47 commits

Author	SHA1	Message	Date
June	0f4fb68c97	netbox(role): don't try to deploy removed housekeeping service and timer ... https://github.com/netbox-community/netbox/releases/tag/v4.4.0 https://github.com/netbox-community/netbox/issues/18349	2025-10-30 05:25:26 +01:00
June	23ea666906	renovate(role): always pull and use full image source ... Ensure we're always running the latest Renovate version.	2025-10-30 05:13:23 +01:00
June	83fd868977	docker(role): use full image sources	2025-10-30 04:49:44 +01:00
June	3840553f9d	docker_compose(role): add support for deploying optional .env file ... This is needed for situations, where one wants to use a vendor-provided compose file and configure it using environment variables. Like for example: https://github.com/zammad/zammad-docker-compose	2025-10-24 22:05:54 +02:00
June	8f612d1d9c	renovate: add persistent volume for base (and therefore cache) dir	2025-10-22 19:42:20 +02:00
June	b46747d251	deploy_ssh_server_config(role): add Debian 13 sshd_config reference	2025-10-17 21:27:29 +02:00
June	8388657d33	renovate(role): introduce first basic Renovate role ... Sets up Renovate using Docker and systemd service and timer to run regularly. Also add accompanying host group and playbook play.	2025-10-16 17:42:13 +02:00
June	dce4e7c4d4	ansible_pull(role): add git as a dependency to ensure is installed	2025-10-16 09:40:34 +02:00
June	dea66771e0	ansible_pull(role): ensure SOPS is installed ... Also add the SOPS community collection as a requirement for this repo.	2025-10-15 02:33:42 +02:00
June	9afbc71801	ansible_pull(role): ensure role and collection dependencies are present	2025-10-15 02:18:07 +02:00
June	eadae7a09b	ansible_pull(role): add failure notifications	2025-10-14 22:20:27 +02:00
June	afceb886dc	msmtp(role): introduce msmtp role ... Introduce msmtp role for setting up msmtp for mail sending. Also add accompanying host group and playbook play.	2025-10-14 01:40:46 +02:00
June	f943e95e2e	fix ansible_lint issues ... Use prefix for role variables, have an ending newline at the end of files and use changed_when for command. Also exclude *.sops.yaml files from ansible-lint.	2025-10-13 17:43:00 +02:00
June	952fbf85c5	ansible_pull(role): add ExecStartPost step rebooting the hosts, if nec. ... Add ExecStartPost step rebooting the hosts, if necessary.	2025-10-13 17:23:08 +02:00
June	434ddfc955	ansible_pull(role): introduce ansible_pull role ... Introduce ansible_pull role for setting up automatic ansible_pull runs. Also add accompanying host group and playbook play.	2025-10-13 16:56:18 +02:00
June	8cb6ab3d04	reboot(role): intro. reboot role, which handles local conns. gracefully ... Also use this role instead of plain ansible.builtin.reboot. This is in preparation for using ansible_pull as we don't want to have ansible.builtin.reboot fail local playbook runs.	2025-10-13 16:56:18 +02:00
Stefan Bethke	2edb3443d6	Kick yate when config file changes ... closes #29	2025-07-06 17:32:23 +02:00
c6ristian	b0660deb71	fix: nginx role ... add defaults for nginx__deploy_htpasswds and nginx__htpasswds	2025-04-28 22:23:11 +02:00
c6ristian	456117a789	adding loki	2025-04-28 20:31:55 +02:00
June	3548c1f4d6	restart ssh service instead of rebooting as this should be fine ... Active connections should survive a restart of the service and testing also didn't show any issues.	2025-04-25 02:01:29 +02:00
June	0e4df5b590	nginx(role): make loop output manageable using loop_control label	2025-02-18 06:07:47 +01:00
June	7420ed6010	nginx(role): split up repo setup and install task lists to estab. conv. ... Split up repo setup and package installation after all to establish this as a convention (its already done this way in the docker role and was done this way in the nginx role before) to highlight that an external repo is used.	2025-02-18 05:43:39 +01:00
June	89f3e55eac	docker(role): use better naming	2025-02-18 05:35:45 +01:00
June	ce812fb006	docker(role): update README ... Document Debian 12 support, enhance wording, bring structure in line with the READMEs of more modern roles and remove unnecessary sections.	2025-02-18 05:33:30 +01:00
June	34b9ee2fa4	nginx(role): simplify description in README	2025-02-18 04:32:43 +01:00
June	344dd78981	nginx(role): use better naming, wording and file structure	2025-02-18 04:32:43 +01:00
June	9b2ef55f86	nginx(role): remove unneces. "hosts" and "entry points" sec. from README	2025-02-18 04:32:43 +01:00
June	5809e4015f	nginx(role): add "logging" to the reserved configuration names	2025-02-18 04:32:43 +01:00
June	3d22f7ffae	nginx(role): document Debian 12 support	2025-02-18 04:32:43 +01:00
June	4adf39d969	nginx(role): document arguments in README for better discoverability ... Document the role arguments in the README instead of in the argument_specs for better discoverability and readability.	2025-02-18 04:32:43 +01:00
June	2e9f73b46b	nginx(role): simplify ensuring that gnupg is installed ... Also improve naming.	2025-02-18 04:32:43 +01:00
June	df22074aeb	nginx(role): simplify installation by removing version spec ... We always just want the latest anyway and therefore don't use it, so no need to keep the complexity introduced by that setting. Also merge repo_setup and nginx_install task lists into one nginx_install task list as keeping two files isn't necessary. Finally improving naming a bit.	2025-02-18 04:32:43 +01:00
June	172d6472bc	nginx(role): remove unnecessary apt-get update step ... The nginx package gets installed with "update_cache: true" afterwards anyway, so the apt-get update step shouldn't be necessary.	2025-02-18 04:32:43 +01:00
Dario	7271426502	dokuwiki: add option to checkout custom design repo	2025-02-17 22:20:25 +01:00
June	496f122968	give ansible docker comp. cron jobs unique names to not overw. each oth. ... Give them unique names, so the latter doesn't overwrite the former. Also make the task names nicer.	2025-02-17 00:32:50 +01:00
June	4def1334d8	for non-verbose output hide user passwords in postgresql role	2025-02-15 20:06:55 +01:00
June	09a8551c8a	add option to netbox role for custom pipeline code for OIDC mapping ... Add option to netbox role for ensuring custom pipeline code for OIDC group and role mapping is either present or not. The custom pipeline code is licensed under the Creative Commons: CC BY-SA 4.0 license. See: https://github.com/goauthentik/authentik/blob/main/LICENSE https://github.com/goauthentik/authentik/blob/main/website/integrations/services/netbox/index.md https://docs.goauthentik.io/integrations/services/netbox/ 5676b1a468	2025-02-15 06:23:04 +01:00
June	783c36bcc1	add netbox role for ensuring netbox is deployed as specified ... The role takes over the deployment of netbox and its dependencies, while still requiring the user to provide the netbox version, db password and config as well as to set up a web server and handle stuff like creating users, etc.	2025-02-15 06:23:04 +01:00
June	9662995377	add postgresql role for ens. psql and opt. some dbs and users are set up ... Add postgresql role for ensuring postgresql is installed. Furthermore the role optionally takes some basic configuration to ensure databases with their owners and users are set up as specified. This is a requirement for a new netbox role.	2025-02-15 06:23:04 +01:00
June	fc24bfff5d	add redis role for ensuring redis is installed from distro packages ... This is a requirement for a new netbox role.	2025-02-15 06:23:04 +01:00
c6ristian	3139b41433	use the container name as journal tag not id ... Docker by default will use the container id as the journal tag when logging into systemd-journal. Using the container name makes easier to see which log belongs to which container.	2025-01-21 00:25:13 +01:00
c6ristian	a86b34cf34	set nginx logging to use journald	2025-01-19 20:30:53 +01:00
c6ristian	328ec744cc	Add base_config and deploy_systemd_journal_config	2025-01-19 20:30:05 +01:00
June	64343ae9ec	have the docker role conf. the Docker daemon to log to systemd journal	2025-01-14 23:19:38 +01:00
jtbx	4fff0a9d0d	dokuwiki: Refactor support for multiple OS versions	2024-12-08 19:48:48 +01:00
June	03e994b41f	dokuwiki: update role to support Debian 12	2024-12-08 18:37:41 +01:00
June	f16f8697c2	move roles, files and templates dirs out of playbook dir into root dir ... Because of how Ansible local relative search paths work, the global "files" and "templates" directories need to be next to the playbooks. However its not intuitive to look into the "playbooks" directory to find the files and templates for a host. Therefore move them out of the "playbooks" directory into the root directory and add symlinks so everything still works. Similarly for local roles, they also need to be next to the playbooks. So for a nicer structure, move the "roles" directory out into the root directory as well and add a symlink so everything still works. Also see: https://docs.ansible.com/ansible/latest/playbook_guide/playbook_pathing.html#resolving-local-relative-paths https://docs.ansible.com/ansible/latest/playbook_guide/playbooks_reuse_roles.html#storing-and-finding-roles	2024-12-08 02:55:25 +01:00