125 commits

Author	SHA1	Message	Date
bitwhisker	a6799bc905	unbound(role): move resolvd vars to task	2026-07-31 21:04:45 +02:00
bitwhisker	70bcc322e6	unbound(role): make unbound thread number configurable	2026-07-31 21:04:45 +02:00
bitwhisker	08c098766a	unbound(role): reformat config template and use all vcpus	2026-07-31 21:04:45 +02:00
bitwhisker	2bed99ef0f	unbound(role): remove tags inside role	2026-07-31 21:04:45 +02:00
bitwhisker	1eea864297	unbound(role): add FIXME note to unbound prometheus exporter install	2026-07-31 21:04:44 +02:00
bitwhisker	0ca1ad0760	unbound(role): use existing deploy_systemd_resolved_config role and some reordering	2026-07-31 21:04:44 +02:00
bitwhisker	c950dd7ba7	kea_dhcp(role): make stork-agent.env smaller and add link to documentation	2026-07-31 21:04:44 +02:00
bitwhisker	baa439f0b2	kea_dhcp(role): fix indentation in template	2026-07-31 21:04:44 +02:00
bitwhisker	d5aa0001cd	kea_dhcp(role): add README.md	2026-07-31 21:04:44 +02:00
bitwhisker	04c4bac819	kea_dhcp(role): some fixes and removing arch part ... - remove tags from tasks - remove archlinux part - use debian default package for kea	2026-07-31 21:04:44 +02:00
bitwhisker	a5d8b11517	rt1(z9 host) unbound(role) kea_dhcp(role): create unbound and kea_dhcp role for rt1 ... - create unbound role - create kea_dhcp role - configure unbound and keadhcp on rt1(z9 host)	2026-07-31 21:04:43 +02:00
lilly	de8daaf56c	add dooris role for setup of dooris interaction on the node itself	2026-07-29 14:16:04 +02:00
lilly	699a2bcfff	specify that docker_compose role may not be included twice ... Our docker compose role is configured via ansible variables in a way that overwrites each other if it is activated twice with different variable assignments (unless e.g. a role that just installs more packages). To prevent misuse of the role, the allow_duplicates key of the role meta is set to false. This should make ansible complain if the role is included twice for a single host.	2026-07-29 14:16:04 +02:00
chris	4218b59d3b	fix: alloy role the suites for deb repo must be stable	2026-07-23 22:08:58 +02:00
chris	900971ebe9	alloy(role): pull in alloy role that works from fux (#112) ... Reviewed-on: #112 Reviewed-by: June <june@noreply.git.hamburg.ccc.de>	2026-07-23 20:34:02 +02:00
June	a35326a065	transmission(role): running the handler should always report changed ... Make ansible-lint happy by specifying that.	2026-07-08 00:59:02 +02:00
Stefan Bethke	81b16a04cb	Explain why this is necessary	2026-07-05 10:40:29 +02:00
June	0acc56b238	docker(role): document gVisor issue with user-def. br. and provide help ... Document issue with containers on user-defined bridges and using the gVisor runsc runtime. Also provide a helper resolv.conf as a workaround.	2026-07-03 03:42:18 +02:00
June	2e50226b94	docker(role): provide option to set up gVisor (runsc runtime)	2026-07-03 03:42:18 +02:00
June	7d7cf455eb	forgejo_runner(role): create role for setting up Forgejo Runner install	2026-07-03 03:42:18 +02:00
Stefan Bethke	3e0fdb6074	Configure transmission	2026-06-28 17:02:05 +02:00
lilly	5973de0959	dns: validate zone files before apply in knot role	2026-06-10 16:17:58 +02:00
lilly	8ca5d82d39	knot: fix templating inconsistency in netplan config	2026-06-06 15:06:11 +02:00
lilly	3a09c107b9	knot: use explicit ansible_facts reference	2026-06-06 14:59:16 +02:00
June	4574dbf4ba	secrets(role): introduce secrets role for storing secrets ... Allows storage of secrets to then be referenced in other places. The motivation was storing WireGuard secrets for systemd-networkd.	2026-05-23 22:40:17 +02:00
lilly	3541c68357	disable dnssec for catalog zones on auth-dns ... Catalog zones are not real zones in the DNS hierarchy and don't have a parent zone. Therefore they will never have a valid DNSSEC delegation so we should skip signing those zones.	2026-05-19 11:01:52 +02:00
June	73e77bde70	tag plays in playbooks (instead of tasks in roles)	2026-05-19 00:24:10 +02:00
June	6b19f69135	renovate(role): add cleanup service and timer for renovate volume ... With time the volume seems to just keeps growing with cache data, so clean it up once a day.	2026-05-19 00:23:26 +02:00
jtbx	83e6f76464	deploy_systemd_journal_config(role): Disable ForwardToSyslog ... We don't want hour journalctl logs mirrored to /var/log/syslog	2026-05-15 19:25:44 +02:00
lilly	637dc6b25a	consider ansible-pull jobs failed after 30 minutes	2026-05-13 16:53:57 +02:00
lilly	bc4df9a3f4	fix ansible-lint warnings of knot role	2026-05-07 23:45:48 +02:00
lilly	50beedbc62	configure metric scraping from knot on auth-dns	2026-05-06 15:51:38 +02:00
lilly	5283d2da95	improve knot roles reloading behavior ... With this change, the nameserver is not restarted on configuration updates but only reloaded instead.	2026-05-06 14:33:04 +02:00
June	3aa146d723	nftables(role): reload instead of restart ... This should make the role more robust against misconfigurations.	2026-05-06 14:19:38 +02:00
lilly	fa021fb737	migrate dns zone ccchh.net. to new auth-dns server	2026-05-06 12:12:54 +02:00
lilly	416ca85b11	rename auth_dns -> knot role	2026-05-06 11:52:33 +02:00
lilly	8c1553c707	fix role name auth-dns -> auth_dns	2026-05-06 11:47:10 +02:00
lilly	6fa2d65db2	enable auth-dns role to actually configure useful zones	2026-05-06 11:47:10 +02:00
lilly	fa94d59df6	add barebones knot config ... This configuration does not yet do much but it provisions a knot server that runs.	2026-05-06 11:47:10 +02:00
lilly	d880eb8677	fix systemd-resolved not being installed ... closes #88	2026-05-03 16:50:45 +02:00
lilly	c304a1c82a	add README.md to deploy_systemd_resolved_config role	2026-05-02 01:01:23 +02:00
lilly	58ced1a85e	add capability to disable systemd-resolved to base_config role	2026-05-01 00:16:43 +02:00
lilly	0330c6b6ca	reduce ansible grafana log verbosity by using loop_control labels	2026-04-24 15:32:43 +02:00
June	8bf6dfbefb	certbot(role): support DNS-01 certs using acme-dns ... Introduce new configuration structure called certbot__certs, which allows for different challenge types per cert with the first challenge type supported being dns-01-acme-dns.	2026-03-31 16:48:00 +02:00
June	2b5f261cd3	docker(role): move automatic cleanup of unused Docker data here ... Move the automatic cleanup of unused Docker data to the docker role from the docker_compose role, so that hosts, which only use Docker (like renovate) also have an automatic cleanup set up. Also use a systemd timer instead of cron.	2026-03-06 21:09:47 +01:00
June	fee18bd349	certbot(role): allow empty list of certificate domains ... Also explicitly document that they are used with the HTTP-01 challenge. This is in preparation for adding a new option with DNS-01 challenge support.	2026-03-05 14:37:17 +01:00
June	3820a97584	certbot(role): move arguments documentation into README ... Do this to match how it's done in newer roles.	2026-03-05 14:37:17 +01:00
June	711f2f1c64	certbot(role): don't use certbot__version_spec anymore as its not used	2026-03-01 20:08:49 +01:00
Stefan Bethke	08101ccef1	Fix permission	2026-02-22 18:37:01 +01:00
Stefan Bethke	d26fbf2577	Allow syncing an arbitrary set of files to the target	2026-02-22 18:21:47 +01:00