Commit graph

86 commits

Author SHA1 Message Date
5bb283d5e7
move roles, files and templates dirs out of playbook dir into root dir
All checks were successful
/ Ansible Lint (push) Successful in 1m38s
Because of how Ansible local relative search paths work, the global
"files" and "templates" directories need to be next to the playbooks.
However its not intuitive to look into the "playbooks" directory to find
the files and templates for a host.
Therefore move them out of the "playbooks" directory into the root
directory and add symlinks so everything still works.

Similarly for local roles, they also need to be next to the playbooks.
So for a nicer structure, move the "roles" directory out into the root
directory as well and add a symlink so everything still works.

Also see:
https://docs.ansible.com/ansible/latest/playbook_guide/playbook_pathing.html#resolving-local-relative-paths
https://docs.ansible.com/ansible/latest/playbook_guide/playbooks_reuse_roles.html#storing-and-finding-roles
2024-12-02 03:34:55 +01:00
e6d6d9eed0
report changed properly for "deactivate short moduli" task
Some checks failed
/ Ansible Lint (pull_request) Successful in 1m34s
/ Ansible Lint (push) Failing after 1m29s
This fixes the ansible-lint no-changed-when complaint and also allows to
notify the reboot handler.
2024-12-01 22:20:15 +01:00
e3a29c422a
convert two reboot tasks running on changed to handlers
Some checks failed
/ Ansible Lint (push) Failing after 1m37s
This fixes ansible-lint no-handler complaints.
2024-12-01 04:38:07 +01:00
cf5e6c4e1a
fix ansible-lint error by not comparing to literal false 2024-11-23 02:56:16 +01:00
4060dbbe21
fix all ansible-lint yaml errors (except for line-length) 2024-11-23 02:49:23 +01:00
433008d211
Cleanup old configurations we no longer use.
We have a bunch of old hosts, host_vars and roles we no longer use.
There is no real value to keep them as they can just be fetched from the
git history, should they be needed again.
This make gettin a overview of the repository much simpler.
2024-11-22 23:09:35 +01:00
261bd7d654
Add prometheus-node-exporter role and add it to most hosts 2024-11-03 21:27:51 +01:00
88b8d3b9ba
Update Nextcloud to version 29 2024-10-31 23:17:24 +01:00
d526e9fdfa Add cron job to prune old images 2024-10-31 11:27:12 +01:00
735fe0ca9b Add local port forwarding for debug sessions 2024-10-27 22:27:07 +01:00
b660d937dc Allow GPG keys as uploads 2024-10-18 12:40:24 +02:00
5b043ff852 Remove deprecated property 2024-09-13 20:05:17 +02:00
e9adeecc93 Avoid docker compose down 2024-08-11 21:21:51 +02:00
7a0935cecf Make sure anacron is installed 2024-08-11 21:08:57 +02:00
343a67e0e7 Add auto-update
* for all hosts, use debops.unattended_upgrades
* for docker compose, install a cron job pulling new images and restarting affected containers
2024-08-11 20:49:21 +02:00
6ad42219c0
Pull nextcloud image from our own image registry 2024-07-29 20:23:17 +02:00
11bbf187c6
Ensure NGINX repo and install before apt update, so that it works
Ensure NGINX repo and install on nginx_hosts before apt update, so that
the latest NGINX key is deployed and apt update won't fail on an invalid
signature on these hosts.
Also only run the gnupg install if gnupg isn't present in the nginx
repo_setup.yaml to make that work.
2024-06-18 01:14:00 +02:00
78837e45fe Use Forgejo instead of Gitlab 2024-05-10 19:18:54 +02:00
e96f25cc4d Add seconf foobazdmx for workshop 2024-02-26 23:07:36 +01:00
04d74b5c50
nginx: restart nginx on nginx.conf change
This also fixes the problem mentioned in the README.
2024-01-28 04:11:27 +01:00
0fb059e6bf
Add nginx reload command on new cert for all VMs with certbot and nginx 2024-01-28 04:01:06 +01:00
95a3901935
certbot: add possibility to specify commands to run on new certs
This makes it possible to e.g. reload nginx when new certificates are
present.
2024-01-28 03:29:39 +01:00
e53da90160 Enable standalone nginx/certbox config 2024-01-26 20:46:26 +01:00
5c4ee01e71 certbot für mumble dazu 2024-01-23 21:24:31 +01:00
bb95923807 Add a role for deploying infrastructure authorized keys and use it 2023-11-11 00:23:20 +01:00
7da6549727 Remove send_only_mailserver role, since its not needed anymore 2023-11-09 19:27:03 +01:00
b29eaba5f9 Remove hacky override for send-only-mailserver 2023-11-09 19:26:36 +01:00
6a023f5433
Remove esphome host and role since it has been migrated to NixOS 2023-11-04 22:46:01 +01:00
d99874935f comment out another instance of non-working code 2023-10-23 21:40:46 +02:00
16a5d35fb0 comment out non-working code 2023-10-23 21:40:03 +02:00
ce75ba0f70 Fix smtpd.conf. listen on 127.0.0.1 and 0.0.0.0 doesn't work 2023-09-25 20:12:13 +02:00
718b6906c5 Allow uploading of stl files to dokuwiki 2023-09-25 18:29:06 +02:00
7468b4d8f6 Fix OpenSMTPD annoyingness
Co-authored-by: yuri <yuri@nekover.se>
2023-09-25 03:03:14 +02:00
b295690ad5 Add playbook and accompanying role for doing maintenance 2023-09-25 02:57:30 +02:00
804becdd31 Wiki: Fix oauth, create role from playbook 2023-09-15 22:06:46 +02:00
62b4f93218 Introduce Nextcloud role and deploy Cloud on Chaosknoten
Co-authored-by: Max <max@mlem.cloud>
2023-08-25 20:50:46 +02:00
099bbe0e66 Nextcloud-Config weiter entwickeln 2023-08-05 18:59:58 +02:00
4d12d802b8 Add link to relevant wiki page to certbot role README 2023-08-03 05:07:36 +02:00
f0c5c2b265 Convert certbot role to use standalone instead of webroot
Do this to not have dependencies on an NGINX setup.
With those dependencies in place setting up the certificates initially
would be quite painful, since a half-configured NGINX would need to be
there for the challenge and then only after the certificates are
present, the full NGINX configuration could be deployed successfully.
2023-08-02 22:46:01 +02:00
5341f9dfba Add role for deploying certbot and setting up certificate using it 2023-08-02 20:47:22 +02:00
c6926b0a0f Remove incorrect check from deploy_ssh_server_config role 2023-07-30 05:49:46 +02:00
c2a183c013 Add missing "become: true" 2023-07-30 05:25:43 +02:00
2efdfcad6d Setup repo pin. to ensure nginx package gets installed from NGINX repos 2023-07-30 05:19:22 +02:00
38fc33ce70 Don't use apt-key anymore, since it's deprecated 2023-07-30 01:21:43 +02:00
efc72f70f6 audiopi: Update role 2023-07-30 01:04:25 +02:00
23deedf0d6 Update deploy_ssh_server_config role for Debian 12 support 2023-07-29 20:17:22 +02:00
69edb75112 Use correct variable for initial config in zigbee2mqtt role 2023-07-29 01:16:49 +02:00
2f7e3ae893 Build on docker compose up as well 2023-07-28 23:16:27 +02:00
18990b3b5f
Bump zigbee2mqtt to 1.32.1 2023-07-27 18:26:47 +02:00
1570b0c04e
Bump esphome to 2023.7.0 2023-07-27 18:22:58 +02:00