CCCHH/ansible-infra
CCCHH/ansible-infra
2
2
Fork 1
Code Issues 9 Pull requests 9 Wiki Activity Actions

Compare commits

base: CCCHH:f886633de91282c33864be49a887eb6ba0ce14df
Branches Tags
CCCHH:main
CCCHH:use-canary
CCCHH:renovate/major-github-artifact-actions
CCCHH:renovate/docker.io-pretalx-standalone-2026.x
CCCHH:renovate/docker.io-library-postgres-18.x
CCCHH:renovate/docker.io-library-mariadb-12.x
CCCHH:renovate/docker.io-pretix-standalone-2026.x
CCCHH:renovate/docker.io-pretalx-standalone-2025.x
CCCHH:renovate/all-stable-minor-patch
CCCHH:new_ccchh_router
CCCHH:alloy
CCCHH:old-dns-zones
...
compare: CCCHH:6f6ef290164530f25cf5191f785753e5e088df0b
Branches Tags
CCCHH:use-canary
CCCHH:renovate/major-github-artifact-actions
CCCHH:renovate/docker.io-pretalx-standalone-2026.x
CCCHH:renovate/docker.io-library-postgres-18.x
CCCHH:renovate/docker.io-library-mariadb-12.x
CCCHH:renovate/docker.io-pretix-standalone-2026.x
CCCHH:renovate/docker.io-pretalx-standalone-2025.x
CCCHH:renovate/all-stable-minor-patch
CCCHH:main
CCCHH:new_ccchh_router
CCCHH:alloy
CCCHH:old-dns-zones

3 commits
f886633de9 ... 6f6ef29016

Author SHA1 Message Date
Renovate
6f6ef29016 Update GitHub Artifact Actions to v7
Some checks failed
/ Ansible Lint (push) Successful in 2m19s
Details
/ Ansible Lint (pull_request) Successful in 2m20s
Details
/ build (pull_request) Failing after 2m41s
Details
2026-06-10 14:31:31 +00:00
lilly
5973de0959
 		dns: validate zone files before apply in knot role
Some checks failed
/ build (push) Failing after 2m44s
Details
/ Ansible Lint (push) Successful in 3m23s
Details
2026-06-10 16:17:58 +02:00
lilly
57d2a94990
 		dns: fix syntax error in diday.org zone 2026-06-10 16:17:23 +02:00
3 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
.forgejo/workflows/deploy-docs.yaml
View file

@ -67,7 +67,7 @@ jobs:
run: | run: |
rsync -v -r --delete -e "ssh -i deploykey.priv -o 'UserKnownHostsFile ./known_hosts'" site/ infra-docs-deploy@public-web-static.hosts.hamburg.ccc.de:/var/www/infra-docs.hamburg.ccc.de/ rsync -v -r --delete -e "ssh -i deploykey.priv -o 'UserKnownHostsFile ./known_hosts'" site/ infra-docs-deploy@public-web-static.hosts.hamburg.ccc.de:/var/www/infra-docs.hamburg.ccc.de/
- uses: actions/upload-artifact@v3 - uses: actions/upload-artifact@v7
if: github.event_name == 'pull_request' if: github.event_name == 'pull_request'
with: with:
name: docs-build name: docs-build

5
resources/chaosknoten/auth-dns/zones/diday.org.zone
View file

@ -1,4 +1,4 @@
$TTL 3600 ; 1 minutes $TTL 3600
@ SOA auth-dns.hamburg.ccc.de. noc.hamburg.ccc.de. ( @ SOA auth-dns.hamburg.ccc.de. noc.hamburg.ccc.de. (
1 ; serial (overwritten by knot automatically) 1 ; serial (overwritten by knot automatically)
10800 ; refresh 10800 ; refresh
@ -27,8 +27,7 @@ diday.org. TXT "google-site-verification=pJq0LANnNJlkIflK
diday.org. MX 10 cow.hamburg.ccc.de. diday.org. MX 10 cow.hamburg.ccc.de.
diday.org. TXT "v=spf1 mx ip4:212.12.51.133 ip6:2a00:14b0:f000:23:51:133:0:1 ip4:212.12.48.122 ip6:2a00:14b0:4200:3000:122::1 -all" diday.org. TXT "v=spf1 mx ip4:212.12.51.133 ip6:2a00:14b0:f000:23:51:133:0:1 ip4:212.12.48.122 ip6:2a00:14b0:4200:3000:122::1 -all"
_dmarc.diday.org. TXT "v=DMARC1; p=none" _dmarc.diday.org. TXT "v=DMARC1; p=none"
dkim._domainkey.diday.org. TXT "v=DKIM1;k=rsa;t=s;s=email;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2YlBjR5oNm7eDeMXmQF6Izx1A17+vBHNapHlV2Rlj3N4Cjo9kSn0y8rlrqkASUKszDgToGrh1vkHhtYN6EE5QS5iVVSnXcWPiHnBzrxK4OmhVZZtrgGsM17pq9udAEEapc371dQQsL3WhXOvilGGSIQ9u5VDlc+y/ApXi79J6DHSf66t0JUU1e8vLn8ZI8hcXe3nsHXqbW4ot24rk8EvaugsK40jbhqxZ+BrJTBq/iP8w5RsF6KdYjTaqPfr/D4dbvUU6fc8jLyy3OWZgSkkOmv7m0UdbOm2Kk6c+1hNjQJZVEhQrpGrpAcjE37/v8ZNbQMgaasiugH6ElnKb13ZQIDAQAB dkim._domainkey.diday.org. TXT "v=DKIM1;k=rsa;t=s;s=email;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2YlBjR5oNm7eDeMXmQF6Izx1A17+vBHNapHlV2Rlj3N4Cjo9kSn0y8rlrqkASUKszDgToGrh1vkHhtYN6EE5QS5iVVSnXcWPiHnBzrxK4OmhVZZtrgGsM17pq9udAEEapc371dQQsL3WhXOvilGGSIQ9u5VDlc+y/ApXi79J6DHSf66t0JUU1e8vLn8ZI8hcXe3nsHXqbW4ot24rk8EvaugsK40jbhqxZ+BrJTBq/iP8w5RsF6KdYjTaqPfr/D4dbvUU6fc8jLyy3OWZgSkkOmv7m0UdbOm2Kk6c+1hNjQJZVEhQrpGrpAcjE37/v8ZNbQMgaasiugH6ElnKb13ZQIDAQAB"
"
events.diday.org. A 91.98.167.209 events.diday.org. A 91.98.167.209
events.diday.org. AAAA 2a01:4f8:c2c:44b::1 events.diday.org. AAAA 2a01:4f8:c2c:44b::1

1
roles/knot/tasks/02-configure.yaml
View file

@ -33,6 +33,7 @@
owner: knot owner: knot
group: knot group: knot
mode: u=rw,g=r mode: u=rw,g=r
validate: "kzonecheck -v -o '{{ item.domain }}' %s"
# this seems weird but hear me out: # this seems weird but hear me out:
# if we don't disable SLAAC, the node automatically gets an address based on IPv6 Router-Advertisements # if we don't disable SLAAC, the node automatically gets an address based on IPv6 Router-Advertisements