Stefan Bethke
32b5f147bc
/ build (pull_request) Successful in 47s
/ Ansible Lint (push) Successful in 5m31s
/ Ansible Lint (pull_request) Successful in 4m35s
Manage the CCCHH browser authentication flow as YAML ...
Adds a keycloak_auth_flow role that locally validates flow
definitions (structure, nesting depth, known provider IDs, and a set
of Keycloak authentication-flow gotchas: conditions silently ignored
outside a Conditional subflow, keycloak/keycloak#29515's OTP+WebAuthn
sibling bug, conditional-credential config shape/semantics, and more)
before deploying them idempotently via
middleware_automation.keycloak.keycloak_authentication_v2.
Includes the CCCHH realm's actual "browser passkey and token" flow
(the realm's real browserFlow binding, not the untouched built-in
"browser" flow), exported from the live server so it's now reviewable
and redeployable from this repo instead of only editable in the
Keycloak admin console.
2026-09-02 11:07:45 +02:00
move roles, files and templates dirs out of playbook dir into root dir
2024-12-08 02:55:25 +01:00
fix: alloy role the suites for deb repo must be stable
2026-07-23 22:08:58 +02:00
consider ansible-pull jobs failed after 30 minutes
2026-05-13 16:53:57 +02:00
reboot(role): intro. reboot role, which handles local conns. gracefully
2025-10-13 16:56:18 +02:00
base_config: only install kitty-terminfo, not kitty
2026-08-11 23:55:03 +02:00
certbot(role): support DNS-01 certs using acme-dns
2026-03-31 16:48:00 +02:00
ssh_config: also enable sntrup761x25519-sha512 for Debain 13
2025-11-11 22:47:42 +01:00
deploy_systemd_journal_config(role): Disable ForwardToSyslog
2026-05-15 19:25:44 +02:00
tag plays in playbooks (instead of tasks in roles)
2026-05-19 00:24:10 +02:00
docker(role): document gVisor issue with user-def. br. and provide help
2026-07-03 03:42:18 +02:00
specify that docker_compose role may not be included twice
2026-07-29 14:16:04 +02:00
distribution_check(role): remove role as it's not really needed
2026-02-09 17:49:49 +01:00
add configuration required for dooris -> spaceapid integration
2026-08-11 20:54:27 +02:00
fix foobazdmx role
2025-11-06 21:19:20 +01:00
forgejo_runner(role): create role for setting up Forgejo Runner install
2026-07-03 03:42:18 +02:00
move roles, files and templates dirs out of playbook dir into root dir
2024-12-08 02:55:25 +01:00
fix ansible-lint warnings
2026-08-11 17:38:51 +02:00
Manage the CCCHH browser authentication flow as YAML
2026-09-02 11:07:45 +02:00
dns: validate zone files before apply in knot role
2026-06-10 16:17:58 +02:00
msmtp(role): introduce msmtp role
2025-10-14 01:40:46 +02:00
netbox(role): fix oidc integration by no longer using is_staff
2026-01-13 02:25:06 +01:00
certbot(role): don't use certbot__version_spec anymore as its not used
2026-03-01 20:08:49 +01:00
nftables(role): reload instead of restart
2026-05-06 14:19:38 +02:00
distribution_check(role): remove role as it's not really needed
2026-02-09 17:49:49 +01:00
remove distribution checks
2025-11-06 21:16:42 +01:00
for non-verbose output hide user passwords in postgresql role
2025-02-15 20:06:55 +01:00
reboot(role): intro. reboot role, which handles local conns. gracefully
2025-10-13 16:56:18 +02:00
add redis role for ensuring redis is installed from distro packages
2025-02-15 06:23:04 +01:00
renovate(role): add cleanup service and timer for renovate volume
2026-05-19 00:23:26 +02:00
fix ansible-lint warnings
2026-08-11 17:38:51 +02:00
systemd_networkd(role),router(host): support global config to fix forw.
2026-01-18 19:21:33 +01:00
transmission(role): running the handler should always report changed
2026-07-08 00:59:02 +02:00
unbound(role): also over write fallback_dns in resolvd
2026-08-07 23:36:22 +02:00
Stefan Bethke
32b5f147bc