Ansible Playbooks and related configuration for CCCHH infrastructure https://infra-docs.hamburg.ccc.de/
  • Python 56.1%
  • Jinja 35.5%
  • Shell 7.9%
  • HTML 0.3%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Stefan Bethke 04f2b1d25c
All checks were successful
/ build (push) Successful in 31s
/ Ansible Lint (push) Successful in 3m47s
Limit the size of logs more severly
The goal is to:
* limit the amount of  (potentially) PII data by limiting retention time
* make sure the disk doesn't fill up with log data
* make it easier to look at logs on the system without having to wade through many old entries
2026-11-02 18:28:50 +01:00
.forgejo/workflows Update all stable non-major dependencies 2026-07-08 00:16:11 +00:00
.vscode vscode settings: exclude vendored collections and roles from search 2026-02-09 19:53:27 +01:00
ansible_collections alloy(role): pull in alloy role that works from fux (#112) 2026-07-23 20:34:02 +02:00
collections alloy(role): pull in alloy role that works from fux (#112) 2026-07-23 20:34:02 +02:00
docs update matrix moderation guidelines based on infra-team discussion 2026-11-01 22:58:26 +01:00
inventories Add matrix-sync compose setup 2026-10-29 15:50:04 +01:00
playbooks Add a role for Jitsi in Docker Compose 2026-10-08 10:23:17 +02:00
resources Limit the size of logs more severly 2026-11-02 18:28:50 +01:00
roles Limit the size of logs more severly 2026-11-02 18:28:50 +01:00
.ansible-lint ansible-lint: ignore more directories that aren't part of the repo 2026-10-29 15:50:53 +01:00
.editorconfig add .editorconfig to ensure some style and format consistency 2024-11-23 02:11:48 +01:00
.gitignore general: update gitignore 2026-08-07 22:55:55 +02:00
.sops.yaml Add matrix-sync 2026-10-08 14:27:27 +02:00
.yamllint.yaml ansible-lint: ignore more directories that aren't part of the repo 2026-10-29 15:50:53 +01:00
ansible.cfg mute ansible discovered interpreter warning 2026-05-06 11:44:41 +02:00
docs_requirements.txt docs: fix code blocks overflowing and add syntax highlighting 2026-05-19 18:33:03 +02:00
LICENSE Add LICENSE 2023-04-15 14:28:45 +00:00
mkdocs.yml Add documentation style outline (#97) 2026-05-27 20:49:07 +02:00
README.md README.md: correct sentence 2026-08-07 22:55:56 +02:00
renovate.json bypass pull request workflow for automatic patch updates 2026-09-22 22:10:44 +02:00
requirements.yml alloy(role): pull in alloy role that works from fux (#112) 2026-07-23 20:34:02 +02:00

CCCHH Ansible Repository

Folgende Geräte und Server werden duch dieses Ansible Repository verwaltet:

  • Diverse VMs im z9 (PVE Cluster)
  • Diverse VMs auf dem Chaosknoten

Host-spezifische Konfigurationsdateien liegen unter resources/ und werden für jeweils über eine host_vars-Datei im Inventory geladen.

Galaxy-Collections und -Rollen

Für einige Aspekte verwenden wir Collections und Rollen aus Ansible Galaxy. Diese werden in ansible_collections bzw. galaxy-roles hier im Repo vorgehalten.

Um unsere gevendorte Version zu aktualisieren, kann man folgendes machen:

ansible-galaxy install -r requirements.yml
ansible-galaxy role install -r requirements.yml

Playbook nur für einzelne Hosts ausführen

Ein paar der Hosts haben den selben Namen, was es etwas schwieriger macht, das Playbook nur für einen der Hosts auszuführen, z. B. public-reverse-proxy. Die Kombination aus --inventory und --limit führt zum Erfolg:

ansible-playbook playbooks/deploy.yaml --inventory inventories/chaosknoten/hosts.yaml --limit public-reverse-proxy

License

This CCCHH ansible-ccchh repository is licensed under the MIT License.
custom_pipeline_oidc_group_and_role_mapping.py is licensed under the Creative Commons: CC BY-SA 4.0 license.