a602ed9f9e
unbound(role): add FIXME note to unbound prometheus exporter install
2026-06-20 17:59:53 +02:00
e649933337
unbound(role): use existing deploy_systemd_resolved_config role and some reordering
2026-06-20 17:59:53 +02:00
4c802c8081
kea_dhcp(role): make stork-agent.env smaller and add link to documentation
2026-06-20 17:59:53 +02:00
95aa6e37f1
kea_dhcp(role): fix indentation in template
2026-06-20 17:59:53 +02:00
117b11b773
kea_dhcp(role): add README.md
2026-06-20 17:59:53 +02:00
151b6c5bf7
kea_dhcp(role): some fixes and removing arch part
...
- remove tags from tasks
- remove archlinux part
- use debian default package for kea
2026-06-20 17:59:53 +02:00
20e8423e60
z9-router(host): fix some spelling and a wireguard peer address
2026-06-20 17:59:53 +02:00
4626d04fb6
z9-router(host): add ansible pull
2026-06-20 17:59:52 +02:00
ffe6d5c07a
z9-router(host): rename rt1 to z9-router
2026-06-20 17:59:52 +02:00
0986e45735
rt1(z9 host) unbound(role) kea_dhcp(role): create unbound and kea_dhcp role for rt1
...
- create unbound role
- create kea_dhcp role
- configure unbound and keadhcp on rt1(z9 host)
2026-06-20 17:59:52 +02:00
8b829781de
rt1(z9 host): create host and configure networkd and nftables
2026-06-20 17:59:52 +02:00
899dbea4dd
Fix redirect check, but this is wrong
...
/ build (push) Failing after 2m40s
/ Ansible Lint (push) Successful in 2m59s
Redirect checks should not repeat the content check for the target, but simply check that the redirect is going to the right URL.
2026-06-19 09:30:18 +02:00
1abea4ccec
Merge branch 'main' into use-canary
/ build (pull_request) Failing after 2m46s
/ Ansible Lint (pull_request) Successful in 2m52s
/ cleanup-staging (pull_request) Failing after 2m18s
/ build (push) Failing after 2m44s
/ Ansible Lint (push) Successful in 3m16s
2026-06-19 09:10:49 +02:00
8b924c924f
Update actions/checkout action to v7
/ Ansible Lint (pull_request) Successful in 3m40s
/ build (pull_request) Successful in 29s
/ Ansible Lint (push) Failing after 1m55s
/ cleanup-staging (pull_request) Failing after 2m16s
/ build (push) Failing after 2m42s
2026-06-18 15:15:51 +00:00
e5fa86468a
Encode domain in canary
/ Ansible Lint (push) Successful in 2m27s
/ Ansible Lint (pull_request) Successful in 2m34s
/ build (pull_request) Failing after 2m43s
2026-06-15 19:56:15 +02:00
05149f42fa
Use canary comment instead of actual content
...
/ Ansible Lint (push) Successful in 2m59s
/ build (pull_request) Failing after 2m45s
/ Ansible Lint (pull_request) Successful in 3m8s
Please only merge after CCCHH/ccchh-website#170
2026-06-15 19:14:42 +02:00
5f7b0c9449
Adjust to content change
/ Ansible Lint (push) Successful in 2m29s
/ build (push) Failing after 2m43s
2026-06-15 19:07:17 +02:00
75b7e80321
migrate uberwachungsfrei kundgebung to own domain
/ Ansible Lint (push) Successful in 2m22s
/ build (push) Failing after 2m46s
2026-06-11 14:40:09 +02:00
5973de0959
dns: validate zone files before apply in knot role
/ build (push) Failing after 2m44s
/ Ansible Lint (push) Successful in 3m23s
2026-06-10 16:17:58 +02:00
57d2a94990
dns: fix syntax error in diday.org zone
2026-06-10 16:17:23 +02:00
431aaefb36
dns: remove ns.vie.ccc.de from already migrated zones
/ Ansible Lint (push) Successful in 2m27s
/ build (push) Failing after 2m41s
2026-06-10 16:05:51 +02:00
6d922b7c8b
dns: also notify erfadns.ber.ccc.de for catalog zone changes
/ Ansible Lint (push) Successful in 2m32s
/ build (push) Failing after 2m43s
2026-06-10 13:12:00 +02:00
931afac7e0
add ueberwachungsfrei-kundgebung site
/ build (push) Failing after 2m43s
/ Ansible Lint (push) Successful in 2m48s
2026-06-09 21:42:49 +02:00
b283089b06
readd ns.vie.ccc.de to our zones because zones are not delegated yet
/ build (push) Successful in 28s
/ Ansible Lint (push) Successful in 2m21s
2026-06-09 21:27:33 +02:00
ec9275cf46
add ueberwachungsfrei-kundgebung.hamburg.ccc.de domain
/ build (push) Failing after 2m41s
/ Ansible Lint (push) Successful in 2m57s
2026-06-09 21:00:51 +02:00
389b87113b
auth-dns: update NS records of all zone files
...
/ build (push) Failing after 2m41s
/ Ansible Lint (push) Successful in 3m1s
The current set is auth-dns.hamburg.ccc.de in addition to the
newly created erfadns.ber.ccc.de
See https://zammad.hamburg.ccc.de/#ticket/zoom/1738 for details.
2026-06-09 11:00:02 +02:00
471012928a
auth-dns: configure nameserver secondary solely to erfadns.ber.ccc.de
/ Ansible Lint (push) Successful in 2m26s
/ build (push) Failing after 2m42s
2026-06-09 10:31:32 +02:00
04305a1124
keycloak: update to 26.6.0
/ Ansible Lint (push) Successful in 2m29s
/ build (push) Failing after 2m41s
2026-06-08 21:34:13 +02:00
5f94d7f284
remove ns-intern.hamburg.ccc.de from notify targets of our domains
/ Ansible Lint (push) Successful in 2m35s
/ build (push) Failing after 2m43s
2026-06-06 16:26:47 +02:00
66e0095070
add zone diday.org. to authoritative DNS
2026-06-06 16:25:18 +02:00
8ca5d82d39
knot: fix templating inconsistency in netplan config
2026-06-06 15:06:11 +02:00
3a09c107b9
knot: use explicit ansible_facts reference
2026-06-06 14:59:16 +02:00
fa6e280594
www2/www3(host): remove hosts as they got removed
/ build (push) Successful in 28s
/ Ansible Lint (push) Successful in 2m19s
2026-06-04 00:54:55 +02:00
7b48f1ebe7
status(host): fix auth-dns ccchh.net check by moving to new entry
...
/ Ansible Lint (push) Successful in 2m27s
/ build (push) Failing after 2m41s
Check entry for pve01 instead of no longer present entry for
club-assistant for the auth-dns ccchh.net check.
2026-06-04 00:39:07 +02:00
fa598c72fc
Add opensourcetorrents
/ Ansible Lint (push) Successful in 2m27s
/ build (push) Failing after 2m42s
2026-06-01 21:15:31 +02:00
a72accca20
Add documentation style outline ( #97 )
...
/ Ansible Lint (push) Successful in 6m5s
/ build (push) Successful in 31s
Reviewed-on: #97
Reviewed-by: lilly <lilly@noreply.git.hamburg.ccc.de>
2026-05-27 20:49:07 +02:00
7832978ff7
update ccchh.net dns zone after club proxmox migration
/ Ansible Lint (push) Successful in 2m19s
/ build (push) Failing after 2m39s
2026-05-24 11:55:37 +02:00
dd48a9d519
bring guide about new chaosknoten VMs into doc structure
/ Ansible Lint (push) Successful in 2m36s
/ build (push) Failing after 2m37s
2026-05-24 00:27:23 +02:00
0842a51ae0
Merge branch 'main' of git.hamburg.ccc.de:CCCHH/ansible-infra
/ Ansible Lint (push) Successful in 2m21s
/ build (push) Failing after 2m38s
2026-05-24 00:12:52 +02:00
603d3fb6f4
Update machine SMTP mail sending config
2026-05-24 00:12:50 +02:00
4574dbf4ba
secrets(role): introduce secrets role for storing secrets
...
/ Ansible Lint (push) Successful in 2m18s
/ build (push) Failing after 2m40s
Allows storage of secrets to then be referenced in other places.
The motivation was storing WireGuard secrets for systemd-networkd.
2026-05-23 22:40:17 +02:00
5ca311d240
add some documentation structure
/ build (push) Failing after 2m39s
/ Ansible Lint (push) Successful in 2m33s
/ build (pull_request) Has been cancelled
/ Ansible Lint (pull_request) Has been cancelled
2026-05-23 19:37:51 +02:00
51cd583dff
docs: move information on secrets and sops into docs
/ Ansible Lint (push) Successful in 2m20s
/ build (push) Failing after 2m40s
2026-05-20 22:54:32 +02:00
74fb99ec8f
docs: delete outdated section on web service setup from README
...
/ build (push) Successful in 27s
/ Ansible Lint (push) Successful in 2m44s
A better guide can be found in the new docs.
2026-05-20 20:09:28 +02:00
b91bc38d7b
docs: rework and split up docs on creating a new web service
...
/ build (push) Waiting to run
/ Ansible Lint (push) Waiting to run
- Split out the general information on how to set up a new VM on
Chaosknoten to have it be more generally useful.
- Also split out the section on monitoring to not have it intermingled
with the other information.
- Rework the guides to include more information and be more streamlined.
Also remove duplicate information along the way.
2026-05-20 20:06:57 +02:00
ec27b52820
cloud: bump nextcloud to 33 and postgres 15.18
/ build (push) Failing after 2m40s
/ Ansible Lint (push) Successful in 3m2s
2026-05-20 19:49:53 +02:00
411200884b
docs: overhaul SOPS documentation for better structure and readability
/ Ansible Lint (push) Successful in 2m22s
/ build (push) Failing after 2m40s
2026-05-20 18:57:21 +02:00
292c626629
add ns2.vie.ccc.de as dns secondary
/ build (push) Failing after 2m37s
/ Ansible Lint (push) Successful in 21m28s
2026-05-20 15:44:47 +02:00
0c83fcc2b2
sops: darios key expired, so remove for now
/ Ansible Lint (push) Successful in 2m22s
/ build (push) Successful in 24s
2026-05-20 04:09:28 +02:00
8428d5a66b
docs: use pymdownx.superfences to make codeblocks in lists work properly
/ Ansible Lint (push) Successful in 2m33s
/ build (push) Failing after 2m38s
2026-05-19 23:49:06 +02:00
