ViMaSter/ansible-infra
0
0
Fork 0
forked from CCCHH/ansible-infra
Code Pull requests Activity
485 commits 1 branch 0 tags 7.1 MiB
Commit graph

485 commits

This branch
This branch
All branches
Author SHA1 Message Date
June
a979fccd12
 		renovate: add custom regex manager for inventory vars dependencies 
Inspiration taken from/documentation:
https://docs.renovatebot.com/presets-customManagers/#custommanagersdockerfileversions
https://docs.renovatebot.com/modules/manager/regex/
 2025-10-30 04:47:10 +01:00
Renovate
a03ed9a362 Update all stable non-major dependencies 2025-10-29 23:45:38 +00:00
Renovate
01890fecbd Update all digest updates 2025-10-29 00:30:36 +00:00
June
df32e1cac8
 		zammad(host): move to latest upstream compose file version (v14.1.1) 
It hopefully fixes bugs we had in the past, so removing the workarounds
and it also comes with default values now, so removing all variables set
to those defaults.
 2025-10-24 22:57:03 +02:00
June
747e5b2d4c
 		zammad(host): change to .env configuration 
Align the compose.yaml to upstreams v11.2.0 version.
This is a first step to hopefully then just use the upstreams version
directly and not vendor it.
 2025-10-24 22:15:48 +02:00
June
3840553f9d
 		docker_compose(role): add support for deploying optional .env file 
This is needed for situations, where one wants to use a vendor-provided
compose file and configure it using environment variables.
Like for example:
https://github.com/zammad/zammad-docker-compose
 2025-10-24 22:05:54 +02:00
June
839a9b2c0a
 		renovate: group all digest updates together 
https://docs.renovatebot.com/presets-group/#groupalldigest
 2025-10-24 19:59:35 +02:00
June
37cedb1ad0
 		renovate: label all PRs with the "renovate" label 2025-10-24 19:28:49 +02:00
June
658a50d19b
 		renovate: use rebase stale PRs preset to rebase once base branch updated 
Use this configuration to always have the fast-forward option.

https://docs.renovatebot.com/presets-default/#rebasestaleprs
 2025-10-24 19:18:04 +02:00
June
b2961c5664
 		renovate: disable rate-limiting 2025-10-24 18:59:58 +02:00
Renovate
a13d23c7ea Update actions/checkout action to v5 2025-10-23 13:45:41 +00:00
Renovate
2f8897751b Pin dependencies 2025-10-23 12:15:38 +00:00
Renovate
a60946b3b8 Update https://github.com/ansible/ansible-lint action to v25 2025-10-22 21:50:08 +00:00
June
8f612d1d9c
 		renovate: add persistent volume for base (and therefore cache) dir 2025-10-22 19:42:20 +02:00
June
d0d517d97d
 		renovate: add custom package rule for pretix calendar versioning 
Add custom package rule accounting for pretix calendar versioning to not
have Renovate classify month updates as minor version updates, but major
version updates instead.
 2025-10-22 16:42:02 +02:00
June
78a6be6f5d
 		renovate: disable semantic commits 2025-10-22 00:47:05 +02:00
June
43fac32424
 		use full image source and set version for all Chaosknoten compose images 
Use a full image source and set and explicit version for all images in
Chaosknoten (docker-)compose files.
With Renovate now set up, it is feasible to explicitly set versions.
 2025-10-21 23:59:56 +02:00
June
282e82728b
 		renovate: match file compose jinja2 templates (.j2) as well 2025-10-21 23:12:34 +02:00
June
f842723e9a
 		remove daily schedule for Renovate (for now?) 2025-10-21 23:03:02 +02:00
June
7de516dc43
 		introduce first Renovate configuration 
Introduce pretty basic first Renovate configuration with a package rule
for grouping all stable non-major dependency updates together.
 2025-10-21 02:37:10 +02:00
June
94e1920388
 		setup ansible-pull for all Chaosknoten hosts 
Additionally setup ansible-pull for: ccchoir, tickets, keycloak, lists,
mumble, pad, public-reverse-proxy, zammad, ntfy
 2025-10-20 21:25:56 +02:00
c6ristian
f3902b43b1
 		update keycloak and nextcloud 2025-10-20 21:11:28 +02:00
June
425d302fa9
 		zammad(host): fix compose by using different elasticsearch image 
Also execute manual update steps as outlined here:
https://github.com/zammad/zammad-docker-compose/releases/tag/v14.0.0

Note that this is updating only a part of the compose file and other
parts still are out-of-date and should be updated (like the Postgres).
 2025-10-20 01:36:00 +02:00
June
b46747d251
 		deploy_ssh_server_config(role): add Debian 13 sshd_config reference 2025-10-17 21:27:29 +02:00
June
2aa55770d9
 		renovate(host): update keys adding renovate for group_vars/all.sops.yaml 2025-10-17 16:05:04 +02:00
June
8a8fdf5f97
 		renovate(host): set platform to forgejo 2025-10-17 01:26:18 +02:00
June
cad2f036e5
 		renovate(host): replace non-working GitHub token with working one 
Replace the token with one created from a new CCCHH GitHub service
account.
 2025-10-17 01:18:17 +02:00
June
4b1c64b615
 		renovate(host): remove deprecated and no longer working logLevel option 
Remove deprecated and no longer working logLevel config option. Debug
output can be enabled by using the LOG_LEVEL environment variable on
demand.
 2025-10-16 18:08:29 +02:00
June
e76c66d74c
 		renovate(host): set up Renovate using role and exisiting config 
Set up Renovate using role and existing config from current
Forgejo/GitHub Actions-based deployment.
 2025-10-16 17:52:30 +02:00
June
a32998d8da
 		renovate(host): initialize renovate host 2025-10-16 17:44:23 +02:00
June
8388657d33
 		renovate(role): introduce first basic Renovate role 
Sets up Renovate using Docker and systemd service and timer to run
regularly.
Also add accompanying host group and playbook play.
 2025-10-16 17:42:13 +02:00
June
dce4e7c4d4
 		ansible_pull(role): add git as a dependency to ensure is installed 2025-10-16 09:40:34 +02:00
June
f646cc0bf2
 		fix creation rules for eh22-wiki, sunders and wiki hosts 
Also update the keys of the secret files accordingly.
This should then fix ansible-pull on these hosts.
 2025-10-15 10:45:54 +02:00
June
dea66771e0
 		ansible_pull(role): ensure SOPS is installed 
Also add the SOPS community collection as a requirement for this repo.
 2025-10-15 02:33:42 +02:00
June
9afbc71801
 		ansible_pull(role): ensure role and collection dependencies are present 2025-10-15 02:18:07 +02:00
June
1d6d1094bc
 		setup ansible-pull for 7 more hosts 
Setup for: cloud, eh22-wiki, grafana, onlyoffice, pretalx, sunders and
wiki.
 2025-10-15 01:59:29 +02:00
June
eadae7a09b
 		ansible_pull(role): add failure notifications 2025-10-14 22:20:27 +02:00
June
17fd71f079
 		define common msmtp configuration for chaosknoten inventory hosts 
Define common configuration as it is the same for all hosts.
 2025-10-14 01:45:44 +02:00
June
afceb886dc
 		msmtp(role): introduce msmtp role 
Introduce msmtp role for setting up msmtp for mail sending.
Also add accompanying host group and playbook play.
 2025-10-14 01:40:46 +02:00
June
18dda95c46
 		remove max expired key 2025-10-13 22:12:31 +02:00
June
1f394a08dd
 		refactor .sops.yaml to make it less verbose 
Make it less verbose by introducing an anchor for the admin_gpg_keys.
 2025-10-13 20:51:31 +02:00
June
f943e95e2e
 		fix ansible_lint issues 
Use prefix for role variables, have an ending newline at the end of
files and use changed_when for command.
Also exclude *.sops.yaml files from ansible-lint.
 2025-10-13 17:43:00 +02:00
June
9b8e14f3c4
 		remove duplicate ansible_pull_hosts inventory group entry 2025-10-13 17:37:13 +02:00
June
952fbf85c5
 		ansible_pull(role): add ExecStartPost step rebooting the hosts, if nec. 
Add ExecStartPost step rebooting the hosts, if necessary.
 2025-10-13 17:23:08 +02:00
June
bd281713f1
 		netbox(host): setup ansible_pull for host 2025-10-13 16:59:42 +02:00
June
648489ed09
 		define common ansible_pull configuration for chaosknoten inventory hosts 
Define common configuration as it should be the same for all hosts, just
the ansible_pull__age_private_key needs to be set per host then.
 2025-10-13 16:58:30 +02:00
June
434ddfc955
 		ansible_pull(role): introduce ansible_pull role 
Introduce ansible_pull role for setting up automatic ansible_pull runs.
Also add accompanying host group and playbook play.
 2025-10-13 16:56:18 +02:00
June
8cb6ab3d04
 		reboot(role): intro. reboot role, which handles local conns. gracefully 
Also use this role instead of plain ansible.builtin.reboot.
This is in preparation for using ansible_pull as we don't want to have
ansible.builtin.reboot fail local playbook runs.
 2025-10-13 16:56:18 +02:00
June
1322bcec58
 		reverse proxy configuration for element-admin 2025-10-12 20:20:02 +02:00
June
1eaf85501f
 		reverse proxy configuration for matrix authentication service 2025-10-12 05:28:43 +02:00