58642620a1
IPv6 fix für metrics
/ Ansible Lint (push) Failing after 1m47s
2025-04-30 16:23:35 +02:00
0c9e3ccb87
fix switchup in prometheus.relabel
/ Ansible Lint (push) Failing after 1m49s
2025-04-30 15:07:26 +02:00
bd9e04eef8
metrics fux
2025-04-30 02:16:09 +02:00
e183f1a2c3
prometheus remote write with alloy using it
/ Ansible Lint (push) Failing after 1m53s
2025-04-30 01:11:17 +02:00
e21ff26f36
fix: alertmanager
...
/ Ansible Lint (push) Failing after 1m56s
the message template now just give out simple string if the list of alerts is to long
2025-04-28 23:02:13 +02:00
b0660deb71
fix: nginx role
...
/ Ansible Lint (push) Failing after 1m53s
add defaults for nginx__deploy_htpasswds and nginx__htpasswds
2025-04-28 22:23:11 +02:00
456117a789
adding loki
/ Ansible Lint (push) Failing after 1m55s
2025-04-28 20:31:55 +02:00
3548c1f4d6
restart ssh service instead of rebooting as this should be fine
...
/ Ansible Lint (push) Successful in 2m9s
Active connections should survive a restart of the service and testing
also didn't show any issues.
2025-04-25 02:01:29 +02:00
9c57fca876
Also supply a dmoain for user content
/ Ansible Lint (push) Successful in 2m9s
2025-04-16 16:27:21 +02:00
811b5832da
Incread file upload limit to 1G (from 10MB)
2025-04-16 16:27:02 +02:00
77e1d3bc3e
keycloak: allow access form new IPv6 subnet at z9
/ Ansible Lint (push) Successful in 1m48s
2025-02-26 23:48:19 +01:00
6b80f5b52a
fix accidentally added personalized ansible_user by removing it
/ Ansible Lint (pull_request) Successful in 1m58s
/ Ansible Lint (push) Successful in 1m43s
2025-02-23 23:51:58 +01:00
41ba73d7c3
dep._hyperv.(playb.): add deps step to vm template generation setup play
/ Ansible Lint (push) Successful in 1m45s
2025-02-23 23:26:36 +01:00
fd13e5341b
add thinkcccore0 to inventory and enable VM template gen. setup on it
/ Ansible Lint (push) Has been cancelled
2025-02-23 23:23:51 +01:00
ca16e3d55f
dep._hypervisor(playb.): introduce play for setting up vm template gen.
/ Ansible Lint (push) Has been cancelled
2025-02-23 22:42:58 +01:00
98972e39c4
keycloak(host): update to 26.1 & postgres to 15.12
/ Ansible Lint (pull_request) Successful in 1m45s
/ Ansible Lint (push) Successful in 1m52s
2025-02-22 23:17:36 +01:00
fce4c2f73b
grafana(host): account in Prom. hyperv. disk alerts for longer backups
...
/ Ansible Lint (push) Successful in 1m39s
Set duration for Prometheus hypervisor disk rw rate and hard disk io
alerts to 2h to account for the very long running (over 90m) backup job.
2025-02-18 15:38:07 +01:00
0e4df5b590
nginx(role): make loop output manageable using loop_control label
/ Ansible Lint (push) Successful in 1m48s
2025-02-18 06:07:47 +01:00
9dba002f10
maintenance(playbook): simplify nginx repo setup and install task name
/ Ansible Lint (push) Successful in 1m45s
2025-02-18 05:48:52 +01:00
1ea63a19d3
maintenance(playbook): ensure docker repo and install before update
...
As with ensuring the nginx repo setup and install on relevant hosts, do
the same for docker.
2025-02-18 05:48:01 +01:00
7420ed6010
nginx(role): split up repo setup and install task lists to estab. conv.
...
Split up repo setup and package installation after all to establish this
as a convention (its already done this way in the docker role and was
done this way in the nginx role before) to highlight that an external
repo is used.
2025-02-18 05:43:39 +01:00
89f3e55eac
docker(role): use better naming
2025-02-18 05:35:45 +01:00
ce812fb006
docker(role): update README
...
Document Debian 12 support, enhance wording, bring structure in line
with the READMEs of more modern roles and remove unnecessary sections.
2025-02-18 05:33:30 +01:00
d62c070ccc
maintenance(playbook): fix playbook by using updated nginx role res.
2025-02-18 05:17:38 +01:00
07511ef723
grafana(host): remove decomissioned nix-box-june from Prometheus targets
/ Ansible Lint (push) Successful in 1m42s
2025-02-18 04:51:26 +01:00
5e5c980f14
check(playbook): print all held packages
/ Ansible Lint (pull_request) Successful in 1m41s
/ Ansible Lint (push) Successful in 1m40s
2025-02-18 04:32:43 +01:00
34b9ee2fa4
nginx(role): simplify description in README
2025-02-18 04:32:43 +01:00
344dd78981
nginx(role): use better naming, wording and file structure
2025-02-18 04:32:43 +01:00
9b2ef55f86
nginx(role): remove unneces. "hosts" and "entry points" sec. from README
2025-02-18 04:32:43 +01:00
5809e4015f
nginx(role): add "logging" to the reserved configuration names
2025-02-18 04:32:43 +01:00
3d22f7ffae
nginx(role): document Debian 12 support
2025-02-18 04:32:43 +01:00
4adf39d969
nginx(role): document arguments in README for better discoverability
...
Document the role arguments in the README instead of in the
argument_specs for better discoverability and readability.
2025-02-18 04:32:43 +01:00
2e9f73b46b
nginx(role): simplify ensuring that gnupg is installed
...
Also improve naming.
2025-02-18 04:32:43 +01:00
df22074aeb
nginx(role): simplify installation by removing version spec
...
We always just want the latest anyway and therefore don't use it, so no
need to keep the complexity introduced by that setting.
Also merge repo_setup and nginx_install task lists into one
nginx_install task list as keeping two files isn't necessary.
Finally improving naming a bit.
2025-02-18 04:32:43 +01:00
172d6472bc
nginx(role): remove unnecessary apt-get update step
...
The nginx package gets installed with "update_cache: true" afterwards
anyway, so the apt-get update step shouldn't be necessary.
2025-02-18 04:32:43 +01:00
5dc2520ecd
eh22-wiki: configure custom eh22-theme
/ Ansible Lint (push) Successful in 1m37s
2025-02-17 22:26:17 +01:00
7271426502
dokuwiki: add option to checkout custom design repo
/ Ansible Lint (push) Successful in 1m44s
2025-02-17 22:20:25 +01:00
79012fb7f8
eh22-netbox: setup EH22 NetBox
/ Ansible Lint (push) Successful in 1m44s
2025-02-17 01:23:35 +01:00
496f122968
give ansible docker comp. cron jobs unique names to not overw. each oth.
...
/ Ansible Lint (push) Successful in 1m43s
Give them unique names, so the latter doesn't overwrite the former.
Also make the task names nicer.
2025-02-17 00:32:50 +01:00
f0e345b15a
Merge branch 'main' of git.hamburg.ccc.de:CCCHH/ansible-infra
/ Ansible Lint (push) Successful in 1m47s
2025-02-16 22:09:29 +01:00
690ec9bebc
Use distinct short code to avoid confusion with EH pretix
2025-02-16 22:09:27 +01:00
ff540126a1
add chaosknoten to hosts and new hypervisors group
...
/ Ansible Lint (push) Successful in 1m47s
Also exclude that group from the tasks otherwise targeting all hosts.
2025-02-16 02:34:14 +01:00
61cd5053d0
flatten inventories making them simpler
...
/ Ansible Lint (push) Successful in 1m41s
Remove the child groups as we weren't using their functionality anyway.
Also remove the debian_11/12 host groups as they're not in use.
2025-02-16 00:36:10 +01:00
4def1334d8
for non-verbose output hide user passwords in postgresql role
/ Ansible Lint (pull_request) Successful in 1m36s
/ Ansible Lint (push) Successful in 1m34s
2025-02-15 20:06:55 +01:00
2ec1471d7f
netbox: move NetBox from NixOS to Ansible
...
/ Ansible Lint (push) Successful in 1m46s
/ Ansible Lint (pull_request) Successful in 1m50s
Also introduce netbox_hosts group for applying netbox role to multiple
hosts.
2025-02-15 19:57:15 +01:00
09a8551c8a
add option to netbox role for custom pipeline code for OIDC mapping
...
/ Ansible Lint (push) Successful in 1m36s
/ Ansible Lint (pull_request) Successful in 1m36s
Add option to netbox role for ensuring custom pipeline code for OIDC
group and role mapping is either present or not.
The custom pipeline code is licensed under the Creative Commons: CC
BY-SA 4.0 license.
See:
https://github.com/goauthentik/authentik/blob/main/LICENSE
https://github.com/goauthentik/authentik/blob/main/website/integrations/services/netbox/index.md
https://docs.goauthentik.io/integrations/services/netbox/
5676b1a468
2025-02-15 06:23:04 +01:00
dbb784e2bb
add license notice to README
...
This is in preparation for extending that notice to point out code that
is licensed differently.
2025-02-15 06:23:04 +01:00
783c36bcc1
add netbox role for ensuring netbox is deployed as specified
...
The role takes over the deployment of netbox and its dependencies, while
still requiring the user to provide the netbox version, db password and
config as well as to set up a web server and handle stuff like creating
users, etc.
2025-02-15 06:23:04 +01:00
9662995377
add postgresql role for ens. psql and opt. some dbs and users are set up
...
Add postgresql role for ensuring postgresql is installed.
Furthermore the role optionally takes some basic configuration to ensure
databases with their owners and users are set up as specified.
This is a requirement for a new netbox role.
2025-02-15 06:23:04 +01:00
fc24bfff5d
add redis role for ensuring redis is installed from distro packages
...
This is a requirement for a new netbox role.
2025-02-15 06:23:04 +01:00
