Update docker.io/pretalx/standalone Docker tag to v2025.2.3

Explain that you can use a default route
#133
2026-08-02 16:16:26 +00:00 · 2026-08-02 18:12:02 +02:00 · 2026-08-02 18:09:29 +02:00
2 changed files with 38 additions and 2 deletions
--- a/docs/guides/wiregueard-admin-vpn.md
+++ b/docs/guides/wiregueard-admin-vpn.md
@ -0,0 +1,36 @@
+---
+title: "Wiregard Admin VPN"
+summary: How to configure your Wireguard client to access the Z9 network
+---
+
+# Onboarding
+
+tbd. where to add your key
+
+# Local Client Configuration
+
+## Example Config
+
+```
+[Interface]
+PrivateKey = YOUR_PRIVATE_KEY
+Address = 172.31.202.YOUR_IP/32
+
+[Peer]
+PublicKey = fmlxjh3iOfpgrHQQpK3dyOD0BvDppGCUkFuMSroqQR4=
+AllowedIPs = 10.89.208.0/20, 2a07:c481:1::/48, 212.12.48.126/32, 2a00:14b0:42:100::/56, 2a00:14b0:4200:3000::/64
+Endpoint = rt-wan.ccchh.net:51820
+```
+
+## AllowedIDs
+
+The following prefixes should be tunneled to gain access to both CCCHH Z9 resources as well as Chaosknoten. It is also possible to run a default route through wireguard, but please do not abuse this as a general VPN for purposes other than admin tasks.
+
+| Prefix | Description |
+|--|--|
+| [10.89.208.0/20](https://netbox.hamburg.ccc.de/ipam/prefixes/114/prefixes/) | prefix for CCCHH Z9 local networks |
+| [2a07:c481:1::/48](https://netbox.hamburg.ccc.de/ipam/prefixes/50/) | prefix for CCCHH Z9 local networks |
+| [212.12.48.126/32](https://netbox.hamburg.ccc.de/ipam/ip-addresses/30/) | public IP of chaosknoten |
+| [2a00:14b0:4200:3000::126:1/128](https://netbox.hamburg.ccc.de/ipam/ip-addresses/255/) | public IP of chaosknoten |
+| [2a00:14b0:42:100::/56/128](https://netbox.hamburg.ccc.de/ipam/prefixes/46/) | new IPv6 for VMs on chaosknoten |
+| [2a00:14b0:4200:3000::/64](https://netbox.hamburg.ccc.de/ipam/prefixes/36/) | old IPv6 for VMs on chaosknoten |
--- a/resources/chaosknoten/pretalx/docker_compose/compose.yaml.j2
+++ b/resources/chaosknoten/pretalx/docker_compose/compose.yaml.j2
@ -33,7 +33,7 @@ services:
      - pretalx_net

  pretalx:
-    image: docker.io/pretalx/standalone:v2025.1.0
+    image: docker.io/pretalx/standalone:v2025.2.3
    entrypoint: gunicorn
    command:
      - "pretalx.wsgi"
@ -78,7 +78,7 @@ services:
      - pretalx_net

  celery:
-    image: docker.io/pretalx/standalone:v2025.1.0
+    image: docker.io/pretalx/standalone:v2025.2.3
    command:
      - taskworker
    restart: unless-stopped
Author	SHA1	Message	Date
Renovate	867c7ea18d	Update docker.io/pretalx/standalone Docker tag to v2025.2.3 Some checks failed / build (pull_request) Successful in 31s Details / Ansible Lint (push) Failing after 2m41s Details / Ansible Lint (pull_request) Failing after 2m30s Details	2026-08-02 16:16:26 +00:00
Stefan Bethke	9266123f42	Explain that you can use a default route Some checks failed / build (push) Successful in 28s Details / Ansible Lint (push) Failing after 2m17s Details #133	2026-08-02 18:12:02 +02:00
Stefan Bethke	24124e9f3d	Document wg setup Some checks failed / build (push) Successful in 29s Details / Ansible Lint (push) Failing after 2m24s Details First step for #133	2026-08-02 18:09:29 +02:00