Ansible Playbooks and related configuration for CCCHH infrastructure https://infra-docs.hamburg.ccc.de/
  • Python 56.6%
  • Jinja 34.8%
  • Shell 8.1%
  • HTML 0.3%
Find a file
forestcat 825634498a
Some checks failed
/ Ansible Lint (pull_request) Has been cancelled
/ build (pull_request) Has been cancelled
/ Ansible Lint (push) Has been cancelled
fix setup instructions to use uv run for all commands
2026-05-23 22:36:11 +02:00
.forgejo/workflows docs: add mkdocs config and CI for building infra-docs website 2026-05-19 18:33:03 +02:00
.vscode vscode settings: exclude vendored collections and roles from search 2026-02-09 19:53:27 +01:00
ansible_collections Vendor Galaxy Roles and Collections 2026-02-06 22:07:16 +01:00
collections prometheus remote write with alloy using it 2025-04-30 01:11:17 +02:00
docs fix setup instructions to use uv run for all commands 2026-05-23 22:36:11 +02:00
inventories cloud: bump nextcloud to 33 and postgres 15.18 2026-05-20 19:49:53 +02:00
playbooks tag plays in playbooks (instead of tasks in roles) 2026-05-19 00:24:10 +02:00
resources add configuration for infra-docs and infra-docs staging 2026-05-19 18:33:03 +02:00
roles disable dnssec for catalog zones on auth-dns 2026-05-19 11:01:52 +02:00
.ansible-lint ansible-lint: add collections and roles directories to excluded paths 2026-02-06 22:27:18 +01:00
.editorconfig add .editorconfig to ensure some style and format consistency 2024-11-23 02:11:48 +01:00
.gitignore Ignore pycaches 2026-02-22 18:21:15 +01:00
.sops.yaml sops: darios key expired, so remove for now 2026-05-20 04:09:28 +02:00
.yamllint.yaml add .yamllint.yaml for some nicer yaml configuration for ansible-lint 2024-11-23 02:31:31 +01:00
ansible.cfg mute ansible discovered interpreter warning 2026-05-06 11:44:41 +02:00
docs_requirements.txt docs: fix code blocks overflowing and add syntax highlighting 2026-05-19 18:33:03 +02:00
LICENSE Add LICENSE 2023-04-15 14:28:45 +00:00
mkdocs.yml add some documentation structure 2026-05-23 19:37:51 +02:00
README.md docs: move information on secrets and sops into docs 2026-05-20 22:54:32 +02:00
renovate.json renovate: make exclusion of CalVer non-patch/-minor upgrades work 2026-03-06 19:53:24 +01:00
requirements.yml add missing grafana.grafana collection dependency 2026-01-25 23:55:57 +01:00

CCCHH Ansible Repository

Folgende Geräte und Server werden duch dieses Ansible Repository verwaltet:

  • Diverse VMs auf dem ThinkCCCluster
  • Diverse VMs auf dem Chaosknoten

Host-spezifische Konfigurationsdateien liegen unter resources/ und werden für jeweils über eine host_vars-Datei im Inventory geladen.

Galaxy-Collections und -Rollen

Für einige Aspekte verwenden wir Collections und Rollen aus Ansible Galaxy. Diese werden in ansible_collections bzw. galaxy-roles hier im Repo vorgehalten.

Um unsere gevendorte Version zu aktualisieren, kann man folgendes machen:

ansible-galaxy install -r requirements.yml
ansible-galaxy role install -r requirements.yml

Playbook nur für einzelne Hosts ausführen

Ein paar der Hosts haben den selben Namen, was es etwas schwieriger macht, das Playbook nur für einen der Hosts auszuführen, z. B. public-reverse-proxy. Die Kombination aus --inventory und --limit führt zum Erfolg:

ansible-playbook playbooks/deploy.yaml --inventory inventories/chaosknoten/hosts.yaml --limit public-reverse-proxy

License

This CCCHH ansible-ccchh repository is licensed under the MIT License.
custom_pipeline_oidc_group_and_role_mapping.py is licensed under the Creative Commons: CC BY-SA 4.0 license.