Commit graph

Select branches

Hide pull requests

alloy

feature/add-new-router

fix_ansible_lint

fux-alerts

main

move_to_sops

renovate/all-stable-minor-patch

renovate/docker.io-library-mariadb-12.x

renovate/docker.io-library-postgres-18.x

renovate/docker.io-library-redis-8.x

router-killing-turing

#10

#11

#12

#13

#14

#15

#16

#17

#18

#19

#20

#21

#22

#23

#25

#26

#28

#31

#32

#33

#34

#36

#37

#38

#39

#40

#42

#43

#44

#46

#47

#49

#50

#51

#52

#53

#54

#55

#56

#57

#61

#62

#63

#64

#65

#7

#8

#9

Mono Color

• 17ba7c04f2
  
  acmdns(host): expose and monitor health endpoint main June 2026-02-01 23:14:15 +01:00
• 536eedeffc
  
  status(host): add monitoring for ACME DNS June 2026-02-01 22:44:42 +01:00
• 397285655b
  
  status(host): add monitoring for spaceapi.ccc.de June 2026-02-01 21:38:57 +01:00
• 8e75f1ad14
  
  status(host): add monitoring for cpu.ccc.de and aliases June 2026-02-01 21:30:40 +01:00
• c3b20abab3
  
  status(host): use custom alert for Matrix to make it work with PAT June 2026-02-01 20:49:33 +01:00
• 2ad62923b2 Update docker.io/library/redis Docker tag to v8 renovate/docker.io-library-redis-8.x Renovate 2026-01-28 14:45:59 +00:00
• ac342ec044 Update docker.io/library/postgres Docker tag to v18 renovate/docker.io-library-postgres-18.x Renovate 2026-01-28 14:45:58 +00:00
• e5d88ed8f8 Update docker.io/library/mariadb Docker tag to v12 renovate/docker.io-library-mariadb-12.x Renovate 2026-01-28 14:45:56 +00:00
• d1b371e74b Update all stable non-major dependencies renovate/all-stable-minor-patch Renovate 2026-01-28 14:45:52 +00:00
• 9c2fe5ea9b
  
  public-reverse-proxy(host): remove cpuccc.hamburg.ccc.de alias June 2026-01-28 15:32:29 +01:00
• 06ae220857 Remove spaceapiccc.hamburg.ccc.de Stefan Bethke 2026-01-27 22:35:28 +01:00
• 1f2a08cf15 Spell stuff correctly Stefan Bethke 2026-01-27 16:30:45 +01:00
• 2e5b0ab940
  
  nginx(role): to not log IPs, just disable the access log June 2026-01-27 18:18:17 +01:00
• 3bba747dab Configure seperate server for spaceapi.ccc.de Stefan Bethke 2026-01-27 16:30:00 +01:00
• b90a57ffb0 Merge branch 'main' of git.hamburg.ccc.de:CCCHH/ansible-infra Stefan Bethke 2026-01-27 16:21:20 +01:00
• ad783e4a15 now in production Stefan Bethke 2026-01-27 16:21:18 +01:00
• 200e8019ed
  
  public-reverse-proxy: add config for local/lokal.ccc.de June 2026-01-27 15:47:52 +01:00
• 4f0c4bb276 Explain need to re-encrypt after adding a host Stefan Bethke 2026-01-27 09:47:01 +01:00
• 3abc375984 Re-encrypt for spaceapiccc Stefan Bethke 2026-01-27 09:46:47 +01:00
• c8edde4d11 Pretty up Stefan Bethke 2026-01-26 00:20:27 +01:00
• ca20721f04
  
  add missing grafana.grafana collection dependency June 2026-01-25 23:55:57 +01:00
• 42b23eb181
  
  get collections from repos directly instead of using Ansible Galaxy June 2026-01-25 23:55:48 +01:00
• 0f3cd2c70a amcedns to enable Let's Encrypt DNS-01 challenges Stefan Bethke 2026-01-25 22:40:22 +01:00
• c33ae36af3 Enable IPv6 by default Stefan Bethke 2026-01-25 22:21:45 +01:00
• 2cd0811b29 Fix warning Stefan Bethke 2026-01-25 22:21:25 +01:00
• 6a92aa68c1
  
  light: fix tls cert expiring and not renewing chris 2026-01-25 22:36:30 +01:00
• 5693989c38
  
  add alloy to the z9 hosts and some cleanup chris 2026-01-25 20:58:14 +01:00
• c7d51af5b4
  
  rollout Alloy to replace prometheus_node_exporter chris 2026-01-25 20:03:13 +01:00
• 995dbb06e2
  
  wip: alloy June 2026-01-04 19:32:42 +01:00
• 11779ab21d
  
  grafana: get alertmanager to be more chill chris 2026-01-25 21:41:20 +01:00
• 9f3003f1e7
  
  add alloy to the z9 hosts and some cleanup alloy chris 2026-01-25 20:58:14 +01:00
• 8f7990acc0
  
  docs: add ansible_pull_hosts to the desired minimum roles/groups June 2026-01-25 21:17:28 +01:00
• c6c0272448
  
  docs: add section on conf. monitoring with Gatus (status.hamburg.ccc.de) June 2026-01-25 21:16:38 +01:00
• 1523b15952
  
  docs: improve formatting and wording a bit to make things clearer June 2026-01-25 21:11:07 +01:00
• a5d291cea8
  
  spaceapiccc(host): setup ansible-pull June 2026-01-25 20:58:57 +01:00
• 652aa32e21
  
  docker_compose(role): document new build and pull arguments June 2026-01-25 20:49:39 +01:00
• 10388c8333
  
  rollout Alloy to replace prometheus_node_exporter chris 2026-01-25 20:03:13 +01:00
• 0939771d08
  
  public-reverse-proxy(host): add entries for cpu.ccc.de June 2026-01-25 20:22:44 +01:00
• 29af58ff94
  
  wip: alloy June 2026-01-04 19:32:42 +01:00
• c285694aaa Add age private key Stefan Bethke 2026-01-25 15:47:41 +01:00
• d35f1cc779 GPG must be installed for the docker role to be able to add the repo Stefan Bethke 2026-01-25 15:31:42 +01:00
• cee1fe970a Add spaceapiccc as a replacement for erfafoo Stefan Bethke 2026-01-25 14:03:54 +01:00
• 0c782caee7 Explain what all needs to be added for a new host Stefan Bethke 2026-01-25 14:03:34 +01:00
• f887de25c5 make building and pulling configurable Stefan Bethke 2026-01-25 13:26:20 +01:00
• 664b9115b8 Fix warning Stefan Bethke 2026-01-25 13:01:52 +01:00
• b492472179 Explain how to add age key for ansible pull Stefan Bethke 2026-01-25 12:12:30 +01:00
• ddaa069204
  
  status(host): configure Gatus to store more results and events June 2026-01-18 21:39:23 +01:00
• 28f80a85f3 status(host): Switch to nekover.se user for personal token fi 2026-01-18 19:47:19 +01:00
• d514688574
  
  systemd_networkd(role),router(host): support global config to fix forw. June 2026-01-18 19:21:33 +01:00
• d7b463ecb9
  
  status(host): fix token not working by using a new one June 2026-01-18 04:53:14 +01:00
• 0b6847493c Update actions/checkout action to v6 Renovate 2026-01-18 03:30:42 +00:00
• 744dc00ae5 Update https://github.com/ansible/ansible-lint action to v26 Renovate 2026-01-18 03:01:35 +00:00
• fe52127e82
  
  status(host): configure external status page and uptime monitoring host June 2026-01-18 01:26:52 +01:00
• 51bbdd42a2
  
  dooris(host): make certbot work June 2026-01-13 16:55:22 +01:00
• 428b5c70bc
  
  pretalx(host): roll back to pretalx v2025.1.0 for celery as well June 2026-01-13 14:19:57 +01:00
• 92601ab9ea
  
  renovate: add package rule for pretalx reclassifying major updates June 2026-01-13 03:48:34 +01:00
• 3e0fdfa8de
  
  pretalx(host): roll back to pretalx v2025.1.0 as v2025.2.2 doesn't work June 2026-01-13 03:43:28 +01:00
• 951ec7ebcd
  
  netbox(role): fix oidc integration by no longer using is_staff June 2026-01-13 02:25:06 +01:00
• a92e144cfc
  
  base_config(role): ensure base set of admin tools is installed June 2026-01-13 00:08:57 +01:00
• c638790819 Update all stable non-major dependencies Renovate 2026-01-12 02:30:47 +00:00
• 70461c98ba
  
  first run ansible_pull for router, then for all other hosts June 2026-01-12 03:29:06 +01:00
• 968e29ccb8
  
  do v6-only for internal proxy protocol communication June 2026-01-12 03:02:09 +01:00
• 255327952e
  
  ntfy(host): move to new network and hostname June 2026-01-11 03:57:11 +01:00
• 1971598e71
  
  pretalx(host): move to new network and hostname June 2026-01-11 03:22:11 +01:00
• 372f264bcb
  
  ccchoir(host): move to new network and hostname June 2026-01-11 01:29:15 +01:00
• 2fbb37db18
  
  grafana(host): move to new network and hostname June 2026-01-11 00:59:52 +01:00
• bb30e88404
  
  router(host): allowlist only certain icmpv6 types June 2026-01-11 00:29:16 +01:00
• a41b07949c
  
  zammad(host): move to new network and hostname June 2026-01-11 00:22:37 +01:00
• ff550cbd8a
  
  tickets(host): move to new network and hostname June 2026-01-11 00:00:18 +01:00
• 49e3ecb986
  
  netbox(host): move to new network and hostname June 2026-01-09 03:05:29 +01:00
• a622f21b54
  
  renovate(host): move to new network and hostname June 2026-01-07 18:46:27 +01:00
• 40b67c6bc3
  
  sunders(host): move to new network and hostname June 2026-01-07 18:46:16 +01:00
• fbd3ea5496
  
  base_config: disable cloud-init ssh module to avoid hostkey regeneration June 2026-01-07 18:09:48 +01:00
• 80ddb2efc9
  
  router: enable a DHCP server for the v4-NAT network as well June 2026-01-07 17:25:27 +01:00
• bb79d12819
  
  wip: alloy origin/alloy June 2026-01-04 19:32:42 +01:00
• a328e92971 Should be compatible with trixie/13 Stefan Bethke 2026-01-03 14:03:26 +01:00
• 25db54b8ad Make sure pip is installed Stefan Bethke 2026-01-03 14:02:56 +01:00
• 944c8cde82
  
  onlyoffice(host): move to new network and hostname June 2025-12-17 03:34:39 +01:00
• 366456eff8
  
  keycloak(host): move to new network and hostname June 2025-12-16 21:50:40 +01:00
• 1ca71a053e
  
  pad(host): move to new network and hostname June 2025-12-16 21:12:21 +01:00
• b9add5bda3
  
  cloud(host): set correct new proxy protocol reverse proxy ip June 2025-12-16 20:59:15 +01:00
• 570600fce3
  
  eh22-wiki(host): move to new network and hostname June 2025-12-16 20:58:05 +01:00
• 5a476f2103
  
  cloud(host): move to new network and hostname June 2025-12-16 20:47:44 +01:00
• b72dee0d6d
  
  wiki(host): actually have nginx listen on v6 June 2025-12-16 19:52:24 +01:00
• 8b94a49f5e
  
  wiki(host): move to new network and internal hostname June 2025-12-16 19:23:33 +01:00
• 5f98dca56c
  
  router(host): expose public v6 networks June 2025-12-16 19:03:36 +01:00
• 66ee44366b public-reverse-proxy: New IP of wiki VM jtbx 2025-12-14 15:39:03 +01:00
• 212913fcc2
  
  router killing turing router-killing-turing June 2025-09-21 02:16:51 +02:00
• 183b91b9f2
  
  router(host): add nftables config for basic router functionality June 2025-09-20 23:34:17 +02:00
• d0618e3820
  
  nftables(role): introduce role for deploying nftables June 2025-09-20 21:38:39 +02:00
• a9e394da06
  
  router(host): add systemd-networkd-based network config June 2025-09-20 20:03:30 +02:00
• d6ba70523c
  
  systemd_networkd(role): introd. role for deploy. systemd-networkd config June 2025-09-20 20:05:02 +02:00
• 766aa125c4
  
  router(host): introduce router jtbx 2025-02-23 18:49:19 +01:00
• c39cb0e390
  
  we dont need to set a specific alloy version c6ristian 2025-12-06 22:11:53 +01:00
• df3710f019
  
  grafana: set alloy to version v1.11.3 c6ristian 2025-12-02 22:55:29 +01:00
• 0eaaf9227c Update all stable non-major dependencies Renovate 2025-11-19 13:30:39 +00:00
• ddab157600
  
  don't pin digests anymore June 2025-11-18 14:24:21 +01:00
• 80acd5fdc6
  
  grafana: store date for up to 28 days c6ristian 2025-11-11 23:03:59 +01:00
• 5f6000adca
  
  ssh_config: also enable sntrup761x25519-sha512 for Debain 13 c6ristian 2025-11-11 22:47:42 +01:00
• 6fea98ffd2 Redirect to 39c3 instead of eh22 Stefan Bethke 2025-11-07 20:09:02 +01:00