CCCHH/ansible-infra
CCCHH/ansible-infra
3
0
Fork 0
Code Issues 4 Pull requests Actions Wiki Activity
277 commits 3 branches 0 tags 1.6 MiB
Commit graph

86 commits

Author SHA1 Message Date
christian 433008d211
Cleanup old configurations we no longer use. 
We have a bunch of old hosts, host_vars and roles we no longer use.
There is no real value to keep them as they can just be fetched from the
git history, should they be needed again.
This make gettin a overview of the repository much simpler.
 2024-11-22 23:09:35 +01:00
Stefan Bethke 739a2e1cbd Redirect to 38c3 hackertours shop for now 2024-11-18 12:22:45 +01:00
June 9faf2f731d
public-reverse-proxy: add config for www. and staging.c3cat.de 2024-11-12 23:07:14 +01:00
christian a386f9e2eb
custom alerts for CI VMs 
its expected for some VMs to have high Read / Write rates for some time
so this is a custom alerts for ours CI VMs
 2024-11-10 17:06:41 +01:00
christian 3284fae62a
Add more prometheus node exporter 2024-11-05 19:16:28 +01:00
christian 261bd7d654
Add prometheus-node-exporter role and add it to most hosts 2024-11-03 21:27:51 +01:00
Stefan Bethke f184ad220b Update to current version 2024-10-31 11:26:57 +01:00
June 1921a75339
public-reverse-proxy: add config for hydra.hamburg.ccc.de 2024-10-29 23:52:30 +01:00
christian 34dc6d9a84
Reduce Host Memory is underutilized to 10% 2024-10-18 21:15:20 +02:00
Stefan Bethke 2f00d21821 Redirect home page to wiki 2024-10-13 13:50:50 +02:00
Stefan Bethke 235e6e514f Move Pretix from hackertours to tickets 2024-10-13 09:10:10 +02:00
June 7cd4a9a723
public-reverse-proxy: add config for staging.hackertours.hamburg.ccc.de 2024-10-12 22:08:28 +02:00
June d7a9534eeb
public-reverse-proxy: use public-web-static as host for hackert. ccchh 2024-10-12 22:00:14 +02:00
Stefan Bethke a35fcc13cf Merge branch 'main' of git.hamburg.ccc.de:CCCHH/ansible-infra 2024-10-08 20:28:57 +02:00
Stefan Bethke 2fc54f5a83 Add missing headers to avoid CSRF errors 2024-10-08 20:28:56 +02:00
June 4cac84e7ec
prometheus: have different disk alerts for physical and virtual hosts 
Have more relaxed read/write alerts for physical hosts as they are
probably hypervisors and regular high read/writes are more common.
Also differentiate between physical and virtual hosts for IO alerts and
allow for hard disks to spend more time in IO.
 2024-10-05 17:22:45 +02:00
June f721dd9fea
prometheus: make opnsense-ccchh job not fail half the time 
The scrape seems to take around a second to complete and with the
configured timeout of 1s that failed half the time. Therefore use the
default, more relaxed scrape interval and timeout and have it be
reliable.
 2024-10-05 17:22:45 +02:00
Stefan Bethke 229daa72fc Redirect plain URL to hash for ticket deep links 2024-10-03 19:44:15 +02:00
June 0a05cad0a1
prometheus & alertmanager: add self-alerting 
Add self-alerting for Prometheus and Alertmanager using rules from
https://samber.github.io/awesome-prometheus-alerts/rules
 2024-10-02 04:13:37 +02:00
June 2e29b78f6a
prometheus: move Jitsis node exporter target to hosts job 2024-10-02 03:45:56 +02:00
June 30876f821c
prometheus, alertmanager: use Prometheus alerts with Alertmanager 
For now introduce node-exporter/hosts alert rules, which got taken from
https://samber.github.io/awesome-prometheus-alerts/rules
However with the labels removed from the description, since they don't
render correctly (at least in Telegram) and don't seem to provide much
value, as we render the labels in the notification anyway.

Also only have Telegram as the notification channel for now, as it was
the easiest to set up.
 2024-10-02 03:36:30 +02:00
June 803b19de0a
prometheus: add job for node exporter (for the NixOS VMs for now) 2024-10-01 20:09:42 +02:00
June 29d2d2926f
prometheus: don't duplicate scrape interval and timeout 2024-10-01 01:59:33 +02:00
June e81ae5165f
public-reverse-proxy: config for eh20 static website deploy 2024-09-28 05:04:01 +02:00
Stefan Bethke 5b043ff852 Remove deprecated property 2024-09-13 20:05:17 +02:00
Stefan Bethke 94a5db2215 Add pretalx 2024-08-18 09:20:28 +02:00
June 09cbe7340f
public-reverse-proxy: add config for design.hamburg.ccc.de 2024-08-11 00:59:47 +02:00
June fe752495ae
id: allow z9 ipv6 range to access admin interface 2024-08-05 23:32:58 +02:00
Stefan Bethke 94f65f8fe7 Add invite to Keycloak 2024-07-15 12:37:36 +02:00
June 1e25ebf1e9
Add reverse proxy config for woodpecker.hamburg.ccc.de 2024-06-22 02:11:14 +02:00
June fb4aabc772
Add reverse proxy config for hacker.tours and staging.hacker.tours 2024-06-17 22:16:49 +02:00
Stefan Bethke f67483fa46 Add lists.c3lingo.org 2024-06-16 16:39:19 +02:00
June ec400ed7d6
Use new IP for eh22-wiki host 2024-06-13 22:30:29 +02:00
June 182efd44c3
Add reverse proxy config entrys for EH22 Wiki 2024-05-17 20:43:46 +02:00
Stefan Bethke 553bc01df1 add ccchoir 2024-05-10 20:37:47 +02:00
Stefan Bethke 0f732833de Grafana-Config für PVE dazu 2024-02-26 22:29:02 +01:00
christian 65159c2bb8
Add reverse proxy config entrys for old easterhegg pages under hamburg.ccc.de 2024-02-24 22:13:27 +01:00
christian 9649574025
Add reverse proxy config entrys for old easterhegg pages 2024-02-20 23:07:01 +01:00
Stefan Bethke e2a0b9e74c grafana: add chaosknoten 2024-01-30 23:23:13 +01:00
Stefan Bethke 2431b455c2 Use prometheus-jitsi-meet-exporter 2024-01-29 21:13:22 +01:00
Stefan Bethke 3184154f7b Add jitsi video bridge stats 2024-01-29 20:31:12 +01:00
Stefan Bethke e0ebe2c720 Add jitsi as target 2024-01-28 07:52:46 +01:00
Stefan Bethke 880e77575a Sort list alphabetically 2024-01-26 19:33:46 +01:00
Stefan Bethke 79ac891c30 Add metrics for club OPNsense 2024-01-26 19:28:09 +01:00
Stefan Bethke 0307ad6c9f proxy access to metrics through nginx 2024-01-24 19:36:21 +01:00
Stefan Bethke a68edb81c4 Add Grafana/Prometheus config 2024-01-24 19:12:43 +01:00
Stefan Bethke ebcde5433c nginx mit redirect auf wiki 2024-01-23 22:36:15 +01:00
June 4363b3d040 Redirect properly from wikis old to new domain 
Make use of $request_uri redirect to the correct sub-page.
 2024-01-22 22:43:52 +01:00
June 81c8bfe16b Actually keep using $uri for DokuWiki stuff since otherwise it breaks 
To be investigated if the $uri issue also applies for try_files.
 2024-01-22 22:41:12 +01:00
June 6787c7c0d7 Use $request_uri instead of $uri, since $uri allows for injection 
Thanks NixOS for pointing that out! :3
Also see here for an explanation:
https://reversebrain.github.io/2021/03/29/The-story-of-Nginx-and-uri-variable/
 2024-01-22 22:37:10 +01:00