446 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
June	18dda95c46	remove max expired key	2025-10-13 22:12:31 +02:00
June	1f394a08dd	refactor .sops.yaml to make it less verbose ... Make it less verbose by introducing an anchor for the admin_gpg_keys.	2025-10-13 20:51:31 +02:00
June	f943e95e2e	fix ansible_lint issues ... Use prefix for role variables, have an ending newline at the end of files and use changed_when for command. Also exclude *.sops.yaml files from ansible-lint.	2025-10-13 17:43:00 +02:00
June	9b8e14f3c4	remove duplicate ansible_pull_hosts inventory group entry	2025-10-13 17:37:13 +02:00
June	952fbf85c5	ansible_pull(role): add ExecStartPost step rebooting the hosts, if nec. ... Add ExecStartPost step rebooting the hosts, if necessary.	2025-10-13 17:23:08 +02:00
June	bd281713f1	netbox(host): setup ansible_pull for host	2025-10-13 16:59:42 +02:00
June	648489ed09	define common ansible_pull configuration for chaosknoten inventory hosts ... Define common configuration as it should be the same for all hosts, just the ansible_pull__age_private_key needs to be set per host then.	2025-10-13 16:58:30 +02:00
June	434ddfc955	ansible_pull(role): introduce ansible_pull role ... Introduce ansible_pull role for setting up automatic ansible_pull runs. Also add accompanying host group and playbook play.	2025-10-13 16:56:18 +02:00
June	8cb6ab3d04	reboot(role): intro. reboot role, which handles local conns. gracefully ... Also use this role instead of plain ansible.builtin.reboot. This is in preparation for using ansible_pull as we don't want to have ansible.builtin.reboot fail local playbook runs.	2025-10-13 16:56:18 +02:00
June	1322bcec58	reverse proxy configuration for element-admin	2025-10-12 20:20:02 +02:00
June	1eaf85501f	reverse proxy configuration for matrix authentication service	2025-10-12 05:28:43 +02:00
June	dec68ab994	sunders(host): initialize sunders host	2025-10-11 20:52:26 +02:00
c6ristian	2ae8692603	grafana: set 2m for DHCP check ... so that service restart dont create a alert	2025-09-12 13:21:23 +02:00
c6ristian	1355d4d834	grafana: make alerts better for fux	2025-09-09 19:30:53 +02:00
Stefan Bethke	592afdced9	add waybackproxy	2025-09-06 11:39:05 +02:00
Stefan Bethke	13a8dc9b6f	Fix name, cleanup	2025-08-02 10:05:58 +02:00
Stefan Bethke	9c50708b4e	Add second DECT	2025-08-02 09:43:18 +02:00
Stefan Bethke	cbb4beceb6	Add Werkstatt phone	2025-08-02 09:41:48 +02:00
June	9f87fa0225	reverse proxy configuration for cryptoparty website and staging env.	2025-07-23 20:56:19 +02:00
c6ristian	72489be8bd	updatekeys for junes new key	2025-07-20 20:29:22 +02:00
June	8bc9534ce6	set junes new key	2025-07-20 20:20:41 +02:00
c6ristian	2e66e5de3b	grafana: enable promql-experimental-functions	2025-07-20 19:09:59 +02:00
c6ristian	a4c703b185	grafana: there are more metrics now	2025-07-18 21:23:39 +02:00
c6ristian	9f0c276240	grafana: setup sendAlert = false receiver to mute alert	2025-07-16 22:55:07 +02:00
Stefan Bethke	c119f91aeb	Notrufnummern dazu	2025-07-11 19:37:19 +02:00
Stefan Bethke	e628dcbce2	Legacy-Yate mit eigenem Eintrag	2025-07-11 19:37:05 +02:00
c6ristian	d734a1cc6c	grafana: accept WAL from remote write	2025-07-09 00:27:56 +02:00
Stefan Bethke	ef4b45925c	Move lines over to yate ... Basic functionality should be working for incoming calls: * Fux Intercom to 1337 * Fonial to the Hamburg number * EPVPN Still to do: clean up internal extensions and more extensive testing	2025-07-06 19:07:27 +02:00
Stefan Bethke	2edb3443d6	Kick yate when config file changes ... closes #29	2025-07-06 17:32:23 +02:00
Stefan Bethke	4e651bca25	Fix password fro FB account	2025-07-05 11:10:05 +02:00
Stefan Bethke	2a322f9c85	Add production secrets ... Also use the correct file name for the SOPS secrets	2025-07-05 11:05:26 +02:00
Stefan Bethke	3a80459fa0	junes key has been renewed	2025-07-05 10:51:01 +02:00
Stefan Bethke	eefcbe0c43	Add yate	2025-07-04 20:51:14 +02:00
Stefan Bethke	4c4ca9127a	Comment out expired key	2025-07-04 20:51:05 +02:00
c6ristian	5863b2f9e3	ntfy: iOS instant notifications	2025-06-30 21:11:48 +02:00
c6ristian	a49b8b6d13	cloud: bump nextcloud version to 31	2025-06-29 20:54:32 +02:00
c6ristian	ff5f8ffc80	ntfy-alertmanager silence now works	2025-06-12 20:04:02 +02:00
c6ristian	1cc4ca6947	ntfy-alertmanager setup silence in alertmanager	2025-06-12 19:48:18 +02:00
c6ristian	2cb9dc6dae	grafana dinge versuchen	2025-06-12 19:20:03 +02:00
c6ristian	0a50ee470a	grafana: add email alerts, and fix some rules	2025-06-10 21:22:53 +02:00
c6ristian	db99b153e4	grafana: make ntfy messages look a bit better	2025-06-05 00:45:45 +02:00
c6ristian	00bcd45111	grafana: alertmanager settings	2025-06-04 22:36:57 +02:00
c6ristian	7900e458aa	ntfy: fix websocket	2025-06-04 22:36:17 +02:00
c6ristian	5fe5304463	alertmanager ... set repeat_interval for fux and try restore telegram channel	2025-06-04 03:01:12 +02:00
c6ristian	9b444ec4c4	rules eval	2025-06-03 18:33:20 +02:00
c6ristian	75bf485eac	Alloy: enable collector systemd	2025-06-03 01:11:39 +02:00
c6ristian	06c1ebbd5f	grafana: fix remote write	2025-06-02 23:02:19 +02:00
c6ristian	3a9673b113	ntfy alerts	2025-06-02 22:42:37 +02:00
Stefan Bethke	15e200d96d	Merge branch 'main' of git.hamburg.ccc.de:CCCHH/ansible-infra	2025-06-02 21:12:10 +02:00
Stefan Bethke	36273da78b	Also allow IPv4	2025-06-02 21:12:08 +02:00