717 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
June	0c83fcc2b2	sops: darios key expired, so remove for now	2026-05-20 04:09:28 +02:00
June	8428d5a66b	docs: use pymdownx.superfences to make codeblocks in lists work properly	2026-05-19 23:49:06 +02:00
June	fc47d119bb	docs: move guides into sub-directory ... Also start documenting the docs structure in home.	2026-05-19 19:24:06 +02:00
June	197b9c297c	docs: fix code blocks overflowing and add syntax highlighting ... Without these options code blocks would overflow. See: https://github.com/asiffer/mkdocs-shadcn/issues/57 And it also provides nice syntax highlighting.	2026-05-19 18:33:03 +02:00
June	abcc144711	docs: add index page	2026-05-19 18:33:03 +02:00
June	31cc60c648	docs: add mkdocs config and CI for building infra-docs website ... Heavily inspired by: https://forgejo.c3voc.de/voc/av-docs	2026-05-19 18:33:03 +02:00
June	a93d22fb05	add configuration for infra-docs and infra-docs staging	2026-05-19 18:33:03 +02:00
lilly	8a8ce7206d	add infrastructure-authorized-keys to lists host	2026-05-19 16:27:59 +02:00
June	dcd454011f	status(host): add checks for auth-dns	2026-05-19 14:27:54 +02:00
June	55d1279c3e	status(host): add check for diday.org	2026-05-19 14:17:07 +02:00
lilly	3541c68357	disable dnssec for catalog zones on auth-dns ... Catalog zones are not real zones in the DNS hierarchy and don't have a parent zone. Therefore they will never have a valid DNSSEC delegation so we should skip signing those zones.	2026-05-19 11:01:52 +02:00
lilly	6bb09901a0	add ns.vie.ccc.de. as direct secondary for authoritative DNS zones	2026-05-19 11:00:03 +02:00
June	73e77bde70	tag plays in playbooks (instead of tasks in roles)	2026-05-19 00:24:10 +02:00
June	6b19f69135	renovate(role): add cleanup service and timer for renovate volume ... With time the volume seems to just keeps growing with cache data, so clean it up once a day.	2026-05-19 00:23:26 +02:00
June	b0347d64bf	remove configuration for deleted woodpecker host	2026-05-18 20:13:48 +02:00
June	1275d50bdf	dooris(host): use new dooris software ... Also fix DNS record not properly working anymore.	2026-05-18 18:00:30 +02:00
Stefan Bethke	1757c36605	Postorious needs REST API as well	2026-05-16 13:31:18 +02:00
Stefan Bethke	a76f01aea7	Move secrets to SOPS, add REST_USER	2026-05-16 13:06:19 +02:00
Renovate	cc5dfb3cf7	Update docker.io/grafana/grafana Docker tag to v13	2026-05-15 19:41:57 +02:00
jtbx	83e6f76464	deploy_systemd_journal_config(role): Disable ForwardToSyslog ... We don't want hour journalctl logs mirrored to /var/log/syslog	2026-05-15 19:25:44 +02:00
lilly	164f784957	remove errornously added irz42 reverse-dns secondaries	2026-05-15 14:50:15 +02:00
lilly	637dc6b25a	consider ansible-pull jobs failed after 30 minutes	2026-05-13 16:53:57 +02:00
lilly	18ffa42358	remove actually unused reverse-dns zones	2026-05-13 15:14:37 +02:00
lilly	d2f95237a0	add wieskes nameservers for reverse-dns zone transfers from auth-dns	2026-05-13 15:11:29 +02:00
chris	e3ef60186f	grafana: set default alertmanager notifications	2026-05-09 21:34:08 +02:00
June	c9c44efa0b	auth-dns(host): remove entries for old and deprecated services	2026-05-09 19:16:34 +02:00
June	d76212c5a8	auth-dns(host): remove legacy "-intern" entries from hamburg.ccc.de zone	2026-05-09 18:27:54 +02:00
June	3c558003a9	auth-dns(host): format hamburg.ccc.de zone file ... Format zone file as first step of a series of clean-ups.	2026-05-08 21:20:55 +02:00
lilly	595b19375a	replace primary NS in all zones except *.hamburg.ccc.de zones	2026-05-07 23:59:50 +02:00
lilly	bc4df9a3f4	fix ansible-lint warnings of knot role	2026-05-07 23:45:48 +02:00
lilly	50beedbc62	configure metric scraping from knot on auth-dns	2026-05-06 15:51:38 +02:00
June	291ebce943	router(host): configure public (v4) network	2026-05-06 14:43:05 +02:00
lilly	f7306b91a6	remove unused dns zones	2026-05-06 14:37:53 +02:00
lilly	021843b5ce	migrate reverse dns zones to new auth-dns server	2026-05-06 14:33:04 +02:00
lilly	5283d2da95	improve knot roles reloading behavior ... With this change, the nameserver is not restarted on configuration updates but only reloaded instead.	2026-05-06 14:33:04 +02:00
June	3aa146d723	nftables(role): reload instead of restart ... This should make the role more robust against misconfigurations.	2026-05-06 14:19:38 +02:00
lilly	46b0a49eb8	migrate dns zone eh22.easterhegg.eu to new auth-dns server	2026-05-06 12:34:23 +02:00
lilly	d535607ae6	migrate dns zone eh20.easterhegg.eu. to new auth-dns server	2026-05-06 12:31:55 +02:00
lilly	04a6c685d1	migrate dns zone hamburg.ccc.de. to new auth-dns server	2026-05-06 12:17:51 +02:00
lilly	fa021fb737	migrate dns zone ccchh.net. to new auth-dns server	2026-05-06 12:12:54 +02:00
lilly	9100523045	remove obsolete auth-dns compose file	2026-05-06 11:59:51 +02:00
lilly	416ca85b11	rename auth_dns -> knot role	2026-05-06 11:52:33 +02:00
lilly	8c1553c707	fix role name auth-dns -> auth_dns	2026-05-06 11:47:10 +02:00
lilly	9ca4eb14e1	configure hh.ccc.de on auth-dns	2026-05-06 11:47:10 +02:00
lilly	c0a09cd299	add old zones from ns-intern	2026-05-06 11:47:10 +02:00
lilly	6fa2d65db2	enable auth-dns role to actually configure useful zones	2026-05-06 11:47:10 +02:00
lilly	becee70ab9	disable systemd-resolved on auth-dns	2026-05-06 11:47:10 +02:00
lilly	fa94d59df6	add barebones knot config ... This configuration does not yet do much but it provisions a knot server that runs.	2026-05-06 11:47:10 +02:00
lilly	adc3400177	mute ansible discovered interpreter warning	2026-05-06 11:44:41 +02:00
lilly	d880eb8677	fix systemd-resolved not being installed ... closes CCCHH/ansible-infra#88	2026-05-03 16:50:45 +02:00