• Germany & Cyberspace
  • Does infrastructure crimes with Nix and Ansible.

  • Joined on 2024-01-14
june pushed to main at CCCHH/ansible-infra 2026-09-21 21:38:48 +02:00
fbddd28c71 public-reverse-proxy(host): Add bildungsurlaub.hamburg.ccc.de
a649455d92 auth-dns(host): Move bildungsurlaub.hamburg.ccc.de to public-web-static
547210d31f auth-dns(host): Remove deleted www2 and www3 VMs
Compare 3 commits »
june deleted branch feat/migrations from CCCHH/ansible-infra 2026-09-21 21:38:48 +02:00
june merged pull request CCCHH/ansible-infra#165 2026-09-21 21:38:47 +02:00
feat/migrations
june approved CCCHH/ansible-infra#165 2026-09-21 21:38:39 +02:00
feat/migrations

LGTM!

june pushed to main at CCCHH/nix-infra 2026-09-21 21:38:19 +02:00
03e37aad72
public-web-static: add configuration for bildungsurlaub.hamburg.ccc.de
june closed issue CCCHH/ansible-infra#148 2026-09-21 19:25:58 +02:00
Configure Keycloak Authentication flow from Ansible
june commented on issue CCCHH/ansible-infra#148 2026-09-21 19:25:57 +02:00
Configure Keycloak Authentication flow from Ansible

Manually re-did the flow using the UI and now passwordless webauthn works as well as username + password with one second factor (as opposed to prompting for both like it was before).

june pushed to main at CCCHH/ansible-infra 2026-09-21 19:15:43 +02:00
f1135b818f
z9-router(host): new keys for Junes WireGuard
june pushed to main at CCCHH/ansible-infra 2026-08-03 00:07:05 +02:00
9a78164b7b
roles(dooris): remove blank line to make ansible-lint happy
june commented on pull request CCCHH/ansible-infra#98 2026-08-02 02:05:42 +02:00
new z9 ccchh router

To clarify: I assume the Debian package isn't sufficient then?

june commented on pull request CCCHH/ansible-infra#98 2026-08-02 02:05:42 +02:00
new z9 ccchh router

Again, I think installing this conditionally, if we also deploy the configs conditionally, makes sense.

june commented on pull request CCCHH/ansible-infra#98 2026-08-02 02:05:42 +02:00
new z9 ccchh router

Spelling "fora" -> "for".

june commented on pull request CCCHH/ansible-infra#98 2026-08-02 02:05:42 +02:00
new z9 ccchh router

I think it would be nice to stick to the list format used in all the other roles for the sake of consistency.

june commented on pull request CCCHH/ansible-infra#98 2026-08-02 02:05:42 +02:00
new z9 ccchh router

If this is commented out, can this be just removed or re-established?

june commented on pull request CCCHH/ansible-infra#98 2026-08-02 02:05:42 +02:00
new z9 ccchh router

Maybe explicitly call this "Internal Club-Services" now that we have the category "Public Club-Services".

june commented on pull request CCCHH/ansible-infra#98 2026-08-02 02:05:42 +02:00
new z9 ccchh router

I assume these deprecated entries are for documentation purposes?

june commented on pull request CCCHH/ansible-infra#98 2026-08-02 02:05:42 +02:00
new z9 ccchh router

This file is commented out in the main netlan.network file and uses the same IP addresses. Maybe just removing it would clear up confusion or are there plans to re-establish it down the line?

june commented on pull request CCCHH/ansible-infra#98 2026-08-02 02:05:42 +02:00
new z9 ccchh router

If this doesn't work on our target platform, than maybe just don't have this check. Does this fail?

june commented on pull request CCCHH/ansible-infra#98 2026-08-02 02:05:42 +02:00
new z9 ccchh router

Same here with the distro check.

june commented on pull request CCCHH/ansible-infra#98 2026-08-02 02:05:42 +02:00
new z9 ccchh router

This setting is missing from documentation in the README.