603d3fb6f4
Update machine SMTP mail sending config
2026-05-24 00:12:50 +02:00
ec27b52820
cloud: bump nextcloud to 33 and postgres 15.18
/ build (push) Failing after 2m40s
/ Ansible Lint (push) Successful in 3m2s
2026-05-20 19:49:53 +02:00
292c626629
add ns2.vie.ccc.de as dns secondary
/ build (push) Failing after 2m37s
/ Ansible Lint (push) Successful in 21m28s
2026-05-20 15:44:47 +02:00
0c83fcc2b2
sops: darios key expired, so remove for now
/ Ansible Lint (push) Successful in 2m22s
/ build (push) Successful in 24s
2026-05-20 04:09:28 +02:00
8a8ce7206d
add infrastructure-authorized-keys to lists host
/ Ansible Lint (push) Successful in 2m48s
2026-05-19 16:27:59 +02:00
6bb09901a0
add ns.vie.ccc.de. as direct secondary for authoritative DNS zones
/ Ansible Lint (push) Has been cancelled
2026-05-19 11:00:03 +02:00
a76f01aea7
Move secrets to SOPS, add REST_USER
/ Ansible Lint (push) Successful in 9m15s
2026-05-16 13:06:19 +02:00
164f784957
remove errornously added irz42 reverse-dns secondaries
/ Ansible Lint (push) Successful in 3m0s
2026-05-15 14:50:15 +02:00
18ffa42358
remove actually unused reverse-dns zones
/ Ansible Lint (push) Successful in 3m0s
2026-05-13 15:14:37 +02:00
d2f95237a0
add wieskes nameservers for reverse-dns zone transfers from auth-dns
2026-05-13 15:11:29 +02:00
50beedbc62
configure metric scraping from knot on auth-dns
/ Ansible Lint (push) Failing after 6m12s
2026-05-06 15:51:38 +02:00
f7306b91a6
remove unused dns zones
/ Ansible Lint (push) Successful in 3m22s
2026-05-06 14:37:53 +02:00
021843b5ce
migrate reverse dns zones to new auth-dns server
/ Ansible Lint (push) Successful in 2m36s
2026-05-06 14:33:04 +02:00
46b0a49eb8
migrate dns zone eh22.easterhegg.eu to new auth-dns server
/ Ansible Lint (push) Failing after 2m29s
2026-05-06 12:34:23 +02:00
d535607ae6
migrate dns zone eh20.easterhegg.eu. to new auth-dns server
2026-05-06 12:31:55 +02:00
04a6c685d1
migrate dns zone hamburg.ccc.de. to new auth-dns server
/ Ansible Lint (push) Successful in 2m32s
2026-05-06 12:17:51 +02:00
fa021fb737
migrate dns zone ccchh.net. to new auth-dns server
/ Ansible Lint (push) Successful in 2m27s
2026-05-06 12:12:54 +02:00
9ca4eb14e1
configure hh.ccc.de on auth-dns
2026-05-06 11:47:10 +02:00
becee70ab9
disable systemd-resolved on auth-dns
2026-05-06 11:47:10 +02:00
fa94d59df6
add barebones knot config
...
This configuration does not yet do much but it provisions a knot
server that runs.
2026-05-06 11:47:10 +02:00
d9fc1ef401
add host auth-dns.hamburg.ccc.de
/ Ansible Lint (push) Successful in 2m27s
2026-04-29 21:24:59 +02:00
5d16c7781c
Revert "deploy alerta on grafana.hosts.hamburg.ccc.de"
...
/ Ansible Lint (push) Successful in 2m23s
This reverts commit b10d7d1592
2026-04-29 19:05:15 +02:00
d7811f249a
diday-staging-runner(host): deploy host runner for diday staging deploy
/ Ansible Lint (push) Successful in 2m29s
2026-04-28 20:12:27 +02:00
b10d7d1592
deploy alerta on grafana.hosts.hamburg.ccc.de
/ Ansible Lint (push) Successful in 2m31s
2026-04-24 19:05:08 +02:00
ec4dd36178
dooris(host): move to dns-01-acme-dns
/ Ansible Lint (pull_request) Successful in 2m19s
/ Ansible Lint (push) Successful in 2m28s
2026-04-19 23:48:11 +02:00
26fbbc9035
sops: use fis new key
/ Ansible Lint (push) Successful in 2m34s
2026-04-19 00:36:37 +02:00
abcd622757
light(host): move to dns-01-acme-dns
/ Ansible Lint (pull_request) Successful in 2m17s
/ Ansible Lint (push) Successful in 2m15s
2026-04-11 04:34:24 +02:00
6bc872f1c0
pretalx(host): move to dns-01-acme-dns as http-01 failed for cfp.eh22
/ Ansible Lint (push) Successful in 13m31s
2026-03-31 17:51:06 +02:00
73ed238a28
sunders(host): move to dns-01-acme-dns
/ Ansible Lint (push) Successful in 4m37s
2026-03-31 16:59:02 +02:00
21f51ea2d7
z9(hosts): setup ansible-pull for all z9 hosts
/ Ansible Lint (push) Successful in 5m1s
2026-03-30 21:55:44 +02:00
66830eaf30
Update all stable non-major dependencies
/ Ansible Lint (pull_request) Successful in 2m45s
/ Ansible Lint (push) Successful in 11m4s
2026-03-28 01:01:38 +00:00
e961886972
pad(host): set session secret, so users won't be logged out on restart
...
/ Ansible Lint (push) Has been cancelled
Closes #74
2026-03-09 21:09:08 +01:00
c246a6815c
ansible-lint: fix issues
/ Ansible Lint (pull_request) Successful in 3m1s
/ Ansible Lint (push) Successful in 2m18s
2026-03-06 21:27:51 +01:00
9b092d0daf
Update all stable non-major dependencies
/ Ansible Lint (push) Failing after 6m30s
/ Ansible Lint (pull_request) Failing after 7m16s
2026-03-06 20:16:48 +00:00
4f3caaf5ed
add bitwhisker to sops
/ Ansible Lint (push) Successful in 2m28s
2026-03-05 20:18:53 +01:00
711f2f1c64
certbot(role): don't use certbot__version_spec anymore as its not used
/ Ansible Lint (push) Successful in 8m7s
2026-03-01 20:08:49 +01:00
41dc9c8529
configure www2 nginx
/ Ansible Lint (push) Successful in 2m21s
2026-02-26 17:44:24 +01:00
3e3cedd357
add www2 and www3 hosts
2026-02-24 19:09:20 +01:00
7a1ea7d40e
Override base.html template to brand site
/ Ansible Lint (push) Successful in 2m9s
2026-02-22 18:22:12 +01:00
e823c46a2d
stb updated key
/ Ansible Lint (push) Successful in 2m15s
2026-02-18 09:51:25 +01:00
5f31392a27
Remove authoritative-dns as its not needed anymore
/ Ansible Lint (pull_request) Successful in 2m15s
/ Ansible Lint (push) Successful in 2m18s
2026-02-11 10:38:04 +01:00
fe647da3bf
mjolnir: deploy mjolnir using docker compose
...
/ Ansible Lint (push) Successful in 2m9s
Moving from mjolnir from nix-infra to ansible-infra.
Also using native encryption now instead of the deprecated pantalaimon
and having protectAllJoinedRooms set to true for easier and quicker
usage.
2026-02-11 03:10:43 +01:00
2f67cb875d
status(host): rotate age key
/ Ansible Lint (push) Failing after 1m55s
2026-02-09 17:43:25 +01:00
2350710177
Use new entry after acmedns db reset
/ Ansible Lint (push) Successful in 2m25s
2026-02-08 18:38:37 +01:00
536eedeffc
status(host): add monitoring for ACME DNS
/ Ansible Lint (push) Successful in 2m10s
2026-02-01 22:44:42 +01:00
06ae220857
Remove spaceapiccc.hamburg.ccc.de
/ Ansible Lint (push) Successful in 2m9s
2026-01-27 22:35:28 +01:00
3bba747dab
Configure seperate server for spaceapi.ccc.de
/ Ansible Lint (push) Successful in 2m32s
2026-01-27 16:30:00 +01:00
ad783e4a15
now in production
2026-01-27 16:21:18 +01:00
3abc375984
Re-encrypt for spaceapiccc
2026-01-27 09:46:47 +01:00
0f3cd2c70a
amcedns to enable Let's Encrypt DNS-01 challenges
/ Ansible Lint (push) Failing after 38s
2026-01-25 22:41:42 +01:00
