CCCHH/ansible-infra
CCCHH/ansible-infra
4
2
Fork 1
Code Issues 4 Pull requests 2 Wiki Activity Actions
421 commits 5 branches 0 tags 6 MiB
Commit graph

75 commits

Author SHA1 Message Date
Stefan Bethke
e628dcbce2 Legacy-Yate mit eigenem Eintrag
Some checks failed
/ Ansible Lint (push) Has been cancelled
Details
2025-07-11 19:37:05 +02:00
Stefan Bethke
ef4b45925c Move lines over to yate
Some checks failed
/ Ansible Lint (push) Failing after 2m8s
Details 
Basic functionality should be working for incoming calls:
* Fux Intercom to 1337
* Fonial to the Hamburg number
* EPVPN

Still to do: clean up internal extensions and more extensive testing
 2025-07-06 19:07:27 +02:00
Stefan Bethke
2edb3443d6 Kick yate when config file changes 
closes #29
 2025-07-06 17:32:23 +02:00
Stefan Bethke
4e651bca25 Fix password fro FB account
Some checks failed
/ Ansible Lint (push) Failing after 1m48s
Details
2025-07-05 11:10:05 +02:00
Stefan Bethke
2a322f9c85 Add production secrets
Some checks failed
/ Ansible Lint (push) Failing after 2m5s
Details 
Also use the correct file name for the SOPS secrets
 2025-07-05 11:05:26 +02:00
Stefan Bethke
eefcbe0c43 Add yate
Some checks failed
/ Ansible Lint (push) Failing after 3m4s
Details
2025-07-04 20:51:14 +02:00
Stefan Bethke
7526d1c6a1 Add dooris (2.0)
Some checks failed
/ Ansible Lint (push) Failing after 1m50s
Details
2025-05-29 17:42:59 +02:00
June
6b80f5b52a
 		fix accidentally added personalized ansible_user by removing it
All checks were successful
/ Ansible Lint (pull_request) Successful in 1m58s
Details
/ Ansible Lint (push) Successful in 1m43s
Details
2025-02-23 23:51:58 +01:00
June
fd13e5341b
 		add thinkcccore0 to inventory and enable VM template gen. setup on it
Some checks failed
/ Ansible Lint (push) Has been cancelled
Details
2025-02-23 23:23:51 +01:00
June
61cd5053d0
 		flatten inventories making them simpler
All checks were successful
/ Ansible Lint (push) Successful in 1m41s
Details 
Remove the child groups as we weren't using their functionality anyway.
Also remove the debian_11/12 host groups as they're not in use.
 2025-02-16 00:36:10 +01:00
June
07dbbf055c
 		reorganize (config) files and templates into one "resources" dir 
This groups the files and templates for each host together and therefore
makes it easier to see all the (config) files for a host.

Also clean up incorrect, unused docker_compose config for mumble and
clean up unused engelsystem configs.
 2024-12-08 02:55:25 +01:00
c6ristian
433008d211
 		Cleanup old configurations we no longer use. 
We have a bunch of old hosts, host_vars and roles we no longer use.
There is no real value to keep them as they can just be fetched from the
git history, should they be needed again.
This make gettin a overview of the repository much simpler.
 2024-11-22 23:09:35 +01:00
c6ristian
c111c6950a
 		Remove zigbee2mqtt form z9/hosts.yaml 
we migrated the zigbee2mqtt in to our home assistant
 2024-07-31 20:01:23 +02:00
June
70a27ec79c
 		light: use new combined cert and make server reachable over v6 
The server being reachable over v6 is needed for the new method of
getting the cert directly via http challenge over v6.
 2024-07-30 00:14:09 +02:00
c6ristian
abcf25359e
 		Decommissioning mqtt in ansible 2024-06-12 21:43:46 +02:00
c6ristian
6d9f32ec92
 		Update zigbee2mqtt to latest release (1.37.1) 2024-05-10 23:09:48 +02:00
Stefan Bethke
d2538e9f5d Licht für Werkstatt dazu 2024-05-08 21:40:40 +02:00
Stefan Bethke
e96f25cc4d Add seconf foobazdmx for workshop 2024-02-26 23:07:36 +01:00
June
a38ae82550
 		Also add nginx reload cmd on new cert for Z9 VMs with certbot and nginx 2024-01-28 04:17:36 +01:00
julian
a223ebd7ff Remove mailserver-endpoint, because it doesn't seem to exist 2023-11-11 00:24:17 +01:00
julian
bb95923807 Add a role for deploying infrastructure authorized keys and use it 2023-11-11 00:23:20 +01:00
julian
06c4f2a1e3 Remove send-only-mailserver host, since it's not needed anymore 2023-11-09 19:18:41 +01:00
yuri
6a023f5433
 		Remove esphome host and role since it has been migrated to NixOS 2023-11-04 22:46:01 +01:00
julian
fdae96fbc1 Migrate to NixOS: Remove Z9 Audio host from this repo 2023-09-25 02:59:41 +02:00
julian
de97436706 Migrate to NixOS: Remove Z9 Public-Reverse-Proxy host from this repo 2023-09-25 02:48:56 +02:00
julian
112f1990b9 Introduce Uptime-Kuma 2023-08-12 01:47:55 +02:00
julian
d16da59fd7 Migrate Wiki from ThinkCCCluster to Chaosknoten 
Also do the redirect for DNS cache stuff like with aes.
 2023-08-11 01:59:34 +02:00
julian
373b219031 Migrate Engelsystem from ThinkCCCluster to Chaosknoten 2023-08-11 00:39:55 +02:00
julian
09e0c710af Migrate Keycloak from ThinkCCCluster onto Chaosknoten 
Co-authored-by: Max <max@mlem.cloud>
 2023-08-07 23:33:15 +02:00
julian
2825c5089f Use new secrets path for z9 vm-secrets 2023-08-04 13:53:22 +02:00
julian
3d238d9f63 Move z9-host-specific configs and templates into z9 subdirectories 2023-08-04 13:41:00 +02:00
julian
3b3c628492 Ensure NGINX deploy. on public-rev.-prox. hosts before certbot role runs 2023-08-03 04:15:03 +02:00
julian
48f9a2f901 Deploy certs for aes.ccchh.net using certbot role 
Also clean up NGINX configuration a bit.
 2023-08-02 23:40:36 +02:00
julian
542211ca25 Deploy certs for esphome.ccchh.net using certbot role 2023-08-02 23:27:40 +02:00
julian
6ac4bf8240 Deploy certs for wiki.ccchh.net using certbot role 
Also clean up NGINX configurations.
 2023-08-02 23:17:31 +02:00
julian
6651f4568d Deploy certs for keycloak-admin and id.ccchh.net using certbot role 2023-08-02 23:07:21 +02:00
julian
154a7dfa02 Deploy certs for zigbee2mqtt.ccchh.net using new certbot role 
Also add certbot role to deploy.yaml playbook and add accompanying
group.
 2023-08-02 22:53:37 +02:00
julian
a7565d5f35 Deploy SSH Server config to public-reverse-proxy and wiki hosts 2023-07-30 07:06:26 +02:00
julian
6994cfa123 Use correct ansible_host for mqtt host 2023-07-30 07:01:06 +02:00
julian
317c822ab5 Combine playbooks for indiviual hosts into one playbook 
This makes a full deployment of all hosts easier and parallelises
execution of roles, which are used for multiple hosts.
You can still easily deploy only a subset of hosts using the -l flag for
ansible-playbook.
 2023-07-30 06:57:30 +02:00
julian
042ff7c2ec Move keycloak and public-reverse-proxy to new debian_12 group 
Do this, since they are on Debian 12.
 2023-07-30 05:53:39 +02:00
jtbx
efc72f70f6 audiopi: Update role 2023-07-30 01:04:25 +02:00
julian
8a2c2769c8 Use new secrets path, bc of noc pass store merge into general store 2023-07-29 23:15:00 +02:00
julian
a12b38b284 Provide secrets for engelsystem VM from pass 2023-07-29 01:46:30 +02:00
julian
f695afa981 Provide network_key for zigbee2mqtt from pass 2023-07-29 01:28:44 +02:00
julian
51c1b667f4 Provide secrets for keycloak VM from pass 2023-07-29 00:59:01 +02:00
yuri
18990b3b5f
 		Bump zigbee2mqtt to 1.32.1 2023-07-27 18:26:47 +02:00
yuri
1570b0c04e
 		Bump esphome to 2023.7.0 2023-07-27 18:22:58 +02:00
jtbx
d5285a3fd2 deploy an engelsystem named AES 2023-07-09 01:57:55 +02:00
julian
0c62a8f3e0 Add role for deploying SSH config and also add mailserver-endpoint host 2023-06-06 23:37:42 +02:00