.ansible-lint

@@ -1,6 +0,0 @@
-skip_list:
-  - "yaml[line-length]"
-  - "name[casing]"
-
-exclude_paths:
-  - .forgejo/

.editorconfig

@@ -1,15 +0,0 @@
-root = true
-
-[*]
-end_of_line = lf
-insert_final_newline = true
-trim_trailing_whitespace = true
-indent_style = space
-charset = utf-8
-
-[*.md]
-indent_size = 2
-trim_trailing_whitespace = false
-
-[*.yaml]
-indent_size = 2

.forgejo/workflows/lint.yaml

@@ -1,19 +0,0 @@
-# Links & Resources:
-# https://github.com/ansible/ansible-lint?tab=readme-ov-file#using-ansible-lint-as-a-github-action
-on:
-  pull_request:
-  push:
-
-jobs:
-  ansible-lint:
-    name: Ansible Lint
-    runs-on: docker
-    steps:
-      - uses: actions/checkout@v4
-      - name: miau
-        run: |
-          apt update
-      - name: Run ansible-lint
-        uses: https://github.com/ansible/ansible-lint@main
-        with:
-          setup_python: "false"

.yamllint.yaml

@@ -1,6 +0,0 @@
-rules:
-  brackets:
-    min-spaces-inside: 1
-    max-spaces-inside: 1
-    min-spaces-inside-empty: 1
-    max-spaces-inside-empty: 1

inventories/chaosknoten/host_vars/ccchoir.yaml

@@ -1,5 +1,5 @@
 docker_compose__compose_file_content: "{{ lookup('ansible.builtin.template', 'chaosknoten/configs/ccchoir/compose.yaml.j2') }}"
-docker_compose__configuration_files: [ ]
+docker_compose__configuration_files: []
 
 certbot__version_spec: ""
 certbot__acme_account_email_address: le-admin@hamburg.ccc.de

inventories/chaosknoten/host_vars/pad.yaml

@@ -1,5 +1,5 @@
 docker_compose__compose_file_content: "{{ lookup('ansible.builtin.template', 'chaosknoten/configs/pad/compose.yaml.j2') }}"
-docker_compose__configuration_files: [ ]
+docker_compose__configuration_files: []
 
 certbot__version_spec: ""
 certbot__acme_account_email_address: le-admin@hamburg.ccc.de

inventories/chaosknoten/host_vars/pretalx.yaml

@@ -1,5 +1,5 @@
 docker_compose__compose_file_content: "{{ lookup('ansible.builtin.template', 'chaosknoten/configs/pretalx/compose.yaml.j2') }}"
-docker_compose__configuration_files: [ ]
+docker_compose__configuration_files: []
 
 certbot__version_spec: ""
 certbot__acme_account_email_address: le-admin@hamburg.ccc.de

inventories/chaosknoten/host_vars/zammad.yaml

@@ -1,5 +1,5 @@
 docker_compose__compose_file_content: "{{ lookup('ansible.builtin.template', 'chaosknoten/configs/zammad/compose.yaml.j2') }}"
-docker_compose__configuration_files: [ ]
+docker_compose__configuration_files: []
 
 certbot__version_spec: ""
 certbot__acme_account_email_address: le-admin@hamburg.ccc.de

playbooks/files/chaosknoten/configs/grafana/docker_compose/grafana-datasource.yml

@@ -1,9 +1,10 @@
 apiVersion: 1
 
 datasources:
-  - name: Prometheus
+- name: Prometheus
   type: prometheus
   url: http://prometheus:9090 
   isDefault: true
   access: proxy
   editable: true
+

playbooks/files/chaosknoten/configs/grafana/docker_compose/prometheus.yml

@@ -15,21 +15,21 @@ rule_files:
   - "/etc/prometheus/rules/*.rules.yaml"
 
 scrape_configs:
-  - job_name: prometheus
+- job_name: prometheus
   honor_timestamps: true
   metrics_path: /metrics
   scheme: http
   static_configs:
   - targets:
     - localhost:9090
-  - job_name: alertmanager
+- job_name: alertmanager
   honor_timestamps: true
   metrics_path: /metrics
   scheme: http
   static_configs:
   - targets:
     - alertmanager:9093
-  - job_name: c3lingo
+- job_name: c3lingo
   honor_timestamps: true
   scrape_interval: 5s
   scrape_timeout: 1s
@@ -38,7 +38,7 @@ scrape_configs:
   static_configs:
   - targets:
     - mumble.c3lingo.org:443
-  - job_name: mumble
+- job_name: mumble
   honor_timestamps: true
   scrape_interval: 5s
   scrape_timeout: 1s
@@ -47,14 +47,14 @@ scrape_configs:
   static_configs:
   - targets:
     - mumble.hamburg.ccc.de:443
-  - job_name: opnsense-ccchh
+- job_name: opnsense-ccchh
   honor_timestamps: true
   metrics_path: /metrics
   scheme: http
   static_configs:
   - targets:
     - 185.161.129.132:9100
-  - job_name: jitsi
+- job_name: jitsi
   honor_timestamps: true
   scrape_interval: 5s
   scrape_timeout: 1s
@@ -63,23 +63,23 @@ scrape_configs:
   static_configs:
   - targets:
     - jitsi.hamburg.ccc.de:9888 # Jitsi Video Bridge
-  - job_name: 'pve'
+- job_name: 'pve'
   static_configs:
     - targets:
       - 212.12.48.126  # chaosknoten
   metrics_path: /pve
   params:
-      module: [ default ]
+    module: [default]
-      cluster: [ '1' ]
+    cluster: ['1']
-      node: [ '1' ]
+    node: ['1']
   relabel_configs:
-      - source_labels: [ __address__ ]
+    - source_labels: [__address__]
       target_label: __param_target
-      - source_labels: [ __param_target ]
+    - source_labels: [__param_target]
       target_label: instance
     - target_label: __address__
       replacement: pve-exporter:9221
-  - job_name: hosts
+- job_name: hosts
   static_configs:
     # Wieske Chaosknoten VMs
     - labels:

playbooks/files/chaosknoten/configs/grafana/docker_compose/prometheus_alerts.rules.yaml

@@ -1,7 +1,7 @@
 # Links & Resources:
 # - https://samber.github.io/awesome-prometheus-alerts/rules
 groups:
-  - name: node-exporter
+- name: node-exporter
   rules:
   - alert: HostOutOfMemory
     expr: (node_memory_MemAvailable_bytes / node_memory_MemTotal_bytes * 100 < 10) * on(instance) group_left (nodename) node_uname_info{nodename=~".+"}
@@ -362,7 +362,7 @@ groups:
     annotations:
       summary: Host requires reboot (instance {{ $labels.instance }})
       description: "{{ $labels.instance }} requires a reboot.\n  VALUE = {{ $value }}"
-  - name: prometheus
+- name: prometheus
   rules:
   - alert: PrometheusJobMissing
     expr: absent(up{job="prometheus"})

playbooks/roles/deploy_ssh_server_config/tasks/main.yaml

@@ -7,7 +7,7 @@
     ansible.builtin.template:
       force: true
       dest: /etc/ssh/sshd_config
-        mode: "0644"
+      mode: 0644
       owner: root
       group: root
       src: sshd_config.j2

playbooks/roles/infrastructure_authorized_keys/tasks/main.yaml

@@ -4,3 +4,4 @@
     user: chaos
     exclusive: true
     key: https://git.hamburg.ccc.de/CCCHH/infrastructure-authorized-keys/raw/branch/trunk/authorized_keys
+    

playbooks/roles/nextcloud/meta/main.yaml

@@ -17,4 +17,4 @@ dependencies:
   - role: docker_compose
     vars:
       docker_compose__compose_file_content: "{{ lookup('ansible.builtin.template', 'compose.yaml.j2') }}"
-      docker_compose__configuration_files: [ ]
+      docker_compose__configuration_files: []

playbooks/roles/nginx/defaults/main.yaml

@@ -1,5 +1,5 @@
 nginx__deploy_redirect_conf: true
 nginx__deploy_tls_conf: true
-nginx__configurations: [ ]
+nginx__configurations: []
 nginx__use_custom_nginx_conf: false
 nginx__custom_nginx_conf: ""

playbooks/roles/nginx/tasks/main/config_deploy.yaml

@@ -7,11 +7,11 @@
   when: nginx__use_custom_nginx_conf
   block:
     - name: when no `nginx.conf.ansiblesave` is present, save the current `nginx.conf`
-      when: not nginx__nginx_conf_ansiblesave_stat_result.stat.exists
+      when: nginx__nginx_conf_ansiblesave_stat_result.stat.exists == false
       ansible.builtin.copy:
         force: true
         dest: /etc/nginx/nginx.conf.ansiblesave
-        mode: "0644"
+        mode: 0644
         owner: root
         group: root
         remote_src: true
@@ -22,7 +22,7 @@
       ansible.builtin.copy:
         content: "{{ nginx__custom_nginx_conf }}"
         dest: "/etc/nginx/nginx.conf"
-        mode: "0644"
+        mode: 0644
         owner: root
         group: root
       become: true
@@ -36,7 +36,7 @@
       ansible.builtin.copy:
         force: true
         dest: /etc/nginx/nginx.conf
-        mode: "0644"
+        mode: 0644
         owner: root
         group: root
         remote_src: true
@@ -55,7 +55,7 @@
   ansible.builtin.get_url:
     force: true
     dest: /etc/nginx-mozilla-dhparam
-    mode: "0644"
+    mode: 0644
     url: https://ssl-config.mozilla.org/ffdhe2048.txt
   become: true
   notify: Restart `nginx.service`
@@ -71,7 +71,7 @@
       ansible.builtin.copy:
         force: true
         dest: /etc/nginx/conf.d/tls.conf
-        mode: "0644"
+        mode: 0644
         owner: root
         group: root
         src: tls.conf
@@ -89,7 +89,7 @@
       ansible.builtin.copy:
         force: true
         dest: /etc/nginx/conf.d/redirect.conf
-        mode: "0644"
+        mode: 0644
         owner: root
         group: root
         src: redirect.conf
@@ -104,7 +104,7 @@
   ansible.builtin.copy:
     content: "{{ item.content }}"
     dest: "/etc/nginx/conf.d/{{ item.name }}.conf"
-    mode: "0644"
+    mode: 0644
     owner: root
     group: root
   become: true