• Germany & Cyberspace
  • Does infrastructure crimes with Nix and Ansible.

  • Joined on 2024-01-14
june commented on pull request CCCHH/ansible-infra#98 2026-05-24 18:49:42 +02:00
new z9 ccchh router

Most of the variables here are commented out, so we can just massively simplify this file.

june commented on pull request CCCHH/ansible-infra#98 2026-05-24 18:49:42 +02:00
new z9 ccchh router

Since we got granular control over whether to use dhcpv4, v6 or the agent, would it make sense to then also granularly install the relevant packages?

june commented on pull request CCCHH/ansible-infra#98 2026-05-24 18:49:42 +02:00
new z9 ccchh router

If we want to count the v6 up in hex (which I think is reasonable as we do the same for the VLAN ID in the prefix), then it should also be done properly.

june commented on pull request CCCHH/ansible-infra#98 2026-05-24 18:49:42 +02:00
new z9 ccchh router

It's fine, just feel like rt1 is one of those obscure names again, which gives more trouble than benefit.

june commented on pull request CCCHH/ansible-infra#98 2026-05-24 18:49:42 +02:00
new z9 ccchh router

Again, getting rid of the Arch Linux logic also greatly simplifies this file.

june commented on pull request CCCHH/ansible-infra#98 2026-05-24 18:49:42 +02:00
new z9 ccchh router

Same restarted/reloaded comment as above.

june commented on pull request CCCHH/ansible-infra#98 2026-05-24 18:49:42 +02:00
new z9 ccchh router

Same comment as below: We already have a role for managing the resolv.conf, so rather include that.

june commented on pull request CCCHH/ansible-infra#98 2026-05-24 18:49:42 +02:00
new z9 ccchh router

Do we have a requirement for the more up-to-date version present in the upstream repository or is the one in the Debian repos sufficient?

june commented on pull request CCCHH/ansible-infra#98 2026-05-24 18:49:42 +02:00
new z9 ccchh router

That's not what linting is for.

june commented on pull request CCCHH/ansible-infra#98 2026-05-24 18:49:42 +02:00
new z9 ccchh router

wireguard_wg55_privat_key -> wireguard_wg55_private_key

june commented on pull request CCCHH/ansible-infra#98 2026-05-24 18:49:42 +02:00
new z9 ccchh router

Are those all the CPUs we use? Might it make sense to have this configurable or at least change the comment?

june commented on pull request CCCHH/ansible-infra#98 2026-05-24 18:49:42 +02:00
new z9 ccchh router

Same indentation problem here.

june commented on pull request CCCHH/ansible-infra#98 2026-05-24 18:49:42 +02:00
new z9 ccchh router

We don't have any Arch Linux infrastructure, so we don't need this.

june commented on pull request CCCHH/ansible-infra#98 2026-05-24 18:49:42 +02:00
new z9 ccchh router

This seems to be using tabs for some reason, probably best to replace with spaces.

june commented on pull request CCCHH/ansible-infra#98 2026-05-24 18:49:42 +02:00
new z9 ccchh router

Is this still relevant on Debian? Again, we don't use Arch Linux in our infra.

june pushed to main at CCCHH/ansible-infra 2026-05-23 22:41:50 +02:00
4574dbf4ba
secrets(role): introduce secrets role for storing secrets
june pushed to main at CCCHH/ansible-infra 2026-05-20 22:55:01 +02:00
51cd583dff
docs: move information on secrets and sops into docs
june pushed to main at CCCHH/ansible-infra 2026-05-20 20:10:11 +02:00
74fb99ec8f
docs: delete outdated section on web service setup from README
june pushed to main at CCCHH/ansible-infra 2026-05-20 20:07:06 +02:00
b91bc38d7b
docs: rework and split up docs on creating a new web service
june pushed to main at CCCHH/ansible-infra 2026-05-20 18:57:27 +02:00
411200884b
docs: overhaul SOPS documentation for better structure and readability