CCCHH/ansible-infra
CCCHH/ansible-infra
2
2
Fork 1
Code Issues 7 Pull requests 8 Wiki Activity Actions

Compare commits

base: CCCHH:d471303b1124ab0d632a44e05c461a646c596f08
Branches Tags
CCCHH:main
CCCHH:renovate/docker.io-pretalx-standalone-2026.x
CCCHH:renovate/docker.io-library-postgres-18.x
CCCHH:renovate/docker.io-library-mariadb-12.x
CCCHH:renovate/major-github-artifact-actions
CCCHH:renovate/docker.io-pretix-standalone-2026.x
CCCHH:renovate/docker.io-pretalx-standalone-2025.x
CCCHH:renovate/all-stable-minor-patch
CCCHH:new_ccchh_router
CCCHH:alloy
CCCHH:old-dns-zones
...
compare: CCCHH:79d2156a07f362acab82f81bbd0a7907f3a11567
Branches Tags
CCCHH:renovate/docker.io-pretalx-standalone-2026.x
CCCHH:renovate/docker.io-library-postgres-18.x
CCCHH:renovate/docker.io-library-mariadb-12.x
CCCHH:renovate/major-github-artifact-actions
CCCHH:renovate/docker.io-pretix-standalone-2026.x
CCCHH:renovate/docker.io-pretalx-standalone-2025.x
CCCHH:renovate/all-stable-minor-patch
CCCHH:main
CCCHH:new_ccchh_router
CCCHH:alloy
CCCHH:old-dns-zones

2 commits
d471303b11 ... 79d2156a07

Author SHA1 Message Date
Renovate
79d2156a07 Update all stable non-major dependencies
Some checks failed
/ Ansible Lint (push) Successful in 2m45s
Details
/ build (pull_request) Failing after 2m45s
Details
/ Ansible Lint (pull_request) Successful in 2m46s
Details
2026-05-24 10:00:43 +00:00
lilly
7832978ff7
 		update ccchh.net dns zone after club proxmox migration
Some checks failed
/ Ansible Lint (push) Successful in 2m19s
Details
/ build (push) Failing after 2m39s
Details
2026-05-24 11:55:37 +02:00
11 changed files with 78 additions and 87 deletions
Download patch file Download diff file Expand all files Collapse all files

2
.forgejo/workflows/lint.yaml
View file

@ -24,7 +24,7 @@ jobs:
# work in our environmnet. # work in our environmnet.
# Rather manually setup python (pip) before instead. # Rather manually setup python (pip) before instead.
- name: Run ansible-lint - name: Run ansible-lint
uses: https://github.com/ansible/ansible-lint@v26.3.0 uses: https://github.com/ansible/ansible-lint@v26.4.0
with: with:
setup_python: "false" setup_python: "false"
requirements_file: "requirements.yml" requirements_file: "requirements.yml"

2
inventories/chaosknoten/host_vars/netbox.yaml
View file

@ -1,5 +1,5 @@
# renovate: datasource=github-releases depName=netbox packageName=netbox-community/netbox # renovate: datasource=github-releases depName=netbox packageName=netbox-community/netbox
netbox__version: "v4.5.5" netbox__version: "v4.6.1"
netbox__config: "{{ lookup('ansible.builtin.template', 'resources/chaosknoten/netbox/netbox/configuration.py.j2') }}" netbox__config: "{{ lookup('ansible.builtin.template', 'resources/chaosknoten/netbox/netbox/configuration.py.j2') }}"
netbox__custom_pipeline_oidc_group_and_role_mapping: true netbox__custom_pipeline_oidc_group_and_role_mapping: true

2
resources/chaosknoten/acmedns/docker_compose/compose.yaml.j2
View file

@ -2,7 +2,7 @@
services: services:
oauth2-proxy: oauth2-proxy:
container_name: oauth2-proxy container_name: oauth2-proxy
image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.1 image: quay.io/oauth2-proxy/oauth2-proxy:v7.15.2
command: --config /oauth2-proxy.cfg command: --config /oauth2-proxy.cfg
hostname: oauth2-proxy hostname: oauth2-proxy
volumes: volumes:

135
resources/chaosknoten/auth-dns/zones/ccchh.net.zone
View file

@ -1,73 +1,64 @@
$ORIGIN . $TTL 60 ; 1 minutes
$TTL 900 ; 15 minutes @ SOA auth-dns.hamburg.ccc.de. noc.hamburg.ccc.de. (
ccchh.net IN SOA auth-dns.hamburg.ccc.de. noc.hamburg.ccc.de. ( 1 ; serial (overwritten by knot automatically)
2026042801 ; serial 86400 ; refresh (1 day)
86400 ; refresh (1 day) 7200 ; retry (2 hours)
7200 ; retry (2 hours) 3600000 ; expire (5 weeks 6 days 16 hours)
3600000 ; expire (5 weeks 6 days 16 hours) 60 ; minimum/negative ttl (1 minute)
7200 ; minimum (2 hours) )
)
NS auth-dns.hamburg.ccc.de.
NS ns.vie.ccc.de.
$ORIGIN ccchh.net. @ NS auth-dns.hamburg.ccc.de.
aes A 212.12.48.125 @ NS ns.vie.ccc.de.
club-assistant AAAA 2a07:c481:1:d0::a
;_acme-challenge.club-assistant CNAME d50ad73a-f82d-4244-87f0-6f5195b37d21.auth.acmedns.hamburg.ccc.de
club-assistant.z9 AAAA 2a07:c481:1:d0::a ;
;_acme-challenge.club-assistant.z9 CNAME 0efa74d1-7dcd-478b-bdc5-5b76d0f07642.auth.acmedns.hamburg.ccc.de ; Network-Infrastructure
esphome AAAA 2a07:c481:1:d0::66 ;
esphome.z9 AAAA 2a07:c481:1:d0::66 rt-wan A 185.161.129.134
zigbee2mqtt A 185.161.129.132 AAAA 2a07:c481::1:2
light AAAA 2a07:c481:1:d0::16 sw-rack-1 A 10.89.213.2
_acme-challenge.light CNAME e59f55ee-9013-469d-a146-a159721b6fea.auth.acmedns.hamburg.ccc.de. AAAA 2a07:c481:1:36::2
light.z9 AAAA 2a07:c481:1:d0::16 sw-rack-2-poe A 10.89.213.3
_acme-challenge.light.z9 CNAME 3bc9e7ce-03dd-4533-a059-b5d38407eaa5.auth.acmedns.hamburg.ccc.de. AAAA 2a07:c481:1:36::3
light-werkstatt AAAA 2a07:c481:1:d0::16 sw-main-1 A 10.89.213.4
_acme-challenge.light-werkstatt CNAME f408acc0-d9f5-4525-bb01-28938e3bb7d0.auth.acmedns.hamburg.ccc.de. AAAA 2a07:c481:1:36::4
mailserver-endpoint A 82.165.121.46 sw-main-2 A 10.89.213.5
ns1 A 185.161.129.133 AAAA 2a07:c481:1:36::5
send-only-mail MX 10 send-only-mailserver sw-shop-1 A 10.89.213.6
TXT "v=spf1 mx -all" AAAA 2a07:c481:1:36::6
send-only-mailserver A 82.165.121.46 sw-shop-2-poe A 10.89.213.7
send-only-mailserver-access A 185.161.129.132 AAAA 2a07:c481:1:36::7
thinkcccore0 AAAA 2a07:c481:1:f2::3 sw-shop-3-poe A 10.89.213.8
thinkcccore0.z9 AAAA 2a07:c481:1:f2::3 AAAA 2a07:c481:1:36::8
thinkcccore1 AAAA 2a07:c481:1:f2::4 pve01 A 10.89.213.11
thinkcccore1.z9 AAAA 2a07:c481:1:f2::4 AAAA 2a07:c481:1:36::11
opnsense AAAA 2a07:c481:1:f2::1 pve02 A 10.89.213.12
opnsense.z9 AAAA 2a07:c481:1:f2::1 AAAA 2a07:c481:1:36::12
pbs AAAA 2a07:c481:1:f2::4 pve03 A 10.89.213.13
thinkcccore2 AAAA 2a07:c481:1:f2::5 AAAA 2a07:c481:1:36::13
thinkcccore2.z9 AAAA 2a07:c481:1:f2::5 pve04 A 10.89.213.14
thinkcccore3 AAAA 2a07:c481:1:f2::6 AAAA 2a07:c481:1:36::14
thinkcccore3.z9 AAAA 2a07:c481:1:f2::6 pbs A 10.89.213.15
miniscccore0 AAAA 2a07:c481:1:f2::9 AAAA 2a07:c481:1:36::15
miniscccore0.z9 AAAA 2a07:c481:1:f2::9 unifi A 10.89.213.21
uptime-kuma A 185.161.129.132
status AAAA 2a07:c481:1:ce::a
status.z9 AAAA 2a07:c481:1:ce::a ;
wiki A 212.12.48.125 ; Club-Services
hmdooris-ccu A 10.31.208.202 ;
buba A 10.31.211.137 xr18 A 172.31.200.21
buba.z9 A 10.31.211.137
dooris AAAA 2a07:c481:1:d0::1c ;club-assistant AAAA 2a07:c481:1:d0::a
_acme-challenge.dooris CNAME 37caae1f-b77f-4eb1-aa71-dc3f7ed24360.auth.acmedns.hamburg.ccc.de. ;;_acme-challenge.club-assistant CNAME d50ad73a-f82d-4244-87f0-6f5195b37d21.auth.acmedns.hamburg.ccc.de
waybackproxy A 10.31.208.99 ;esphome AAAA 2a07:c481:1:d0::66
yate A 10.31.208.12 ;zigbee2mqtt A 185.161.129.132
staubiv2 A 10.31.210.233 ;light AAAA 2a07:c481:1:d0::16
staubiv2.z9 A 10.31.210.233 ;_acme-challenge.light CNAME e59f55ee-9013-469d-a146-a159721b6fea.auth.acmedns.hamburg.ccc.de.
; Mail: hosts.z9.ccchh.net ;light-werkstatt AAAA 2a07:c481:1:d0::16
hosts.z9 MX 10 cow.hamburg.ccc.de ;_acme-challenge.light-werkstatt CNAME f408acc0-d9f5-4525-bb01-28938e3bb7d0.auth.acmedns.hamburg.ccc.de.
TXT "v=spf1 mx -all" ;hmdooris-ccu A 10.31.208.202
dkim._domainkey.hosts.z9 TXT ("v=DKIM1;k=rsa;t=s;s=email;" ;buba A 10.31.211.137
"p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsdypQ/tlrzto5KVP" ;dooris AAAA 2a07:c481:1:d0::1c
"5o7tEblXK/hOVRFB683uODzo26XTFMSRGjumMuo/tej59GMePdUu0uIsdq8hfj8" ;_acme-challenge.dooris CNAME 37caae1f-b77f-4eb1-aa71-dc3f7ed24360.auth.acmedns.hamburg.ccc.de.
"ot0R2OQNazdyp4NW4TUWfFGJ4S2f6LR3lE3I5Lw7fHiYHz0GnCGTqZIItkHK+xQ" ;yate A 10.31.208.12
"i5Fdhwd1YbFJtO0XiZ0jY5w6pvny6pEH8WaKX85rEmz2zqCtpiYPRPmoK/Tn+rV" ;staubiv2 A 10.31.210.233
"2e8fVioMRm9W8E4PU42WLds66qOkFR0KjKIavE6y7JahESEoVGcVnSPdtMOX0Ln"
"KbSMQNrTvNbBoPdLYvNaXOw7TmVPKjDV+FRCIIdK+m0fL82/vm5jPBvDr5+WlM1"
"xV/P/KlSnQIDAQAB")
$ORIGIN send-only-mail.ccchh.net.
_dmarc TXT "v=DMARC1;p=quarantine;"
key._domainkey TXT "v=DKIM1;k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDqduM4+SQ+IQ2uAxbjFkd+0hAjohTgT3nM76jyrWGHJ8TizNU2PGkta0NjCq+m9VLBZUjIJphW2vrnlJsnN0JkGAdoLBL3Qs0kShT6V+xsxslZG2KHApihnJUp34tPSMES+aTnD+jEPGyxFLeoiK+3gywNhCGalHSQ+G88Z2n59wIDAQAB"

8
resources/chaosknoten/grafana/docker_compose/compose.yaml.j2
View file

@ -2,7 +2,7 @@
services: services:
prometheus: prometheus:
image: docker.io/prom/prometheus:v3.10.0 image: docker.io/prom/prometheus:v3.11.3
container_name: prometheus container_name: prometheus
command: command:
- '--config.file=/etc/prometheus/prometheus.yml' - '--config.file=/etc/prometheus/prometheus.yml'
@ -19,7 +19,7 @@ services:
- prom_data:/prometheus - prom_data:/prometheus
alertmanager: alertmanager:
image: docker.io/prom/alertmanager:v0.31.1 image: docker.io/prom/alertmanager:v0.32.1
container_name: alertmanager container_name: alertmanager
command: command:
- '--config.file=/etc/alertmanager/alertmanager.yaml' - '--config.file=/etc/alertmanager/alertmanager.yaml'
@ -46,7 +46,7 @@ services:
- graf_data:/var/lib/grafana - graf_data:/var/lib/grafana
pve-exporter: pve-exporter:
image: docker.io/prompve/prometheus-pve-exporter:3.8.2 image: docker.io/prompve/prometheus-pve-exporter:3.9.0
container_name: pve-exporter container_name: pve-exporter
ports: ports:
- 9221:9221 - 9221:9221
@ -59,7 +59,7 @@ services:
- /dev/null:/etc/prometheus/pve.yml - /dev/null:/etc/prometheus/pve.yml
loki: loki:
image: docker.io/grafana/loki:3.7.1 image: docker.io/grafana/loki:3.7.2
container_name: loki container_name: loki
ports: ports:
- 13100:3100 - 13100:3100

2
resources/chaosknoten/keycloak/docker_compose/compose.yaml.j2
View file

@ -22,7 +22,7 @@
services: services:
keycloak: keycloak:
image: git.hamburg.ccc.de/ccchh/oci-images/keycloak:26.5.7 image: git.hamburg.ccc.de/ccchh/oci-images/keycloak:26.6.0
pull_policy: always pull_policy: always
restart: unless-stopped restart: unless-stopped
command: start --optimized command: start --optimized

2
resources/chaosknoten/ntfy/docker_compose/compose.yaml.j2
View file

@ -1,7 +1,7 @@
--- ---
services: services:
ntfy: ntfy:
image: docker.io/binwiederhier/ntfy:v2.20.1 image: docker.io/binwiederhier/ntfy:v2.23.0
container_name: ntfy container_name: ntfy
command: command:
- serve - serve

2
resources/chaosknoten/onlyoffice/docker_compose/compose.yaml.j2
View file

@ -4,7 +4,7 @@
services: services:
onlyoffice: onlyoffice:
image: docker.io/onlyoffice/documentserver:9.3.1 image: docker.io/onlyoffice/documentserver:9.4.0
restart: unless-stopped restart: unless-stopped
volumes: volumes:
- "./onlyoffice/DocumentServer/logs:/var/log/onlyoffice" - "./onlyoffice/DocumentServer/logs:/var/log/onlyoffice"

4
resources/chaosknoten/pretalx/docker_compose/compose.yaml.j2
View file

@ -15,7 +15,7 @@ services:
- pretalx_net - pretalx_net
redis: redis:
image: docker.io/library/redis:8.6.2 image: docker.io/library/redis:8.6.3
restart: unless-stopped restart: unless-stopped
volumes: volumes:
- redis:/data - redis:/data
@ -23,7 +23,7 @@ services:
- pretalx_net - pretalx_net
static: static:
image: docker.io/library/nginx:1.29.7 image: docker.io/library/nginx:1.31.1
restart: unless-stopped restart: unless-stopped
volumes: volumes:
- public:/usr/share/nginx/html - public:/usr/share/nginx/html

2
resources/chaosknoten/tickets/docker_compose/compose.yaml.j2
View file

@ -13,7 +13,7 @@ services:
restart: unless-stopped restart: unless-stopped
redis: redis:
image: docker.io/library/redis:8.6.2 image: docker.io/library/redis:8.6.3
ports: ports:
- "6379:6379" - "6379:6379"
volumes: volumes:

4
resources/external/status/docker_compose/compose.yaml.j2 vendored
View file

@ -4,7 +4,7 @@
services: services:
database: database:
image: docker.io/library/postgres:18.3 image: docker.io/library/postgres:18.4
restart: always restart: always
volumes: volumes:
- ./database:/var/lib/postgresql - ./database:/var/lib/postgresql
@ -16,7 +16,7 @@ services:
- gatus - gatus
gatus: gatus:
image: ghcr.io/twin/gatus:v5.35.0 image: ghcr.io/twin/gatus:v5.36.0
restart: always restart: always
ports: ports:
- "8080:8080" - "8080:8080"