	a4bb9a82d2	unbound(role): add FIXME note to unbound prometheus exporter install	2026-08-07 22:55:32 +02:00
bitwhisker	1a0ac38861	unbound(role): use existing deploy_systemd_resolved_config role and some reordering	2026-08-07 22:55:32 +02:00
bitwhisker	613e0528d7	kea_dhcp(role): make stork-agent.env smaller and add link to documentation	2026-08-07 22:55:32 +02:00
bitwhisker	6734843e8a	kea_dhcp(role): fix indentation in template	2026-08-07 22:55:32 +02:00
bitwhisker	c803b1fc67	kea_dhcp(role): add README.md	2026-08-07 22:55:31 +02:00
bitwhisker	7440e8fd15	kea_dhcp(role): some fixes and removing arch part ... - remove tags from tasks - remove archlinux part - use debian default package for kea	2026-08-07 22:55:31 +02:00
bitwhisker	010b8d1224	rt1(z9 host) unbound(role) kea_dhcp(role): create unbound and kea_dhcp role for rt1 ... - create unbound role - create kea_dhcp role - configure unbound and keadhcp on rt1(z9 host)	2026-08-07 22:55:31 +02:00
June	9a78164b7b	roles(dooris): remove blank line to make ansible-lint happy	2026-08-03 00:06:44 +02:00
lilly	de8daaf56c	add dooris role for setup of dooris interaction on the node itself	2026-07-29 14:16:04 +02:00
lilly	699a2bcfff	specify that docker_compose role may not be included twice ... Our docker compose role is configured via ansible variables in a way that overwrites each other if it is activated twice with different variable assignments (unless e.g. a role that just installs more packages). To prevent misuse of the role, the allow_duplicates key of the role meta is set to false. This should make ansible complain if the role is included twice for a single host.	2026-07-29 14:16:04 +02:00
chris	4218b59d3b	fix: alloy role the suites for deb repo must be stable	2026-07-23 22:08:58 +02:00
chris	900971ebe9	alloy(role): pull in alloy role that works from fux (#112) ... Reviewed-on: #112 Reviewed-by: June <june@noreply.git.hamburg.ccc.de>	2026-07-23 20:34:02 +02:00
June	a35326a065	transmission(role): running the handler should always report changed ... Make ansible-lint happy by specifying that.	2026-07-08 00:59:02 +02:00
Stefan Bethke	81b16a04cb	Explain why this is necessary	2026-07-05 10:40:29 +02:00