4f89064133
Update all stable non-major dependencies
/ build (pull_request) Successful in 28s
/ Ansible Lint (push) Failing after 3m2s
/ Ansible Lint (pull_request) Failing after 3m16s
2026-09-22 17:15:59 +00:00
83b0ab0950
public-reverse-proxy(host): Increase nginx worker fd limit
...
/ build (push) Successful in 25s
/ Ansible Lint (push) Successful in 4m9s
By default the limit on file descriptors is at a 1024 hard limit and 520k hard limit.
Unsure how this affects nginx, but each client connection needs two file descriptors.
So let's try to set the limit of open files explicitly.
2026-09-22 16:05:05 +02:00
1901ca515d
Update git.hamburg.ccc.de/ccchh/oci-images/keycloak Docker tag to v26.7.4
/ build (pull_request) Successful in 30s
/ Ansible Lint (pull_request) Successful in 3m29s
/ cleanup-staging (pull_request) Successful in 7s
/ build (push) Successful in 27s
/ Ansible Lint (push) Successful in 2m42s
2026-09-22 00:16:40 +00:00
049682bce2
host(draupnir): set backgroundDelayMS to have Draupnir act fast
...
/ build (push) Successful in 25s
/ Ansible Lint (push) Successful in 4m17s
Use a recommended low value for backgroundDelayMS to have Draupnir chain
consecutive backgrounded operations faster and therefore act faster.
2026-09-22 02:10:47 +02:00
81e5380a14
Update docker.io/library/nginx Docker tag to v1.31.6
/ build (push) Successful in 24s
/ Ansible Lint (push) Successful in 2m31s
2026-09-21 22:52:07 +02:00
acf0b57d97
Update docker.io/grafana/loki Docker tag to v3.7.8
/ build (push) Successful in 26s
/ Ansible Lint (push) Has been cancelled
2026-09-21 22:49:09 +02:00
fbddd28c71
public-reverse-proxy(host): Add bildungsurlaub.hamburg.ccc.de
/ build (pull_request) Successful in 28s
/ cleanup-staging (pull_request) Successful in 9s
/ build (push) Successful in 27s
/ Ansible Lint (pull_request) Successful in 2m31s
/ Ansible Lint (push) Successful in 2m39s
2026-09-21 19:51:18 +02:00
a649455d92
auth-dns(host): Move bildungsurlaub.hamburg.ccc.de to public-web-static
/ Ansible Lint (push) Successful in 2m30s
2026-09-21 19:48:56 +02:00
547210d31f
auth-dns(host): Remove deleted www2 and www3 VMs
2026-09-21 19:44:51 +02:00
f1135b818f
z9-router(host): new keys for Junes WireGuard
/ build (push) Successful in 48s
/ Ansible Lint (push) Successful in 3m54s
2026-09-21 19:09:07 +02:00
ee810bfc16
update matrix moderation docs to reflect that we now have two ban lists
/ build (push) Successful in 51s
/ Ansible Lint (push) Successful in 4m38s
2026-09-18 17:45:48 +02:00
d422b9660a
docs: correct mjolnir -> draupnir
/ build (push) Successful in 25s
/ Ansible Lint (push) Successful in 12m41s
2026-09-16 13:39:42 +02:00
5925b22bf5
setup cccfr secondary DNS
/ build (pull_request) Successful in 29s
/ Ansible Lint (pull_request) Successful in 3m38s
/ cleanup-staging (pull_request) Successful in 8s
/ build (push) Successful in 27s
/ Ansible Lint (push) Successful in 3m29s
2026-09-11 10:52:37 +02:00
4bdd36b8f7
update knot role to support more operational variety
...
Now secondary zones, dynamic zones, interpeted catalog zones, etc.
are supported by our knot role
2026-09-11 10:52:33 +02:00
1290063204
update our moderation policy room access policy
/ build (push) Successful in 50s
/ Ansible Lint (push) Successful in 4m12s
2026-09-08 15:44:10 +02:00
f2a6ae5de9
Update docker.io/xenrox/ntfy-alertmanager Docker tag to v1.0.1
/ build (push) Successful in 26s
/ Ansible Lint (push) Successful in 2m37s
2026-09-07 23:43:48 +02:00
e3635939f4
fix draupnir ban docs
/ build (push) Successful in 26s
/ Ansible Lint (push) Successful in 2m24s
2026-09-07 18:38:39 +02:00
f7c3e2146d
migrate mjolnir to draupnir
/ build (pull_request) Successful in 50s
/ Ansible Lint (pull_request) Successful in 2m53s
/ cleanup-staging (pull_request) Successful in 37s
/ build (push) Successful in 56s
/ Ansible Lint (push) Successful in 3m8s
2026-09-06 14:40:45 +02:00
ddce7783db
add guide for common matrix moderation actions
/ build (push) Successful in 27s
/ Ansible Lint (push) Successful in 3m30s
2026-09-05 23:29:09 +02:00
8f07ad8ca4
add guide about matrix room creation
2026-09-05 23:29:09 +02:00
6a1caed856
add concept doc for matrix moderation
2026-09-05 23:29:09 +02:00
d20120d708
Migrate config renovate.json
/ build (pull_request) Successful in 29s
/ Ansible Lint (pull_request) Successful in 2m37s
/ cleanup-staging (pull_request) Successful in 8s
/ build (push) Successful in 29s
/ Ansible Lint (push) Successful in 3m17s
2026-09-05 12:23:31 +02:00
bf04f2d163
Docs: Add dokuwiki upgrade guide
/ build (pull_request) Successful in 29s
/ Ansible Lint (pull_request) Successful in 3m58s
/ cleanup-staging (pull_request) Successful in 3s
/ build (push) Successful in 26s
/ Ansible Lint (push) Successful in 2m47s
2026-09-04 21:13:58 +02:00
39d95a7b9f
except keycloak from grouped update PRs
...
/ build (push) Successful in 42s
/ Ansible Lint (push) Successful in 3m8s
keycloak is a critical service
separating keycloak updates makes it easier to respond quickly to
critical updates or delay them when there are breaking changes
2026-09-03 18:24:43 +02:00
247cb031f2
auto update patch versions
2026-09-03 18:24:43 +02:00
4540dc5516
Update to current version, open up fully again.
/ build (push) Successful in 26s
/ Ansible Lint (push) Successful in 3m9s
2026-08-25 19:04:44 +02:00
bd71738df3
Temporary block until we can update Keycloak
/ build (push) Successful in 32s
/ Ansible Lint (push) Successful in 2m44s
2026-08-25 18:41:40 +02:00
ae314ea9b3
Configure manual subscriber lists
/ build (push) Successful in 50s
/ Ansible Lint (push) Successful in 4m18s
2026-08-24 10:01:16 +02:00
a2eba1ac70
fixed IP for Retro Sun SparcStation 4
/ build (push) Successful in 29s
/ Ansible Lint (push) Successful in 2m24s
2026-08-21 23:34:10 +02:00
5ae8a3b186
Re-add IP for waybackproxy
/ build (push) Successful in 25s
/ Ansible Lint (push) Successful in 2m51s
2026-08-21 23:28:21 +02:00
6389a936c8
Merge branch 'main' of git.hamburg.ccc.de:CCCHH/ansible-infra
/ build (push) Successful in 26s
/ Ansible Lint (push) Successful in 2m33s
2026-08-18 19:27:56 +02:00
233131b612
Use correct hostname
2026-08-18 19:27:54 +02:00
a87c27b3d5
keycloak(host): allow right ipv4 of z9 router
/ build (push) Successful in 26s
/ Ansible Lint (push) Successful in 2m38s
2026-08-17 21:39:00 +02:00
e9a5b711ae
Start migrating config to Ansible
...
/ build (push) Successful in 25s
/ Ansible Lint (push) Successful in 2m31s
The real file still lives in /opt/mailman on the host for now, need to migrate whole config into Ansible.
2026-08-17 09:25:23 +02:00
548d761def
Migrate officemail away
/ build (push) Successful in 50s
/ Ansible Lint (push) Successful in 2m59s
2026-08-17 09:20:13 +02:00
53c1801eba
Change confirmation lifetime to 7d
/ build (push) Successful in 27s
/ Ansible Lint (push) Successful in 3m2s
2026-08-16 09:28:42 +02:00
e668c44273
Enable list subscription management for intern@
/ build (push) Successful in 49s
/ Ansible Lint (push) Successful in 2m52s
2026-08-16 09:01:57 +02:00
00524f7bab
base_config: only install kitty-terminfo, not kitty
2026-08-11 23:55:03 +02:00
379aa7c451
add configuration required for dooris -> spaceapid integration
/ build (pull_request) Successful in 28s
/ cleanup-staging (pull_request) Successful in 7s
/ build (push) Successful in 27s
/ Ansible Lint (pull_request) Successful in 2m37s
/ Ansible Lint (push) Successful in 2m34s
2026-08-11 20:54:27 +02:00
73760a9995
fix ansible-lint warnings
/ build (push) Successful in 26s
/ Ansible Lint (push) Successful in 4m35s
2026-08-11 17:38:51 +02:00
39d8ff4ef8
update wireguard publicKey for lilly
/ build (push) Successful in 26s
/ Ansible Lint (push) Failing after 3m26s
2026-08-11 17:33:57 +02:00
938a913094
z9-router(host): add firewall rule chaosknoten to z9 pbs
/ build (push) Successful in 26s
/ Ansible Lint (push) Failing after 2m20s
2026-08-09 17:32:36 +02:00
6a402aa544
z9-router(host): fix dhcp6 config, wrong interface
/ build (push) Successful in 51s
/ Ansible Lint (push) Failing after 2m50s
2026-08-09 17:09:40 +02:00
35381d5bb9
z9-router and auth-dns(host): add static dhcp lease and dns entry for wled-eh22
2026-08-09 17:09:15 +02:00
f5d1c6deee
z9-router(host): add firewall rule staubis to club assistant
/ build (push) Successful in 27s
/ Ansible Lint (push) Failing after 2m32s
2026-08-07 23:50:57 +02:00
8f3cd75a46
Merge branch 'main' into renovate/docker.io-pretalx-standalone-2026.x
/ cleanup-staging (pull_request) Successful in 3s
/ build (pull_request) Successful in 29s
/ build (push) Successful in 26s
/ Ansible Lint (pull_request) Failing after 2m33s
/ Ansible Lint (push) Failing after 2m28s
2026-08-07 23:47:09 +02:00
cf18c8e633
Merge branch 'main' into renovate/docker.io-pretix-standalone-2026.x
/ build (pull_request) Successful in 31s
/ cleanup-staging (pull_request) Successful in 4s
/ build (push) Successful in 28s
/ Ansible Lint (pull_request) Failing after 2m54s
/ Ansible Lint (push) Has been cancelled
2026-08-07 23:44:45 +02:00
3ab9f83039
z9-router(host): fix nftables
/ build (pull_request) Successful in 30s
/ Ansible Lint (pull_request) Failing after 2m39s
/ cleanup-staging (pull_request) Successful in 3s
/ build (push) Successful in 27s
/ Ansible Lint (push) Has been cancelled
2026-08-07 23:36:56 +02:00
d97c22cc8e
z9-router(host): fix dns
2026-08-07 23:36:37 +02:00
ebdafb997f
unbound(role): also over write fallback_dns in resolvd
2026-08-07 23:36:22 +02:00
