CCCHH/ansible-infra
CCCHH/ansible-infra
Watch
3
2
Fork
You've already forked ansible-infra
 1
Code Issues 20 Pull requests 19 Wiki Activity Actions
ansible-infra/inventories/chaosknoten/host_vars
History
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Stefan Bethke 32b5f147bc
All checks were successful
/ build (pull_request) Successful in 47s
Details
/ Ansible Lint (push) Successful in 5m31s
Details
/ Ansible Lint (pull_request) Successful in 4m35s
Details
Manage the CCCHH browser authentication flow as YAML 
Adds a keycloak_auth_flow role that locally validates flow
definitions (structure, nesting depth, known provider IDs, and a set
of Keycloak authentication-flow gotchas: conditions silently ignored
outside a Conditional subflow, keycloak/keycloak#29515's OTP+WebAuthn
sibling bug, conditional-credential config shape/semantics, and more)
before deploying them idempotently via
middleware_automation.keycloak.keycloak_authentication_v2.

Includes the CCCHH realm's actual "browser passkey and token" flow
(the realm's real browserFlow binding, not the untouched built-in
"browser" flow), exported from the live server so it's now reviewable
and redeployable from this repo instead of only editable in the
Keycloak admin console.
2026-09-02 11:07:45 +02:00
..
acmedns.sops.yaml sops: darios key expired, so remove for now 2026-05-20 04:09:28 +02:00
acmedns.yaml certbot(role): don't use certbot__version_spec anymore as its not used 2026-03-01 20:08:49 +01:00
auth-dns.sops.yaml sops: darios key expired, so remove for now 2026-05-20 04:09:28 +02:00
auth-dns.yaml dns: remove ns.vie.ccc.de from already migrated zones 2026-06-10 16:05:51 +02:00
ccchoir.sops.yaml sops: darios key expired, so remove for now 2026-05-20 04:09:28 +02:00
ccchoir.yaml ccchoir: stick to major version and cronjob update 2026-07-26 13:21:41 +02:00
chaosknoten.yaml dep._hypervisor(playb.): introduce play for setting up vm template gen. 2025-02-23 22:42:58 +01:00
cloud.sops.yaml sops: darios key expired, so remove for now 2026-05-20 04:09:28 +02:00
cloud.yaml Update git.hamburg.ccc.de/ccchh/oci-images/nextcloud Docker tag to v34 2026-07-23 20:16:22 +00:00
diday-staging-runner.sops.yaml sops: darios key expired, so remove for now 2026-05-20 04:09:28 +02:00
diday-staging-runner.yaml diday-staging-runner(host): deploy host runner for diday staging deploy 2026-04-28 20:12:27 +02:00
eh22-wiki.sops.yaml sops: darios key expired, so remove for now 2026-05-20 04:09:28 +02:00
eh22-wiki.yaml certbot(role): don't use certbot__version_spec anymore as its not used 2026-03-01 20:08:49 +01:00
forgejo-runner-external.sops.yaml forgejo-runner-external(host): configure forgejo-runner setup 2026-07-08 00:42:50 +02:00
forgejo-runner-external.yaml forgejo-runner-external(host): configure forgejo-runner setup 2026-07-08 00:42:50 +02:00
forgejo-runner.sops.yaml forgejo-runner(host): configure forgejo-runner setup 2026-07-03 03:42:18 +02:00
forgejo-runner.yaml forgejo-runner(host): configure forgejo-runner setup 2026-07-03 03:42:18 +02:00
git-pages.yaml Use fixed port range to allow for better fw rules 2026-08-02 17:25:30 +02:00
grafana.sops.yaml sops: darios key expired, so remove for now 2026-05-20 04:09:28 +02:00
grafana.yaml Revert "deploy alerta on grafana.hosts.hamburg.ccc.de" 2026-04-29 19:05:15 +02:00
jitsi.sops.yaml jitsi dazu 2026-07-29 22:52:13 +02:00
keycloak.sops.yaml sops: darios key expired, so remove for now 2026-05-20 04:09:28 +02:00
keycloak.yaml Manage the CCCHH browser authentication flow as YAML 2026-09-02 11:07:45 +02:00
lists.sops.yaml Set up Keycloak to Mailman sync for chaos@ 2026-07-26 16:19:41 +02:00
lists.yaml Change confirmation lifetime to 7d 2026-08-16 09:28:42 +02:00
mjolnir.sops.yaml sops: darios key expired, so remove for now 2026-05-20 04:09:28 +02:00
mjolnir.yaml mjolnir: deploy mjolnir using docker compose 2026-02-11 03:10:43 +01:00
mumble.sops.yaml sops: darios key expired, so remove for now 2026-05-20 04:09:28 +02:00
mumble.yaml certbot(role): don't use certbot__version_spec anymore as its not used 2026-03-01 20:08:49 +01:00
netbox.sops.yaml sops: darios key expired, so remove for now 2026-05-20 04:09:28 +02:00
netbox.yaml Update all stable non-major dependencies 2026-07-08 00:16:11 +00:00
ntfy.sops.yaml sops: darios key expired, so remove for now 2026-05-20 04:09:28 +02:00
ntfy.yaml certbot(role): don't use certbot__version_spec anymore as its not used 2026-03-01 20:08:49 +01:00
onlyoffice.sops.yaml sops: darios key expired, so remove for now 2026-05-20 04:09:28 +02:00
onlyoffice.yaml certbot(role): don't use certbot__version_spec anymore as its not used 2026-03-01 20:08:49 +01:00
pad.sops.yaml sops: darios key expired, so remove for now 2026-05-20 04:09:28 +02:00
pad.yaml Upgrade Hedgdedoc to 1.11.1 2026-07-24 23:26:23 +02:00
pretalx.sops.yaml sops: darios key expired, so remove for now 2026-05-20 04:09:28 +02:00
pretalx.yaml pretalx(host): move to dns-01-acme-dns as http-01 failed for cfp.eh22 2026-03-31 17:51:06 +02:00
public-reverse-proxy.sops.yaml sops: darios key expired, so remove for now 2026-05-20 04:09:28 +02:00
public-reverse-proxy.yaml reorganize (config) files and templates into one "resources" dir 2024-12-08 02:55:25 +01:00
renovate.sops.yaml sops: darios key expired, so remove for now 2026-05-20 04:09:28 +02:00
renovate.yaml renovate(host): set up Renovate using role and exisiting config 2025-10-16 17:52:30 +02:00
router.yaml systemd_networkd(role),router(host): support global config to fix forw. 2026-01-18 19:21:33 +01:00
spaceapiccc.sops.yaml sops: darios key expired, so remove for now 2026-05-20 04:09:28 +02:00
spaceapiccc.yaml certbot(role): don't use certbot__version_spec anymore as its not used 2026-03-01 20:08:49 +01:00
sunders.sops.yaml sops: darios key expired, so remove for now 2026-05-20 04:09:28 +02:00
sunders.yaml sunders(host): move to dns-01-acme-dns 2026-03-31 16:59:02 +02:00
tickets.sops.yaml sops: darios key expired, so remove for now 2026-05-20 04:09:28 +02:00
tickets.yaml certbot(role): don't use certbot__version_spec anymore as its not used 2026-03-01 20:08:49 +01:00
wiki.sops.yaml sops: darios key expired, so remove for now 2026-05-20 04:09:28 +02:00
wiki.yaml certbot(role): don't use certbot__version_spec anymore as its not used 2026-03-01 20:08:49 +01:00
zammad.sops.yaml sops: darios key expired, so remove for now 2026-05-20 04:09:28 +02:00
zammad.yaml certbot(role): don't use certbot__version_spec anymore as its not used 2026-03-01 20:08:49 +01:00