218 commits

Author	SHA1	Message	Date
Renovate	ac342ec044	Update docker.io/library/postgres Docker tag to v18	2026-01-28 14:45:58 +00:00
Stefan Bethke	06ae220857	Remove spaceapiccc.hamburg.ccc.de	2026-01-27 22:35:28 +01:00
Stefan Bethke	3bba747dab	Configure seperate server for spaceapi.ccc.de	2026-01-27 16:30:00 +01:00
Stefan Bethke	ad783e4a15	now in production	2026-01-27 16:21:18 +01:00
Stefan Bethke	3abc375984	Re-encrypt for spaceapiccc	2026-01-27 09:46:47 +01:00
Stefan Bethke	0f3cd2c70a	amcedns to enable Let's Encrypt DNS-01 challenges	2026-01-25 22:41:42 +01:00
chris	6a92aa68c1	light: fix tls cert expiring and not renewing	2026-01-25 22:36:30 +01:00
chris	5693989c38	add alloy to the z9 hosts and some cleanup	2026-01-25 21:44:49 +01:00
chris	c7d51af5b4	rollout Alloy to replace prometheus_node_exporter ... With the new network we need to deploy a push based solution in order to get metrics into prometheus	2026-01-25 21:44:49 +01:00
June	a5d291cea8	spaceapiccc(host): setup ansible-pull	2026-01-25 20:58:57 +01:00
Stefan Bethke	cee1fe970a	Add spaceapiccc as a replacement for erfafoo	2026-01-25 14:03:54 +01:00
fi	28f80a85f3	status(host): Switch to nekover.se user for personal token ... As access token now apparently expire with matrix authentication services, use a nekover.se user where we can get a long-lived personal token.	2026-01-18 19:49:59 +01:00
June	d514688574	systemd_networkd(role),router(host): support global config to fix forw. ... With the router upgrade to Debian 13 the systemd version got upgraded as well breaking the current configuration for IP forwarding. Add a variable for global systemd-networkd configuration and use that to enable IPv4 and IPv6 forwarding on the router. The systemd_networkd role could be a bit nicer, not deploying/deleting the global configuration, if the variable is empty and reloading/restarting systemd-networkd at appropriate times. But as is works for now.	2026-01-18 19:21:33 +01:00
June	d7b463ecb9	status(host): fix token not working by using a new one	2026-01-18 04:54:31 +01:00
June	fe52127e82	status(host): configure external status page and uptime monitoring host	2026-01-18 01:26:52 +01:00
June	51bbdd42a2	dooris(host): make certbot work	2026-01-13 16:55:22 +01:00
Renovate	c638790819	Update all stable non-major dependencies	2026-01-12 02:30:47 +00:00
June	70461c98ba	first run ansible_pull for router, then for all other hosts ... Do this to avoid a restarting router affecting playbook runs on other hosts.	2026-01-12 03:29:06 +01:00
June	255327952e	ntfy(host): move to new network and hostname	2026-01-11 03:57:11 +01:00
June	1971598e71	pretalx(host): move to new network and hostname	2026-01-11 03:23:18 +01:00
June	372f264bcb	ccchoir(host): move to new network and hostname	2026-01-11 03:23:14 +01:00
June	2fbb37db18	grafana(host): move to new network and hostname	2026-01-11 03:23:01 +01:00
June	a41b07949c	zammad(host): move to new network and hostname	2026-01-11 00:22:37 +01:00
June	ff550cbd8a	tickets(host): move to new network and hostname	2026-01-11 00:00:18 +01:00
June	49e3ecb986	netbox(host): move to new network and hostname	2026-01-09 03:05:29 +01:00
June	a622f21b54	renovate(host): move to new network and hostname	2026-01-07 18:46:27 +01:00
June	40b67c6bc3	sunders(host): move to new network and hostname	2026-01-07 18:46:16 +01:00
June	944c8cde82	onlyoffice(host): move to new network and hostname	2025-12-17 03:34:39 +01:00
June	366456eff8	keycloak(host): move to new network and hostname ... Also just listen on port 8443 for keycloak-admin proxy protocol.	2025-12-16 21:50:40 +01:00
June	1ca71a053e	pad(host): move to new network and hostname	2025-12-16 21:12:21 +01:00
June	b9add5bda3	cloud(host): set correct new proxy protocol reverse proxy ip	2025-12-16 20:59:15 +01:00
June	570600fce3	eh22-wiki(host): move to new network and hostname	2025-12-16 20:58:05 +01:00
June	5a476f2103	cloud(host): move to new network and hostname	2025-12-16 20:47:44 +01:00
June	8b94a49f5e	wiki(host): move to new network and internal hostname	2025-12-16 19:23:33 +01:00
June	183b91b9f2	router(host): add nftables config for basic router functionality	2025-12-13 22:07:38 +01:00
June	d0618e3820	nftables(role): introduce role for deploying nftables	2025-12-13 22:07:37 +01:00
June	a9e394da06	router(host): add systemd-networkd-based network config	2025-12-13 22:07:37 +01:00
June	d6ba70523c	systemd_networkd(role): introd. role for deploy. systemd-networkd config	2025-12-13 22:07:35 +01:00
jtbx	766aa125c4	router(host): introduce router	2025-12-13 22:07:07 +01:00
c6ristian	c39cb0e390	we dont need to set a specific alloy version	2025-12-06 22:11:53 +01:00
c6ristian	df3710f019	grafana: set alloy to version v1.11.3 ... 1.12.0 is buggy	2025-12-02 22:55:29 +01:00
Renovate	0eaaf9227c	Update all stable non-major dependencies	2025-11-19 13:30:39 +00:00
June	cffe5c2b16	dooris: use hostname instead of IP	2025-11-06 18:25:29 +01:00
June	ae60d6fea6	docker_compose(role): use community.docker.docker_compose_v2 module ... Use the community.docker.docker_compose_v2 module as it supports proper changed handling out of the box, making the roles code more straightforward and work. Also just do a docker compose restart instead of having the custom docker compose reload script. https://docs.ansible.com/ansible/latest/collections/community/docker/docker_compose_v2_module.html	2025-11-02 23:13:20 +01:00
June	dc6c7cbfb7	sunders(host): deploy sunders using docker compose ... https://git.hamburg.ccc.de/CCCHH/sunders	2025-11-01 17:53:08 +01:00
Renovate	ea5b4b8d69	Update dependency netbox to v4.4.5	2025-10-30 04:17:13 +00:00
June	f7918e7b6f	add renovate comment for custom regex matcher to inventory version vars	2025-10-30 05:01:02 +01:00
June	747e5b2d4c	zammad(host): change to .env configuration ... Align the compose.yaml to upstreams v11.2.0 version. This is a first step to hopefully then just use the upstreams version directly and not vendor it.	2025-10-24 22:15:48 +02:00
June	94e1920388	setup ansible-pull for all Chaosknoten hosts ... Additionally setup ansible-pull for: ccchoir, tickets, keycloak, lists, mumble, pad, public-reverse-proxy, zammad, ntfy	2025-10-20 21:25:56 +02:00
c6ristian	f3902b43b1	update keycloak and nextcloud	2025-10-20 21:11:28 +02:00