707 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
lilly	3541c68357	disable dnssec for catalog zones on auth-dns ... Catalog zones are not real zones in the DNS hierarchy and don't have a parent zone. Therefore they will never have a valid DNSSEC delegation so we should skip signing those zones.	2026-05-19 11:01:52 +02:00
lilly	6bb09901a0	add ns.vie.ccc.de. as direct secondary for authoritative DNS zones	2026-05-19 11:00:03 +02:00
June	73e77bde70	tag plays in playbooks (instead of tasks in roles)	2026-05-19 00:24:10 +02:00
June	6b19f69135	renovate(role): add cleanup service and timer for renovate volume ... With time the volume seems to just keeps growing with cache data, so clean it up once a day.	2026-05-19 00:23:26 +02:00
June	b0347d64bf	remove configuration for deleted woodpecker host	2026-05-18 20:13:48 +02:00
June	1275d50bdf	dooris(host): use new dooris software ... Also fix DNS record not properly working anymore.	2026-05-18 18:00:30 +02:00
Stefan Bethke	1757c36605	Postorious needs REST API as well	2026-05-16 13:31:18 +02:00
Stefan Bethke	a76f01aea7	Move secrets to SOPS, add REST_USER	2026-05-16 13:06:19 +02:00
Renovate	cc5dfb3cf7	Update docker.io/grafana/grafana Docker tag to v13	2026-05-15 19:41:57 +02:00
jtbx	83e6f76464	deploy_systemd_journal_config(role): Disable ForwardToSyslog ... We don't want hour journalctl logs mirrored to /var/log/syslog	2026-05-15 19:25:44 +02:00
lilly	164f784957	remove errornously added irz42 reverse-dns secondaries	2026-05-15 14:50:15 +02:00
lilly	637dc6b25a	consider ansible-pull jobs failed after 30 minutes	2026-05-13 16:53:57 +02:00
lilly	18ffa42358	remove actually unused reverse-dns zones	2026-05-13 15:14:37 +02:00
lilly	d2f95237a0	add wieskes nameservers for reverse-dns zone transfers from auth-dns	2026-05-13 15:11:29 +02:00
chris	e3ef60186f	grafana: set default alertmanager notifications	2026-05-09 21:34:08 +02:00
June	c9c44efa0b	auth-dns(host): remove entries for old and deprecated services	2026-05-09 19:16:34 +02:00
June	d76212c5a8	auth-dns(host): remove legacy "-intern" entries from hamburg.ccc.de zone	2026-05-09 18:27:54 +02:00
June	3c558003a9	auth-dns(host): format hamburg.ccc.de zone file ... Format zone file as first step of a series of clean-ups.	2026-05-08 21:20:55 +02:00
lilly	595b19375a	replace primary NS in all zones except *.hamburg.ccc.de zones	2026-05-07 23:59:50 +02:00
lilly	bc4df9a3f4	fix ansible-lint warnings of knot role	2026-05-07 23:45:48 +02:00
lilly	50beedbc62	configure metric scraping from knot on auth-dns	2026-05-06 15:51:38 +02:00
June	291ebce943	router(host): configure public (v4) network	2026-05-06 14:43:05 +02:00
lilly	f7306b91a6	remove unused dns zones	2026-05-06 14:37:53 +02:00
lilly	021843b5ce	migrate reverse dns zones to new auth-dns server	2026-05-06 14:33:04 +02:00
lilly	5283d2da95	improve knot roles reloading behavior ... With this change, the nameserver is not restarted on configuration updates but only reloaded instead.	2026-05-06 14:33:04 +02:00
June	3aa146d723	nftables(role): reload instead of restart ... This should make the role more robust against misconfigurations.	2026-05-06 14:19:38 +02:00
lilly	46b0a49eb8	migrate dns zone eh22.easterhegg.eu to new auth-dns server	2026-05-06 12:34:23 +02:00
lilly	d535607ae6	migrate dns zone eh20.easterhegg.eu. to new auth-dns server	2026-05-06 12:31:55 +02:00
lilly	04a6c685d1	migrate dns zone hamburg.ccc.de. to new auth-dns server	2026-05-06 12:17:51 +02:00
lilly	fa021fb737	migrate dns zone ccchh.net. to new auth-dns server	2026-05-06 12:12:54 +02:00
lilly	9100523045	remove obsolete auth-dns compose file	2026-05-06 11:59:51 +02:00
lilly	416ca85b11	rename auth_dns -> knot role	2026-05-06 11:52:33 +02:00
lilly	8c1553c707	fix role name auth-dns -> auth_dns	2026-05-06 11:47:10 +02:00
lilly	9ca4eb14e1	configure hh.ccc.de on auth-dns	2026-05-06 11:47:10 +02:00
lilly	c0a09cd299	add old zones from ns-intern old-dns-zones	2026-05-06 11:47:10 +02:00
lilly	6fa2d65db2	enable auth-dns role to actually configure useful zones	2026-05-06 11:47:10 +02:00
lilly	becee70ab9	disable systemd-resolved on auth-dns	2026-05-06 11:47:10 +02:00
lilly	fa94d59df6	add barebones knot config ... This configuration does not yet do much but it provisions a knot server that runs.	2026-05-06 11:47:10 +02:00
lilly	adc3400177	mute ansible discovered interpreter warning	2026-05-06 11:44:41 +02:00
lilly	d880eb8677	fix systemd-resolved not being installed ... closes #88	2026-05-03 16:50:45 +02:00
lilly	c304a1c82a	add README.md to deploy_systemd_resolved_config role	2026-05-02 01:01:23 +02:00
lilly	58ced1a85e	add capability to disable systemd-resolved to base_config role	2026-05-01 00:16:43 +02:00
lilly	d9fc1ef401	add host auth-dns.hamburg.ccc.de	2026-04-29 21:24:59 +02:00
lilly	69fcd2691e	clarify some docs	2026-04-29 21:24:50 +02:00
lilly	5d16c7781c	Revert "deploy alerta on grafana.hosts.hamburg.ccc.de" ... This reverts commit b10d7d1592.	2026-04-29 19:05:15 +02:00
June	b6cec3ad61	public-reverse-proxy(host): use new public-web-static hostname ... public-web-static got moved to a new network and has a new hostname as well as new addresses now, so use that.	2026-04-28 23:31:41 +02:00
June	d7811f249a	diday-staging-runner(host): deploy host runner for diday staging deploy	2026-04-28 20:12:27 +02:00
lilly	b10d7d1592	deploy alerta on grafana.hosts.hamburg.ccc.de	2026-04-24 19:05:08 +02:00
Stefan Bethke	5242a14eed	Update to newest version	2026-04-24 17:42:51 +02:00
lilly	0330c6b6ca	reduce ansible grafana log verbosity by using loop_control labels	2026-04-24 15:32:43 +02:00