Update docker.io/library/mariadb Docker tag to v12

public-web-static got moved to a new network and has a new hostname as
well as new addresses now, so use that.

.sops.yaml

@@ -37,6 +37,7 @@ keys:
         - &host_spaceapiccc_ansible_pull_age_key age1mdtnk78aeqnwqadjqje5pfha04wu92d3ecchyqajjmy434kwq98qksq2wa
         - &host_acmedns_ansible_pull_age_key age16pxqxdj25xz6w200sf8duc62vyk0xkhzc7y63nyhg29sm077vp8qy4sywv
         - &host_mjolnir_ansible_pull_age_key age1hv7m3xypesdfm0dfzwgctde8v307g9xaunnfu2687y0lagcs5q7s3eg0kj
+        - &host_diday_staging_runner_ansible_pull_age_key age1522f3qzddm82w63j7ajdkr0khvced6ht7tzp3grvp0j3hewtvesssr5kpf
     external:
       age: &host_external_age_keys
         - &host_status_ansible_pull_age_key age1p546j6whqsyfkjuf674lawrnk2ex653fuvwhcwt46gkrspkq59sqzm5y87
@@ -195,6 +196,12 @@ creation_rules:
           *admin_gpg_keys
         age:
           - *host_mjolnir_ansible_pull_age_key
+  - path_regex: "inventories/chaosknoten/host_vars/diday-staging-runner\\.sops\\..+"
+    key_groups:
+      - pgp:
+          *admin_gpg_keys
+        age:
+          - *host_diday_staging_runner_ansible_pull_age_key
   # external hosts
   - path_regex: "inventories/external/host_vars/status\\.sops\\..+"
     key_groups:

inventories/chaosknoten/host_vars/diday-staging-runner.sops.yaml

@@ -0,0 +1,207 @@
+ansible_pull__age_private_key: ENC[AES256_GCM,data:WU0i+4Il1sTq7IR9ryZJ5HnLJWndNJXsKTGnrD3uJPl6xK7ndV6FM1VtII8zjj5MYGcWpj4K7F6tzeKYzUtK9Wi82idcOFMIhO8=,iv:FS33ZQPjFlGnvKbbNX9qJ16K50LZ3SFyIPWxI5C+nD4=,tag:lHATJlw8yBWSsWXJHeQLYg==,type:str]
+sops:
+  age:
+    - recipient: age1522f3qzddm82w63j7ajdkr0khvced6ht7tzp3grvp0j3hewtvesssr5kpf
+      enc: |
+        -----BEGIN AGE ENCRYPTED FILE-----
+        YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArZWpJcXpIalRnUm1BWGt4
+        UGNNNTlBUG8zVElOTTFyK3ArR0NZb3BWeHpRClQ5TDRMNFZTb0lrOXA3U2JpSm1x
+        dDFSaDQvbUFzcGFveGJ0eGVnSHEwZVUKLS0tIFQ3U1V3U1FRMlJ0OWYzZjAyWXhw
+        d2xYV2NyY0hCZTR6QXhLbDNOUTBrcFUKQ0T37Ln3T+iAwY2S0uOciCbwcN42gwU+
+        94AYml1rtoFOljmOu7UBli3I5ay/T15hgXf2hCARzYx4d3+9EJIY2Q==
+        -----END AGE ENCRYPTED FILE-----
+  lastmodified: "2026-04-27T20:44:59Z"
+  mac: ENC[AES256_GCM,data:4xJHdhlmAysx3Cx6BXrxAiLdtCjN78n+9mwnvUFj+UQofogpFBjQ95OfbgvtMG77SWXm2QJCv+EuPUF9wVaTam3zQQRa5KLqaPL5sXlINxGMUWs4xsmSa01O4b5Hr/NqnmSb8HyQD2zLIRNpEy8Kd3OiGHjzzcIrtHVb6g4Oozk=,iv:Y4gMVGvYp1kmHFeMceXMwrvZ8Dmb3Uwc91k2xIqovJg=,tag:lLWFn3YWQTw87vGD5EJHng==,type:str]
+  pgp:
+    - created_at: "2026-04-27T20:44:48Z"
+      enc: |-
+        -----BEGIN PGP MESSAGE-----
+
+        hQIMAxK/JaB2/SdtAQ//ek1WyXU4a9gYTW8RlzrPABtvkx3kz6y9Av3Uje0/Okul
+        UJGzYRWXsHm0rBHIG/VRnDBa9NqKXTh1cOnalS+dkPFyQMLXxkGHxxykzzeYQ2/W
+        P9/ntoA+m9Wt0khCgQ7sP88+9rBYwW+n3cCdogQF3XC5Ybj6zI25gBQG/EGvOq7r
+        MSQax2vsrPjTT32d1v/OVAWQjXaJR9lRwqVa/0i/tWtiWae2AsfYDoyLcaco8Mc9
+        XssVuQ7outtKJi/AFN2x3pd9sWyndeOBpyBSF1UosgnGKg2YtvGmVf5Dv0vxxSgH
+        SZh6hU2ZAW0dHjj6wkkKoefK6Nd326EC2fcoN+PttvZOP6MVCu4BNP59Jp+ajSkZ
+        QZfYe0E6HtQVqvc6B7PNL+iOvmW5xMXffOrWVGnKQvPceO9WER6H4MqpH9cyB/tM
+        kgTh4/ldJBwa4nzW7yC1t38kANB5YOTJ2SUD6JAP4z+L6aXyr7SI+zRIOzyad6xY
+        vg+m5Hgrcchghk0cK+nB45VUUjUtg+h2T3BoTQtGSrbDMfvPQHMhv7i7SkYXIjOL
+        8gL8v6eSOotg//e9NKRCRC8YB0Kus2D0oY0J9i0I/XyA7LhZQGbYgVp8GyupReKo
+        vzCQPKBL7q/EriA8EJRJy5LSVuXybEtwyaqkp1oSI/OnnPwC87R3LrLWn2/UUg/S
+        XgE2iZF6h1Jg0NE36Lvmv5fImBT2bjAklu0FtE5tttaP6HvmdrDbk1156/XjmDkn
+        7WierL/Ot8it/GGLGPd3HL2BaFMHNaJESo92KaKia2yEiXa4gYcAJJjjYX/3yco=
+        =0e2Z
+        -----END PGP MESSAGE-----
+      fp: EF643F59E008414882232C78FFA8331EEB7D6B70
+    - created_at: "2026-04-27T20:44:48Z"
+      enc: |-
+        -----BEGIN PGP MESSAGE-----
+
+        hQEMA1QflAioE8i3AQf9Gkaoik3xxrzzwpAa8DDpsGB7q2B+oomp7tNGhmrDlR0U
+        aVn0xGFXWV0G8B9CZfA6RDcNmyED2yKHPcCLNkv0LpezJq3psVW3ltXgYO4ka2nN
+        AE2sN6t7F1KeF/S5VoxMrTv7ij6NEU5aQScwxyDJbaiJdSw56PAG6WkHW2eVKx87
+        5gQ9iCY05Lhe9K5NhzK4K1Ck4Z8flH1NRrJlQ/hDA8qWgPwxWG+B4Dgu1OZVltE+
+        Ex2LbS98F94jJ00lRrSCAORknbcyns81mSbj/Oi4W2as5f/vcyJzqk/hqF4f3yLn
+        J7e+hJk0aqn2Bs8m5tQ5etRJWLbbhwbEOBCE3cYCodJeAVTv+2tuHz4dpE5trmsV
+        wHubUFp876yhlaTElW8sIP7qMkVa8AJte3IycytUOgutKDbA8m1N4zeFvFCXrlyM
+        seYGY3dbRgwJQVAAFqI8LHjOQWX0Vj/ooc2tG2W+Jg==
+        =0FSI
+        -----END PGP MESSAGE-----
+      fp: 21C9579E6503CA815A68ABD8541F9408A813C8B7
+    - created_at: "2026-04-27T20:44:48Z"
+      enc: |-
+        -----BEGIN PGP MESSAGE-----
+
+        hQIMAz5uSgHG2iMJAQ//VBk18HUhwtbqgqd7Xn9x35Gy8OPzWcFIS83jYCK87LZW
+        d3GS6rMsk2SxnEd7M5ho0iIm6bi0NBPBLkmpvGgM+wzXTv7V5RMEGLs5HPHOC4Pg
+        kVJmDTF2eZxKOwWNuSdTgSV/p5+DEEJyXFhE/vdT/0RfUP7DOwWcoxgfJIE7omMh
+        gElwOoe73Z+yFDavyD5fOJ2A8JCHOuXkELVT7BBfK4a/rld0G4+74jTUPHPbBV9Z
+        8bHBtxUBmPpa9Ob5DeagApTLp2MVjVESURKcG4TF4RgKSprvy7LTPgNLP8RVg2PO
+        7c+vMKSQ4jjYNCBM/C4voO6gugvFkzO0JQ5ZcukVJZlHlvSfHto4eR4nUfyBUO44
+        hVytdSSgYcXfrs7pFz1OFAHs1miQ72lEpqS1qNecJS8omGZI9DRjeaNDLRUBC4s+
+        aY4YtmzzFUkxxvA2MBISwHx6Jt6PA3Jk2T8MXRunY+zWfEQZpWG3zyVeNKUskVcy
+        yJS4i4o0+PKEt7KLMLMO3GhZGpLXfn+F8VW0RSQP/dv4SM0WCShJ8Vvc5eVujUUx
+        K7EJbfvCwYu4zukc+O5MilyfHh2AJXS80tc7w6OBYvcyPa58PJldereWFdPaj+Bh
+        scjPYYp2O+CFaFTi7b+HMqynM/wpJOFcJE6ux8qh0xJvaV7/LbGGXtQaTCyWrXHS
+        XgGwbgV31Lowo+M3OCvBR+Zh32i89t4bCF+3NYwyPs2+gI4dLAIPSu1g/678dxuK
+        PkUk3OLBJ3vMhKxs35L+VHtwZ5zCr803+Of6EH/mVrfIxDJWTYonUfqOhHybpv0=
+        =Fm3R
+        -----END PGP MESSAGE-----
+      fp: 18DFCE01456DAB52EA38A6584EDC64F35FA1D6A5
+    - created_at: "2026-04-27T20:44:48Z"
+      enc: |-
+        -----BEGIN PGP MESSAGE-----
+
+        hF4DsZXvxFXTXoQSAQdAZgm5y3mgVQqza0IFmG8Cm4/HzCQFxObqWKx5O8PANC8w
+        cBtR8dbeFpZocdecDmxRbB9s6L/GRW15JBG/13Dbj2MELlHJp//nJM1NEHYmg5XE
+        0l4BV/rvRrZgZL+r/VXSCn9uXUQ++3eV0O870jV2E5bHViChYuELcXqjSPYW5y2e
+        aUZ1MaafHCfEfhs6tsWjdb+kJrzT6LtxF2yNLjVrCoRSGpqQ9pLKKElgSxPrLzaZ
+        =zulj
+        -----END PGP MESSAGE-----
+      fp: 9633412309CCB83BFA39BA5F2FEF746201D7FCFE
+    - created_at: "2026-04-27T20:44:48Z"
+      enc: |-
+        -----BEGIN PGP MESSAGE-----
+
+        hF4DerEtaFuTeewSAQdAfURge64gkGuHQeTUNyF3hZOpX4ZCFJkwbcOr5dXnzUAw
+        UhXmPmGJY35RdnYtTLGy5sIUd1XQYN9KBhb9d5/3njkZbmyYJxWhKJQlR6n2BNIM
+        0l4BfqXb9esR2HIgUsq8zpWS85TTwMNJZv3XbMJ0utlyHJNJv7GBiZnqLWQvoGkx
+        EMEtOWxKPIfBVAt5rYEEi4qPi6JqKOhwne5F8AnJcF6l2odJjvFZppDCmawDglBD
+        =LR7X
+        -----END PGP MESSAGE-----
+      fp: 057870A2C72CD82566A3EC983695F4FCBCAE4912
+    - created_at: "2026-04-27T20:44:48Z"
+      enc: |-
+        -----BEGIN PGP MESSAGE-----
+
+        hQIMAxjNhCKPP69fAQ//aD6sVlBVm5fNPGc25r3c1kXbOg+fVfK1hXGPZ3LLqk+U
+        aoKZbskb8lv902Q7klb4MShMRzCXBpC1Y05JrOPi0h9alII/q4TfbDsxrgrsWHBC
+        zqRaxRWz4GuQeJk/w0ScK5j+1RVYEk+7bJQLtOHUXN+QZbZI5l3cOlOMixMpnIoU
+        e11GMM2aordqlZJ427RPST1YRo2oli14RMGgJiwBCWJBHfKIqcCCP1TrjQI95kfc
+        KR7eleyqxJ656YVBJUYxocUoyKvDaEpk5RyI+ajqnF+tiWI5+zc9JJTFGhWqp3BN
+        7SdsMIeoFpk0OSoAGB6chEKFMOte0fvQA/XdIHMeigv3/mTsBM1zKavWPqEE7wsQ
+        mnhyYgcAK85G+Pd3WX7DvhyXGEo7q6xXVfEFt0OfZAAhhVA+Iq9FjOF6PCDKcsAc
+        tKbmL0RChavKmnOuDdYBRq8NIokH76FXVs+lcUlThF9cEa3xvtsx+/qRIg/TMHLn
+        IpNpowdzahs11qDRxr3uc0bDZWaQ09q7VwNQTyrJRYjJ08h3pJBLZQ6ic3A4BLE4
+        ww/3UbYQGlemu5ZOxAlWx2Lou1lmO/8+ubnGaXgiS/nbujVqPs+eDdWVbRSEc3/d
+        tBX6UEdbvbK5LO0papMGWE9VL1oUuXwyGSw0mBAWmOtqScnl3ytwS9UjE2NbWyHS
+        XgGIaBbCEAZEBa9ER1HnjX6P37luC/BPF5NOL/492DbntUzEGkHTJN7z+A3hzS15
+        I8gqJpNOeZYb0HSVQQGHhrTnMXDoCuplBh1HJF4T98cmcCTagQx7wBJKd6gK/Ao=
+        =nWUM
+        -----END PGP MESSAGE-----
+      fp: F38C9D4228FC6F674E322D9C3326D914EB9B8F55
+    - created_at: "2026-04-27T20:44:48Z"
+      enc: |-
+        -----BEGIN PGP MESSAGE-----
+
+        hQIMA1Hthzn+T1OoAQ//V1mzCQrg9fi4d1TqQtQyRUkvWNaGgO5voi9vjoLDBEsu
+        FNoT5jmkuexsjkNhP+kAnt4RvnQOUBlV2uo7hc/C9iRbQp0px5IkYA0PscskiAze
+        a+2fYJw+Bz+i+kvvqL1h0MYzdWDKpOJR61oZmpE1db/iiNL8rqIQoqW8TftmV8IT
+        cvYlKTLjJsvs0BUcZFRYWXKfYh9A0PmDnmGP7t2oQq86W9xeB7TZRPEGAmxm4UAD
+        D6hSKMWVsFdUVaITQhvlfwhJgxwXj39nnGfYP5kGC9DoLiNeOcSK0ICN53LiTC1G
+        WHcVV5KDqpkZhPPbzDHT9JlYeUeqW2z7fEw/CwCftTz31hZK3q2qh1OMaXvtLi1/
+        FQir8rjqwlW+s4PLRNOmWtxRvdN1RkWEQzvf1Q9tgRNNyftmfxN8UTXxgjJJYbW+
+        AJxi0gOwYP1e4XBk70fo2QFDp+pYZdZu1xthngLax6mwOLhDXLH5Se8oVM0J78tk
+        BgtprnZDKugdwQBGmpRRR2TqrPa9P9iSGkCvz3vcedG8zo5dbabc7katwLpMLxmF
+        S+Mcj+AMg3lgamryl/X2drghwWdZughyuKiawyPEtJqT+twGB8e8Y9Et0kASw1Tw
+        9O+iwBaEuOEle5LZ343rBDEy8enuC5pwgNEQU4jQ6i+3T12h1O1+6KxdoIbYIBvS
+        XgGfj3kJJ8K2wd75K3gBB7Ft37eQhb3Otlkpd5SRu9nnIOOg4uH6KnaLvEVP4AJM
+        qBUnvMW1E6E2lyOFqjNCGuThMVJGAoZEMgdgXkfbUZepLiAVpxBOboti9wPSvNM=
+        =ESJ9
+        -----END PGP MESSAGE-----
+      fp: 5DA93D5C9D7320E1BD3522C79C78172B3551C9FD
+    - created_at: "2026-04-27T20:44:48Z"
+      enc: |-
+        -----BEGIN PGP MESSAGE-----
+
+        hQIMA46L6MuPqfJqARAAuTY4vZqy8PnegR6fDS+fbnd06DGw6rXXHy+DXHV0UzBG
+        fDTVHufWIqtVMvc5pVy81+VUVMl/5ru29Yt+mWdL40Han8lcNPlRHwkeaZ3Pj3Ah
+        OesiSLU6NaKrgTKs8XL06cfqpXz1LH/lw1ln/1xVYJ3rlni2N9L8UF/DtIahEj4j
+        cg4SlhRCDsvlYw7gM7jf77GRCWD2l+0VdyDdjalDSrkhis5jvMLgPkeMF92D0aUK
+        7JnzKkY2iKG7at4hnbXIpeJPA5ZGi7OB23RK4U5GftiOcX0KYbEzW1CRZNDL0aXV
+        Y1vPI1W3DrlYmN000YKFMj9waJST/snYej2vyazswjNtTcLKMr2XFUeTvwcC1QQj
+        WAYtW/nUphrynBeHgcTR7KRQnBjxYmsrf0YWW5/Gaj1nuFj8I2fQ/7EGt0+ODmqk
+        Sr/kKJIPZrFMA13v5Wbq0Tf9PtM3+5vGqYxZ+6szttnsArRRilDyIsG0GNVTx8vU
+        dn9nuxA3vYrefymljSkmvkklqvX1eAixU/lR6S/IwLZ5aSc+BjRxyP97UpLDtxn1
+        KM7BWrvtyZr3ay63UJ+to8yNGkbH8EUVYQ1eZl55RIxb7om3tcOJIJOwYVmdTz0h
+        7XzLPKYU/WBmoITXZyxJPsqFh6Tr06ANLZHzg0swqeYQE6WcDwFvAJxKbnddWgnS
+        XgG0f9RYBLnU20GCipX/RGopnXc+XDVi8dm4nbtUwJf9ahkJfG3EUVeA8lkgaLtF
+        Okzs7XjvJRDH9Pd/rZkW7irvrnJAit6jhahvwr7vrAdOzB7MFWjimrUQFuHSb2I=
+        =HZS+
+        -----END PGP MESSAGE-----
+      fp: 8996B62CBD159DCADD3B6DC08BB33A8ABCF7BC4A
+    - created_at: "2026-04-27T20:44:48Z"
+      enc: |-
+        -----BEGIN PGP MESSAGE-----
+
+        hF4DQrf1tCqiJxoSAQdA3/3RLLncuT93zrR/S6J1rCnw8tZrPsRhENUPJoYFIAkw
+        N5NOUtN8o8H/U67q88f98wPaDo7RjS1MoYAadFJVWymNfcSkXDrmK540bjMtBjyO
+        0l4B85WzU7dZIZFuLInQtHLAVi+NJdjYWgmSB8BdRs2NAcAsWcNfpexJGNdLXbJW
+        iU8dEBQSj8440pccGV39w2Ru+4segxTwNa+VpLyH35cZFee8m4A6QZvUqSYhJMH8
+        =J8aO
+        -----END PGP MESSAGE-----
+      fp: B71138A6A8964A3C3B8899857B4F70C356765BAB
+    - created_at: "2026-04-27T20:44:48Z"
+      enc: |-
+        -----BEGIN PGP MESSAGE-----
+
+        hF4DzAGzViGx4qcSAQdAPa0O/k8VoHp4Osf+7gxp6TXz+K8pC9IzAjSMuax09lcw
+        m31keLTbi9i/wwt96AHBXaWXUljiRu2lkWGPkYYAt2mEhd45l8zvSV+T/xD4Jisa
+        0lgBcuWox1JgdJU1nBdXokNu7fHeeIlmMod1UxJcn53tVDofHcsWRlU5J/wcqLf2
+        ctwqLXMhNcFLmuD9Km1gQ5wkEmS5LgBB2TxGDXbuGvRYngi7/Qy0RC3r
+        =ok2P
+        -----END PGP MESSAGE-----
+      fp: D2E9C0807BF681F5E164DAFC5EE1B61CD90954CD
+    - created_at: "2026-04-27T20:44:48Z"
+      enc: |-
+        -----BEGIN PGP MESSAGE-----
+
+        hQIMA2pVdGTIrZI+AQ//UwB8+r5JouKdouSud/ScsgEOZ7HqRWNymYmjDuwiANcp
+        wjU5RGwIUEQ7cit7zY52N2FBZOovoolujtmY+kXcrWu1jaaB8ddswMpTYXHpRINQ
+        q1YW1mtM1QITXaJ39ZxeAuqkCtk92LxbeIPQSnkXyy6vC8D8qI+oUBeskpxMSxNu
+        MnymU4/S2wZPRBwiABFiWk3uC36qVR7goyA7helsin864UIjjnBCOQFK+siY3KGk
+        XdUEhQmQf440ghF3hcP8UdAN6elMOS+O/oyR1WVyPzuIslPIJRKkY49jAjPn2OdK
+        bxxiWqXvEZrZRHDTYNpxCRh9+XBfjNfpMhZOkLNl//9mdG3ddrp4hMkeLR2cxqmF
+        zjPnzyGjA95aAPT3xBwEusYEQEQPcj3plunrlAYscMauYfcxd9IHhXgspGhINeU9
+        qbIk4UBh50TyuCWBOqvQUE3Uatn6q4YD0neSrQgytr23jrjF2v+qDmLt3GnXuTrq
+        D3tbgQYSBPP1mGoSArN/1fjlmIvm1I5DZELM6O29dS5CJv+Yzwp0A4WeEKsDNZTm
+        yQht0zi3wrD+gZ9cV+owYLUS5t3GmOhc9jJghWpvsIFxzAm5wPJF1UF0mg9eUJio
+        54jbyzFhZF+zUGNOgnunw2IZzWa8y3oGopO1EppDDUkYibkzwCaiKZbTi6leqB3S
+        XgHL7cHDxY7Fyg/YMLFLuWgznnQa2V8I9ahgWB7i0bTaW1JE7wrvcKIbJumsAy3L
+        Sewm0BSD9jyK44NcSpyB+gyU/oUXjE0puYevUDKrKftylfYFkFqKuUyG04/TyV8=
+        =vwPX
+        -----END PGP MESSAGE-----
+      fp: 878FEA3CB6A6F6E7CD80ECBE28506E3585F9F533
+    - created_at: "2026-04-27T20:44:48Z"
+      enc: |-
+        -----BEGIN PGP MESSAGE-----
+
+        hF4DKKbvh61jX5USAQdASLvFz+hXIlKfS7hJyKodObsde3uqN4KbWrpceqKanBcw
+        RqvYe59ADNnMF3vCEcfdX1D3GiLET6WeGyg9KH5cMP/cpiRj4jBDsIIuXBbHqmfn
+        0l4BPQRvLsXVRacZbIbwvj/JxOA6t8cJVZfbOmHYiHuXXcQaSHRjCS/SkWU0fHuj
+        0xckwj/khE81xzOkZ3UlgeBhP9ic9EgM4ryFYRdzkcL6qPq9UPxy9YM3S7BnZFov
+        =MhFI
+        -----END PGP MESSAGE-----
+      fp: 41FFAF3D519CF5C039FBD8414BCC213729AF0E49
+  unencrypted_suffix: _unencrypted
+  version: 3.12.1

inventories/chaosknoten/host_vars/diday-staging-runner.yaml

@@ -0,0 +1,8 @@
+---
+# Just using the docker_compose host group for the docker setup dependency.
+docker_compose__compose_file_content: |
+  services:
+    im-sorry-i-had-to:
+      image: docker.io/library/alpine:latest
+      restart: unless-stopped
+      command: sleep 3600

inventories/chaosknoten/hosts.yaml

@@ -10,6 +10,10 @@ all:
       ansible_host: cloud.hosts.hamburg.ccc.de
       ansible_user: chaos
       ansible_ssh_common_args: -J ssh://chaos@router.hamburg.ccc.de
+    diday-staging-runner:
+      ansible_host: diday-staging-runner.hosts.hamburg.ccc.de
+      ansible_user: chaos
+      ansible_ssh_common_args: -J ssh://chaos@router.hamburg.ccc.de
     eh22-wiki:
       ansible_host: eh22-wiki.hosts.hamburg.ccc.de
       ansible_user: chaos
@@ -102,6 +106,7 @@ base_config_hosts:
     acmedns:
     ccchoir:
     cloud:
+    diday-staging-runner:
     eh22-wiki:
     grafana:
     keycloak:
@@ -133,6 +138,7 @@ docker_compose_hosts:
   hosts:
     acmedns:
     ccchoir:
+    diday-staging-runner:
     grafana:
     tickets:
     keycloak:
@@ -251,6 +257,7 @@ ansible_pull_hosts:
   hosts:
     netbox:
     cloud:
+    diday-staging-runner:
     eh22-wiki:
     grafana:
     onlyoffice:

resources/chaosknoten/ccchoir/docker_compose/compose.yaml.j2

@@ -3,7 +3,7 @@
 
 services:
   database:
-    image: docker.io/library/mariadb:11
+    image: docker.io/library/mariadb:12
     environment:
       - "MARIADB_DATABASE=wordpress"
       - "MARIADB_ROOT_PASSWORD={{ secret__mariadb_root_password }}"

resources/chaosknoten/public-reverse-proxy/nginx/acme_challenge.conf

@@ -1,92 +1,92 @@
 # Keep this sorted alphabetically, please!
 map $host $upstream_acme_challenge_host {
-    branding-resources.hamburg.ccc.de 172.31.17.151:31820;
+    branding-resources.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    c3cat.de 172.31.17.151:31820;
+    c3cat.de public-web-static.hosts.hamburg.ccc.de:31820;
-    www.c3cat.de 172.31.17.151:31820;
+    www.c3cat.de public-web-static.hosts.hamburg.ccc.de:31820;
-    staging.c3cat.de 172.31.17.151:31820;
+    staging.c3cat.de public-web-static.hosts.hamburg.ccc.de:31820;
-    c3dog.de 172.31.17.151:31820;
+    c3dog.de public-web-static.hosts.hamburg.ccc.de:31820;
-    www.c3dog.de 172.31.17.151:31820;
+    www.c3dog.de public-web-static.hosts.hamburg.ccc.de:31820;
-    staging.c3dog.de 172.31.17.151:31820;
+    staging.c3dog.de public-web-static.hosts.hamburg.ccc.de:31820;
     ccchoir.de ccchoir.hosts.hamburg.ccc.de:31820;
     www.ccchoir.de ccchoir.hosts.hamburg.ccc.de:31820;
     cloud.hamburg.ccc.de cloud.hosts.hamburg.ccc.de:31820;
-    element.hamburg.ccc.de 172.31.17.151:31820;
+    element.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
     git.hamburg.ccc.de 172.31.17.154:31820;
     grafana.hamburg.ccc.de grafana.hosts.hamburg.ccc.de:31820;
     alerta.hamburg.ccc.de grafana.hosts.hamburg.ccc.de:31820;
-    hackertours.hamburg.ccc.de 172.31.17.151:31820;
+    hackertours.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    staging.hackertours.hamburg.ccc.de 172.31.17.151:31820;
+    staging.hackertours.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    hamburg.ccc.de 172.31.17.151:31820;
+    hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
     id.hamburg.ccc.de keycloak.hosts.hamburg.ccc.de:31820;
     invite.hamburg.ccc.de keycloak.hosts.hamburg.ccc.de:31820;
     keycloak-admin.hamburg.ccc.de keycloak.hosts.hamburg.ccc.de:31820;
     matrix.hamburg.ccc.de 172.31.17.150:31820;
     mas.hamburg.ccc.de 172.31.17.150:31820;
-    element-admin.hamburg.ccc.de 172.31.17.151:31820;
+    element-admin.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
     netbox.hamburg.ccc.de netbox.hosts.hamburg.ccc.de:31820;
     onlyoffice.hamburg.ccc.de onlyoffice.hosts.hamburg.ccc.de:31820;
     pad.hamburg.ccc.de pad.hosts.hamburg.ccc.de:31820;
-    spaceapi.hamburg.ccc.de 172.31.17.151:31820;
+    spaceapi.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    staging.hamburg.ccc.de 172.31.17.151:31820;
+    staging.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
     wiki.ccchh.net wiki.hosts.hamburg.ccc.de:31820;
     wiki.hamburg.ccc.de wiki.hosts.hamburg.ccc.de:31820;
-    www.hamburg.ccc.de 172.31.17.151:31820;
+    www.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
     tickets.hamburg.ccc.de tickets.hosts.hamburg.ccc.de:31820;
     zammad.hamburg.ccc.de zammad.hosts.hamburg.ccc.de:31820;
-    eh03.easterhegg.eu 172.31.17.151:31820;
+    eh03.easterhegg.eu public-web-static.hosts.hamburg.ccc.de:31820;
-    eh05.easterhegg.eu 172.31.17.151:31820;
+    eh05.easterhegg.eu public-web-static.hosts.hamburg.ccc.de:31820;
-    eh07.easterhegg.eu 172.31.17.151:31820;
+    eh07.easterhegg.eu public-web-static.hosts.hamburg.ccc.de:31820;
-    eh09.easterhegg.eu 172.31.17.151:31820;
+    eh09.easterhegg.eu public-web-static.hosts.hamburg.ccc.de:31820;
-    eh11.easterhegg.eu 172.31.17.151:31820;
+    eh11.easterhegg.eu public-web-static.hosts.hamburg.ccc.de:31820;
-    eh20.easterhegg.eu 172.31.17.151:31820;
+    eh20.easterhegg.eu public-web-static.hosts.hamburg.ccc.de:31820;
-    www.eh20.easterhegg.eu 172.31.17.151:31820;
+    www.eh20.easterhegg.eu public-web-static.hosts.hamburg.ccc.de:31820;
     eh22.easterhegg.eu eh22-wiki.hosts.hamburg.ccc.de:31820;
-    easterheggxxxx.hamburg.ccc.de 172.31.17.151:31820;
+    easterheggxxxx.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    eh2003.hamburg.ccc.de 172.31.17.151:31820;
+    eh2003.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    www.eh2003.hamburg.ccc.de 172.31.17.151:31820;
+    www.eh2003.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    easterhegg2003.hamburg.ccc.de 172.31.17.151:31820;
+    easterhegg2003.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    www.easterhegg2003.hamburg.ccc.de 172.31.17.151:31820;
+    www.easterhegg2003.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    eh2005.hamburg.ccc.de 172.31.17.151:31820;
+    eh2005.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    www.eh2005.hamburg.ccc.de 172.31.17.151:31820;
+    www.eh2005.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    easterhegg2005.hamburg.ccc.de 172.31.17.151:31820;
+    easterhegg2005.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    www.easterhegg2005.hamburg.ccc.de 172.31.17.151:31820;
+    www.easterhegg2005.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    eh2007.hamburg.ccc.de 172.31.17.151:31820;
+    eh2007.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    www.eh2007.hamburg.ccc.de 172.31.17.151:31820;
+    www.eh2007.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    eh07.hamburg.ccc.de 172.31.17.151:31820;
+    eh07.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    www.eh07.hamburg.ccc.de 172.31.17.151:31820;
+    www.eh07.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    easterhegg2007.hamburg.ccc.de 172.31.17.151:31820;
+    easterhegg2007.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    www.easterhegg2007.hamburg.ccc.de 172.31.17.151:31820;
+    www.easterhegg2007.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    eh2009.hamburg.ccc.de 172.31.17.151:31820;
+    eh2009.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    www.eh2009.hamburg.ccc.de 172.31.17.151:31820;
+    www.eh2009.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    eh09.hamburg.ccc.de 172.31.17.151:31820;
+    eh09.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    www.eh09.hamburg.ccc.de 172.31.17.151:31820;
+    www.eh09.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    easterhegg2009.hamburg.ccc.de 172.31.17.151:31820;
+    easterhegg2009.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    www.easterhegg2009.hamburg.ccc.de 172.31.17.151:31820;
+    www.easterhegg2009.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    eh2011.hamburg.ccc.de 172.31.17.151:31820;
+    eh2011.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    www.eh2011.hamburg.ccc.de 172.31.17.151:31820;
+    www.eh2011.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    eh11.hamburg.ccc.de 172.31.17.151:31820;
+    eh11.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    www.eh11.hamburg.ccc.de 172.31.17.151:31820;
+    www.eh11.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    easterhegg2011.hamburg.ccc.de 172.31.17.151:31820;
+    easterhegg2011.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    www.easterhegg2011.hamburg.ccc.de 172.31.17.151:31820;
+    www.easterhegg2011.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    eh20.hamburg.ccc.de 172.31.17.151:31820;
+    eh20.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    hacker.tours 172.31.17.151:31820;
+    hacker.tours public-web-static.hosts.hamburg.ccc.de:31820;
-    staging.hacker.tours 172.31.17.151:31820;
+    staging.hacker.tours public-web-static.hosts.hamburg.ccc.de:31820;
     woodpecker.hamburg.ccc.de 172.31.17.160:31820;
     design.hamburg.ccc.de 172.31.17.162:31820;
     hydra.hamburg.ccc.de 172.31.17.163:31820;
     ntfy.hamburg.ccc.de ntfy.hosts.hamburg.ccc.de:31820;
-    cryptoparty-hamburg.de 172.31.17.151:31820;
+    cryptoparty-hamburg.de public-web-static.hosts.hamburg.ccc.de:31820;
-    cryptoparty.hamburg.ccc.de 172.31.17.151:31820;
+    cryptoparty.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    staging.cryptoparty-hamburg.de 172.31.17.151:31820;
+    staging.cryptoparty-hamburg.de public-web-static.hosts.hamburg.ccc.de:31820;
-    staging.cryptoparty.hamburg.ccc.de 172.31.17.151:31820;
+    staging.cryptoparty.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
     spaceapi.ccc.de spaceapiccc.hosts.hamburg.ccc.de:31820;
-    cpu.ccc.de 172.31.17.151:31820;
+    cpu.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    lokal.ccc.de 172.31.17.151:31820;
+    lokal.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    local.ccc.de 172.31.17.151:31820;
+    local.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
     acmedns.hamburg.ccc.de acmedns.hosts.hamburg.ccc.de:31820;
-    diday.org 172.31.17.151:31820;
+    diday.org public-web-static.hosts.hamburg.ccc.de:31820;
-    docs.c3voc.de 172.31.17.151:31820;
+    docs.c3voc.de public-web-static.hosts.hamburg.ccc.de:31820;
-    staging.docs.c3voc.de 172.31.17.151:31820;
+    staging.docs.c3voc.de public-web-static.hosts.hamburg.ccc.de:31820;
     default "";
 }
 

resources/chaosknoten/public-reverse-proxy/nginx/nginx.conf

@@ -32,84 +32,84 @@ stream {
         wiki.ccchh.net wiki.hosts.hamburg.ccc.de:8443;
         wiki.hamburg.ccc.de wiki.hosts.hamburg.ccc.de:8443;
         onlyoffice.hamburg.ccc.de onlyoffice.hosts.hamburg.ccc.de:8443;
-        hackertours.hamburg.ccc.de 172.31.17.151:8443;
+        hackertours.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        staging.hackertours.hamburg.ccc.de 172.31.17.151:8443;
+        staging.hackertours.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
         netbox.hamburg.ccc.de netbox.hosts.hamburg.ccc.de:8443;
         matrix.hamburg.ccc.de 172.31.17.150:8443;
         mas.hamburg.ccc.de 172.31.17.150:8443;
-        element-admin.hamburg.ccc.de 172.31.17.151:8443;
+        element-admin.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        element.hamburg.ccc.de 172.31.17.151:8443;
+        element.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        branding-resources.hamburg.ccc.de 172.31.17.151:8443;
+        branding-resources.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        www.hamburg.ccc.de 172.31.17.151:8443;
+        www.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        hamburg.ccc.de 172.31.17.151:8443;
+        hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        staging.hamburg.ccc.de 172.31.17.151:8443;
+        staging.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        spaceapi.hamburg.ccc.de 172.31.17.151:8443;
+        spaceapi.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
         tickets.hamburg.ccc.de tickets.hosts.hamburg.ccc.de:8443;
         sunders.hamburg.ccc.de sunders.hosts.hamburg.ccc.de:8443;
         zammad.hamburg.ccc.de zammad.hosts.hamburg.ccc.de:8443;
-        c3cat.de 172.31.17.151:8443;
+        c3cat.de public-web-static.hosts.hamburg.ccc.de:8443;
-        www.c3cat.de 172.31.17.151:8443;
+        www.c3cat.de public-web-static.hosts.hamburg.ccc.de:8443;
-        staging.c3cat.de 172.31.17.151:8443;
+        staging.c3cat.de public-web-static.hosts.hamburg.ccc.de:8443;
-        c3dog.de 172.31.17.151:8443;
+        c3dog.de public-web-static.hosts.hamburg.ccc.de:8443;
-        www.c3dog.de 172.31.17.151:8443;
+        www.c3dog.de public-web-static.hosts.hamburg.ccc.de:8443;
-        staging.c3dog.de 172.31.17.151:8443;
+        staging.c3dog.de public-web-static.hosts.hamburg.ccc.de:8443;
         git.hamburg.ccc.de 172.31.17.154:8443;
-        eh03.easterhegg.eu 172.31.17.151:8443;
+        eh03.easterhegg.eu public-web-static.hosts.hamburg.ccc.de:8443;
-        eh05.easterhegg.eu 172.31.17.151:8443;
+        eh05.easterhegg.eu public-web-static.hosts.hamburg.ccc.de:8443;
-        eh07.easterhegg.eu 172.31.17.151:8443;
+        eh07.easterhegg.eu public-web-static.hosts.hamburg.ccc.de:8443;
-        eh09.easterhegg.eu 172.31.17.151:8443;
+        eh09.easterhegg.eu public-web-static.hosts.hamburg.ccc.de:8443;
-        eh11.easterhegg.eu 172.31.17.151:8443;
+        eh11.easterhegg.eu public-web-static.hosts.hamburg.ccc.de:8443;
-        eh20.easterhegg.eu 172.31.17.151:8443;
+        eh20.easterhegg.eu public-web-static.hosts.hamburg.ccc.de:8443;
-        www.eh20.easterhegg.eu 172.31.17.151:8443;
+        www.eh20.easterhegg.eu public-web-static.hosts.hamburg.ccc.de:8443;
         eh22.easterhegg.eu eh22-wiki.hosts.hamburg.ccc.de:8443;
-        easterheggxxxx.hamburg.ccc.de 172.31.17.151:8443;
+        easterheggxxxx.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        eh2003.hamburg.ccc.de 172.31.17.151:8443;
+        eh2003.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        www.eh2003.hamburg.ccc.de 172.31.17.151:8443;
+        www.eh2003.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        easterhegg2003.hamburg.ccc.de 172.31.17.151:8443;
+        easterhegg2003.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        www.easterhegg2003.hamburg.ccc.de 172.31.17.151:8443;
+        www.easterhegg2003.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        eh2005.hamburg.ccc.de 172.31.17.151:8443;
+        eh2005.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        www.eh2005.hamburg.ccc.de 172.31.17.151:8443;
+        www.eh2005.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        easterhegg2005.hamburg.ccc.de 172.31.17.151:8443;
+        easterhegg2005.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        www.easterhegg2005.hamburg.ccc.de 172.31.17.151:8443;
+        www.easterhegg2005.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        eh2007.hamburg.ccc.de 172.31.17.151:8443;
+        eh2007.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        www.eh2007.hamburg.ccc.de 172.31.17.151:8443;
+        www.eh2007.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        eh07.hamburg.ccc.de 172.31.17.151:8443;
+        eh07.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        www.eh07.hamburg.ccc.de 172.31.17.151:8443;
+        www.eh07.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        easterhegg2007.hamburg.ccc.de 172.31.17.151:8443;
+        easterhegg2007.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        www.easterhegg2007.hamburg.ccc.de 172.31.17.151:8443;
+        www.easterhegg2007.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        eh2009.hamburg.ccc.de 172.31.17.151:8443;
+        eh2009.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        www.eh2009.hamburg.ccc.de 172.31.17.151:8443;
+        www.eh2009.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        eh09.hamburg.ccc.de 172.31.17.151:8443;
+        eh09.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        www.eh09.hamburg.ccc.de 172.31.17.151:8443;
+        www.eh09.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        easterhegg2009.hamburg.ccc.de 172.31.17.151:8443;
+        easterhegg2009.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        www.easterhegg2009.hamburg.ccc.de 172.31.17.151:8443;
+        www.easterhegg2009.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        eh2011.hamburg.ccc.de 172.31.17.151:8443;
+        eh2011.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        www.eh2011.hamburg.ccc.de 172.31.17.151:8443;
+        www.eh2011.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        eh11.hamburg.ccc.de 172.31.17.151:8443;
+        eh11.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        www.eh11.hamburg.ccc.de 172.31.17.151:8443;
+        www.eh11.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        easterhegg2011.hamburg.ccc.de 172.31.17.151:8443;
+        easterhegg2011.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        www.easterhegg2011.hamburg.ccc.de 172.31.17.151:8443;
+        www.easterhegg2011.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        eh20.hamburg.ccc.de 172.31.17.151:8443;
+        eh20.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        hacker.tours 172.31.17.151:8443;
+        hacker.tours public-web-static.hosts.hamburg.ccc.de:8443;
-        staging.hacker.tours 172.31.17.151:8443;
+        staging.hacker.tours public-web-static.hosts.hamburg.ccc.de:8443;
         woodpecker.hamburg.ccc.de 172.31.17.160:8443;
         design.hamburg.ccc.de 172.31.17.162:8443;
         hydra.hamburg.ccc.de 172.31.17.163:8443;
         cfp.eh22.easterhegg.eu pretalx.hosts.hamburg.ccc.de:8443;
         ntfy.hamburg.ccc.de ntfy.hosts.hamburg.ccc.de:8443;
-        cryptoparty-hamburg.de 172.31.17.151:8443;
+        cryptoparty-hamburg.de public-web-static.hosts.hamburg.ccc.de:8443;
-        cryptoparty.hamburg.ccc.de 172.31.17.151:8443;
+        cryptoparty.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        staging.cryptoparty-hamburg.de 172.31.17.151:8443;
+        staging.cryptoparty-hamburg.de public-web-static.hosts.hamburg.ccc.de:8443;
-        staging.cryptoparty.hamburg.ccc.de 172.31.17.151:8443;
+        staging.cryptoparty.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
         spaceapi.ccc.de spaceapiccc.hosts.hamburg.ccc.de:8443;
-        cpu.ccc.de 172.31.17.151:8443;
+        cpu.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        lokal.ccc.de 172.31.17.151:8443;
+        lokal.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        local.ccc.de 172.31.17.151:8443;
+        local.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
         acmedns.hamburg.ccc.de acmedns.hosts.hamburg.ccc.de:8443;
-        diday.org 172.31.17.151:8443;
+        diday.org public-web-static.hosts.hamburg.ccc.de:8443;
-        *.staging.diday.org 172.31.17.151:8443;
+        *.staging.diday.org public-web-static.hosts.hamburg.ccc.de:8443;
-        docs.c3voc.de 172.31.17.151:8443;
+        docs.c3voc.de public-web-static.hosts.hamburg.ccc.de:8443;
-        staging.docs.c3voc.de 172.31.17.151:8443;
+        staging.docs.c3voc.de public-web-static.hosts.hamburg.ccc.de:8443;
     }
 
     server {