432 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
June	bbe4cc131a	eh22-netbox: remove eh22-netbox as its being decommissioned	2025-05-03 23:40:03 +02:00
June	a943b152f2	zammad(host): move secrets to SOPS	2025-05-03 23:26:58 +02:00
June	fa634f6900	onlyoffice(host): move secrets to SOPS	2025-05-03 23:22:45 +02:00
June	b841cc1409	tickets(host): move secrets to SOPS	2025-05-03 23:16:34 +02:00
June	60b2093a02	netbox(host): move secrets to SOPS	2025-05-03 23:08:41 +02:00
June	65b6eff5bd	pretalx(host): move secrets to SOPS	2025-05-03 22:59:37 +02:00
June	31ad4654c6	ccchoir(host): move secrets to SOPS	2025-05-03 22:48:49 +02:00
June	7c598132ee	pad(host): move secrets to SOPS	2025-05-03 22:39:37 +02:00
June	97b8386878	grafana(host): move secrets to SOPS	2025-05-03 22:18:26 +02:00
June	37e8782a0b	keycloak(host): move secrets to SOPS	2025-05-03 21:53:40 +02:00
June	d63092cfe8	cloud(host): remove unused config.php.j2	2025-05-03 21:32:22 +02:00
June	8de07c2688	cloud(host): move secrets to SOPS	2025-05-03 21:30:06 +02:00
c6ristian	01c006ec22	grafana fix nginx ip allow list	2025-05-02 01:08:55 +02:00
c6ristian	58642620a1	IPv6 fix für metrics	2025-04-30 16:23:35 +02:00
c6ristian	0c9e3ccb87	fix switchup in prometheus.relabel	2025-04-30 15:07:26 +02:00
c6ristian	bd9e04eef8	metrics fux	2025-04-30 02:16:09 +02:00
c6ristian	e183f1a2c3	prometheus remote write with alloy using it	2025-04-30 01:11:17 +02:00
c6ristian	e21ff26f36	fix: alertmanager ... the message template now just give out simple string if the list of alerts is to long	2025-04-28 23:02:13 +02:00
c6ristian	b0660deb71	fix: nginx role ... add defaults for nginx__deploy_htpasswds and nginx__htpasswds	2025-04-28 22:23:11 +02:00
c6ristian	456117a789	adding loki	2025-04-28 20:31:55 +02:00
June	3548c1f4d6	restart ssh service instead of rebooting as this should be fine ... Active connections should survive a restart of the service and testing also didn't show any issues.	2025-04-25 02:01:29 +02:00
Stefan Bethke	9c57fca876	Also supply a dmoain for user content	2025-04-16 16:27:21 +02:00
Stefan Bethke	811b5832da	Incread file upload limit to 1G (from 10MB)	2025-04-16 16:27:02 +02:00
c6ristian	77e1d3bc3e	keycloak: allow access form new IPv6 subnet at z9	2025-02-26 23:48:19 +01:00
June	6b80f5b52a	fix accidentally added personalized ansible_user by removing it	2025-02-23 23:51:58 +01:00
June	41ba73d7c3	dep._hyperv.(playb.): add deps step to vm template generation setup play	2025-02-23 23:26:36 +01:00
June	fd13e5341b	add thinkcccore0 to inventory and enable VM template gen. setup on it	2025-02-23 23:23:51 +01:00
June	ca16e3d55f	dep._hypervisor(playb.): introduce play for setting up vm template gen.	2025-02-23 22:42:58 +01:00
c6ristian	98972e39c4	keycloak(host): update to 26.1 & postgres to 15.12	2025-02-22 23:17:36 +01:00
June	fce4c2f73b	grafana(host): account in Prom. hyperv. disk alerts for longer backups ... Set duration for Prometheus hypervisor disk rw rate and hard disk io alerts to 2h to account for the very long running (over 90m) backup job.	2025-02-18 15:38:07 +01:00
June	0e4df5b590	nginx(role): make loop output manageable using loop_control label	2025-02-18 06:07:47 +01:00
June	9dba002f10	maintenance(playbook): simplify nginx repo setup and install task name	2025-02-18 05:48:52 +01:00
June	1ea63a19d3	maintenance(playbook): ensure docker repo and install before update ... As with ensuring the nginx repo setup and install on relevant hosts, do the same for docker.	2025-02-18 05:48:01 +01:00
June	7420ed6010	nginx(role): split up repo setup and install task lists to estab. conv. ... Split up repo setup and package installation after all to establish this as a convention (its already done this way in the docker role and was done this way in the nginx role before) to highlight that an external repo is used.	2025-02-18 05:43:39 +01:00
June	89f3e55eac	docker(role): use better naming	2025-02-18 05:35:45 +01:00
June	ce812fb006	docker(role): update README ... Document Debian 12 support, enhance wording, bring structure in line with the READMEs of more modern roles and remove unnecessary sections.	2025-02-18 05:33:30 +01:00
June	d62c070ccc	maintenance(playbook): fix playbook by using updated nginx role res.	2025-02-18 05:17:38 +01:00
June	07511ef723	grafana(host): remove decomissioned nix-box-june from Prometheus targets	2025-02-18 04:51:26 +01:00
June	5e5c980f14	check(playbook): print all held packages	2025-02-18 04:32:43 +01:00
June	34b9ee2fa4	nginx(role): simplify description in README	2025-02-18 04:32:43 +01:00
June	344dd78981	nginx(role): use better naming, wording and file structure	2025-02-18 04:32:43 +01:00
June	9b2ef55f86	nginx(role): remove unneces. "hosts" and "entry points" sec. from README	2025-02-18 04:32:43 +01:00
June	5809e4015f	nginx(role): add "logging" to the reserved configuration names	2025-02-18 04:32:43 +01:00
June	3d22f7ffae	nginx(role): document Debian 12 support	2025-02-18 04:32:43 +01:00
June	4adf39d969	nginx(role): document arguments in README for better discoverability ... Document the role arguments in the README instead of in the argument_specs for better discoverability and readability.	2025-02-18 04:32:43 +01:00
June	2e9f73b46b	nginx(role): simplify ensuring that gnupg is installed ... Also improve naming.	2025-02-18 04:32:43 +01:00
June	df22074aeb	nginx(role): simplify installation by removing version spec ... We always just want the latest anyway and therefore don't use it, so no need to keep the complexity introduced by that setting. Also merge repo_setup and nginx_install task lists into one nginx_install task list as keeping two files isn't necessary. Finally improving naming a bit.	2025-02-18 04:32:43 +01:00
June	172d6472bc	nginx(role): remove unnecessary apt-get update step ... The nginx package gets installed with "update_cache: true" afterwards anyway, so the apt-get update step shouldn't be necessary.	2025-02-18 04:32:43 +01:00
Dario	5dc2520ecd	eh22-wiki: configure custom eh22-theme	2025-02-17 22:26:17 +01:00
Dario	7271426502	dokuwiki: add option to checkout custom design repo	2025-02-17 22:20:25 +01:00