ansible-lint: ignore more directories that aren't part of the repo

.ansible-lint

@@ -3,7 +3,11 @@ skip_list:
   - "name[casing]"
 
 exclude_paths:
+  - .ansible/
   - .forgejo/
   - "**/*.sops.yaml"
   - ansible_collections/
+  - collections/
   - galaxy_roles/
+  - docs/
+  - resources/

.yamllint.yaml

@@ -1,5 +1,6 @@
 rules:
   brackets:
+    forbid: false
     min-spaces-inside: 1
     max-spaces-inside: 1
     min-spaces-inside-empty: 1

renovate.json

@@ -38,13 +38,10 @@
         "!git.hamburg.ccc.de/ccchh/oci-images/keycloak"
       ]
     },
-    // Automatically merge patch level updates
-    // https://docs.renovatebot.com/key-concepts/automerge/
     {
       "matchUpdateTypes": ["patch"],
-      "automerge": true,
+      "matchCurrentVersion": "!/^0/",
-      "ignoreTests": true,
+      "automerge": true
-      "automergeType": "branch"
     },
     {
       "matchDatasources": ["docker"],

resources/chaosknoten/auth-dns/zones/hamburg.ccc.de.zone

@@ -228,7 +228,10 @@ rproxy-intern                       IN  A               172.31.17.180
                                     IN  AAAA            2a00:14b0:f000:23::80
                                     IN  MX 10           cow.hamburg.ccc.de.
 
-bildungsurlaub                      IN  CNAME           public-reverse-proxy
+bildungsurlaub                      IN  CNAME           rproxy
+doku                                IN  CNAME           rproxy
+test                                IN  CNAME           rproxy
+www.test                            IN  CNAME           rproxy
 eh2003                              IN  CNAME           public-reverse-proxy
 www.eh2003                          IN  CNAME           public-reverse-proxy
 easterhegg2003                      IN  CNAME           public-reverse-proxy
@@ -507,6 +510,8 @@ pretalx.hosts                       IN  AAAA            2a00:14b0:42:102::10
 ntfy.hosts                          IN  AAAA            2a00:14b0:42:102::11
 spaceapiccc.hosts                   IN  AAAA            2a00:14b0:42:102::12
 acmedns.hosts                       IN  AAAA            2a00:14b0:42:102::13
+www2.hosts                          IN  AAAA            2a00:14b0:42:102::14
+www3.hosts                          IN  AAAA            2a00:14b0:42:102::15
 diday-staging-runner.hosts          IN  AAAA            2a00:14b0:42:102::16
 public-web-static.hosts             IN  AAAA            2a00:14b0:42:102::17
 forgejo-actions-runner.hosts        IN  AAAA            2a00:14b0:42:102::18

resources/chaosknoten/draupnir/docker_compose/config.yaml.j2

@@ -15,9 +15,6 @@ automaticallyRedactForReasons:
   - "porn"
   - "harassmet"
 
-# set to low value to have Draupnir chain consecutive backgrounded operations faster
-backgroundDelayMS: 10
-
 # currently not working because /_synapse is not routed via reverse proxy
 pollReports: false
 

resources/chaosknoten/grafana/docker_compose/compose.yaml.j2

@@ -59,7 +59,7 @@ services:
       - /dev/null:/etc/prometheus/pve.yml
 
   loki:
-    image: docker.io/grafana/loki:3.7.8
+    image: docker.io/grafana/loki:3.7.3
     container_name: loki
     ports:
       - 13100:3100

resources/chaosknoten/keycloak/docker_compose/compose.yaml.j2

@@ -22,7 +22,7 @@
 
 services:
   keycloak:
-    image: git.hamburg.ccc.de/ccchh/oci-images/keycloak:26.7.4
+    image: git.hamburg.ccc.de/ccchh/oci-images/keycloak:26.7.2
     pull_policy: always
     restart: unless-stopped
     command: start --optimized

resources/chaosknoten/pretalx/docker_compose/compose.yaml.j2

@@ -23,7 +23,7 @@ services:
       - pretalx_net
 
   static:
-    image: docker.io/library/nginx:1.31.6
+    image: docker.io/library/nginx:1.31.2
     restart: unless-stopped
     volumes:
       - public:/usr/share/nginx/html

resources/chaosknoten/public-reverse-proxy/nginx/acme_challenge.conf

@@ -92,7 +92,6 @@ map $host $upstream_acme_challenge_host {
     ueberwachungsfrei.eu public-web-static.hosts.hamburg.ccc.de:31820;
     überwachungsfrei.eu public-web-static.hosts.hamburg.ccc.de:31820;
     xn--berwachungsfrei-yvb.eu public-web-static.hosts.hamburg.ccc.de:31820;
-    bildungsurlaub.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:31820;
     default "";
 }
 

resources/chaosknoten/public-reverse-proxy/nginx/nginx.conf

@@ -3,7 +3,6 @@
 
 user  nginx;
 worker_processes  auto;
-worker_rlimit_nofile  2050; # should be worker_connections*2 at least
 
 error_log  /var/log/nginx/error.log notice;
 pid        /var/run/nginx.pid;
@@ -116,7 +115,6 @@ stream {
         ueberwachungsfrei.eu public-web-static.hosts.hamburg.ccc.de:8443;
         überwachungsfrei.eu public-web-static.hosts.hamburg.ccc.de:8443;
         xn--berwachungsfrei-yvb.eu public-web-static.hosts.hamburg.ccc.de:8443;
-        bildungsurlaub.hamburg.ccc.de public-web-static.hosts.hamburg.ccc.de:8443;
     }
 
     server {