58ea3ef7a3
z9-router(host): update host kea config
...
- edit config to work with update kea role
- fix ipv6 addresses
2026-08-07 22:55:55 +02:00
32caa40f77
unbound(role): fix some unbound setup stuff
2026-08-07 22:55:55 +02:00
8d9cb0007c
kea_dhcp(role): update to newest fux noc version
2026-08-07 22:55:55 +02:00
6006dbca27
z9-router(host): nftables conf fix indent and allow dhcpv6
2026-08-07 22:55:55 +02:00
9271cbda97
unbound(role): fix systemd unit of prometheus exporter
2026-08-07 22:55:34 +02:00
4ec4c1f942
z9-router(host): fix systemd-networkd configs
2026-08-07 22:55:34 +02:00
83f654037a
unbound(role): fix unbound prometheus exporter install on debian
...
- download debian image from github und verify checksum
- setup systemd service unit
2026-08-07 22:55:33 +02:00
6b05c4b05a
unbound(role): fix unbound config template
...
- fix some indentation problems
- fix access control
- fix remote control unix socket and thrust anchor file (because debain
appamour ist annoying)
- add unbound-anchor package
2026-08-07 22:55:33 +02:00
db6ef3fcb2
kea_dhcp(role): fix include wars check
2026-08-07 22:55:33 +02:00
fa91690485
z9(pve01): change thinkcccore0 to pve01
2026-08-07 22:55:33 +02:00
04d24ccb6f
z9(group): remove all old ip references and change them to new ones
2026-08-07 22:55:33 +02:00
9e92a3c390
z9(group): remove all z9 references as subdomain
2026-08-07 22:55:33 +02:00
a0b0e8188f
unbound(role): move resolvd vars to task
2026-08-07 22:55:33 +02:00
5423558ab4
unbound(role): make unbound thread number configurable
2026-08-07 22:55:32 +02:00
bb141ddab3
unbound(role): reformat config template and use all vcpus
2026-08-07 22:55:32 +02:00
9a5dafb2bc
unbound(role): remove tags inside role
2026-08-07 22:55:32 +02:00
a4bb9a82d2
unbound(role): add FIXME note to unbound prometheus exporter install
2026-08-07 22:55:32 +02:00
1a0ac38861
unbound(role): use existing deploy_systemd_resolved_config role and some reordering
2026-08-07 22:55:32 +02:00
613e0528d7
kea_dhcp(role): make stork-agent.env smaller and add link to documentation
2026-08-07 22:55:32 +02:00
6734843e8a
kea_dhcp(role): fix indentation in template
2026-08-07 22:55:32 +02:00
c803b1fc67
kea_dhcp(role): add README.md
2026-08-07 22:55:31 +02:00
7440e8fd15
kea_dhcp(role): some fixes and removing arch part
...
- remove tags from tasks
- remove archlinux part
- use debian default package for kea
2026-08-07 22:55:31 +02:00
ebc6c8a9b8
z9-router(host): fix some spelling and a wireguard peer address
2026-08-07 22:55:31 +02:00
8351c28cd0
z9-router(host): add ansible pull
2026-08-07 22:55:31 +02:00
1dff022146
z9-router(host): rename rt1 to z9-router
2026-08-07 22:55:31 +02:00
010b8d1224
rt1(z9 host) unbound(role) kea_dhcp(role): create unbound and kea_dhcp role for rt1
...
- create unbound role
- create kea_dhcp role
- configure unbound and keadhcp on rt1(z9 host)
2026-08-07 22:55:31 +02:00
aeaa80d2c4
rt1(z9 host): create host and configure networkd and nftables
2026-08-07 22:55:31 +02:00
7f421b2409
Update to current version
/ build (push) Successful in 33s
/ Ansible Lint (push) Successful in 2m41s
2026-08-04 23:16:39 +02:00
6c4f2dc9b6
Update with correct prefixes
/ build (push) Successful in 30s
/ Ansible Lint (push) Successful in 2m45s
2026-08-04 18:44:51 +02:00
849f63cd1b
Activate sync
/ build (push) Successful in 28s
/ Ansible Lint (push) Successful in 3m21s
2026-08-04 09:13:50 +02:00
68289025d2
Merge branch 'main' of git.hamburg.ccc.de:CCCHH/ansible-infra
/ build (push) Successful in 54s
/ Ansible Lint (push) Successful in 3m22s
2026-08-03 08:58:31 +02:00
03ba0cf126
Use correct IP prefix in example
2026-08-03 08:58:29 +02:00
9a78164b7b
roles(dooris): remove blank line to make ansible-lint happy
/ build (push) Successful in 30s
/ Ansible Lint (push) Successful in 2m28s
2026-08-03 00:06:44 +02:00
9266123f42
Explain that you can use a default route
...
/ build (push) Successful in 28s
/ Ansible Lint (push) Failing after 2m17s
#133
2026-08-02 18:12:02 +02:00
24124e9f3d
Document wg setup
...
/ build (push) Successful in 29s
/ Ansible Lint (push) Failing after 2m24s
First step for #133
2026-08-02 18:09:29 +02:00
f749ed436c
Use fixed port range to allow for better fw rules
/ build (push) Successful in 45s
/ Ansible Lint (push) Failing after 2m38s
2026-08-02 17:25:30 +02:00
0377db2812
Use correct hostname for yate
2026-08-02 17:24:58 +02:00
5ecf70ade3
Activate old address for yate for now
/ Ansible Lint (push) Failing after 5s
/ build (push) Failing after 17s
2026-07-31 19:43:37 +02:00
6eafc47773
jitsi dazu
...
/ build (push) Successful in 26s
/ Ansible Lint (push) Failing after 2m28s
Erstmal nur der Host, die eigentliche Config muss später passieren
2026-07-29 22:52:13 +02:00
de8daaf56c
add dooris role for setup of dooris interaction on the node itself
/ build (pull_request) Successful in 28s
/ Ansible Lint (pull_request) Failing after 3m49s
/ cleanup-staging (pull_request) Successful in 6s
/ build (push) Successful in 26s
/ Ansible Lint (push) Failing after 3m35s
2026-07-29 14:16:04 +02:00
699a2bcfff
specify that docker_compose role may not be included twice
...
Our docker compose role is configured via ansible variables in a way
that overwrites each other if it is activated twice with different
variable assignments (unless e.g. a role that just installs more
packages).
To prevent misuse of the role, the allow_duplicates key of the role
meta is set to false. This should make ansible complain if the role
is included twice for a single host.
2026-07-29 14:16:04 +02:00
685646c697
Set up Keycloak to Mailman sync for chaos@
...
/ build (push) Successful in 25s
/ Ansible Lint (push) Successful in 2m23s
DRY_RUN=true, so no changes to Mailman are performed yet.
2026-07-26 16:19:41 +02:00
647058f6ad
ccchoir: stick to major version and cronjob update
/ build (push) Successful in 48s
/ Ansible Lint (push) Successful in 2m46s
2026-07-26 13:21:41 +02:00
283bc80b41
Update wordpress image
/ build (push) Successful in 50s
/ Ansible Lint (push) Successful in 2m53s
2026-07-26 00:47:54 +02:00
70b1039f95
Upgrade Hedgdedoc to 1.11.1
...
/ build (push) Successful in 26s
/ Ansible Lint (push) Successful in 2m38s
Closes #130
Also add appropriate config for renovate to upgrade Hedgedoc.
2026-07-24 23:26:23 +02:00
374e8f981a
Update git.hamburg.ccc.de/ccchh/oci-images/nextcloud Docker tag to v34
/ build (pull_request) Successful in 31s
/ Ansible Lint (pull_request) Successful in 2m54s
/ cleanup-staging (pull_request) Successful in 3s
/ build (push) Successful in 25s
/ Ansible Lint (push) Successful in 2m46s
2026-07-23 20:16:22 +00:00
4218b59d3b
fix: alloy role the suites for deb repo must be stable
/ build (push) Successful in 27s
/ Ansible Lint (push) Successful in 2m27s
2026-07-23 22:08:58 +02:00
900971ebe9
alloy(role): pull in alloy role that works from fux ( #112 )
...
/ build (push) Successful in 26s
/ Ansible Lint (push) Successful in 2m39s
Reviewed-on: #112
Reviewed-by: June <june@noreply.git.hamburg.ccc.de>
2026-07-23 20:34:02 +02:00
9a876e12a8
fix CNAME for club-assistant acme challenge
/ build (push) Successful in 47s
/ Ansible Lint (push) Successful in 3m52s
2026-07-23 14:33:19 +02:00
b3fe097421
re-enable club-assistant dns record
/ build (push) Successful in 27s
/ Ansible Lint (push) Successful in 3m27s
2026-07-22 21:44:03 +02:00
