59520b4db6 
 
						 
						
							
							
								
								
								AES: disable goodies and vouchers  
							
							
							
							
						 
						
							2023-07-30 16:13:49 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	
	
		
			
		
	
	b89789c37a 
 
						 
						
							
							
								
								
								fix aes contact email  
							
							
							
							
						 
						
							2023-07-30 15:36:25 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	317c822ab5  
						 
						
							
							
								
								
								Combine playbooks for indiviual hosts into one playbook  
							
							... 
							
							
							
							
							This makes a full deployment of all hosts easier and parallelises
execution of roles, which are used for multiple hosts.
You can still easily deploy only a subset of hosts using the -l flag for
ansible-playbook. 
							
						 
						
							2023-07-30 06:57:30 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	c9dee93874  
						 
						
							
							
								
								
								Deploy ssh server config on keycloak VM  
							
							
							
							
						 
						
							2023-07-30 05:51:40 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	c6926b0a0f  
						 
						
							
							
								
								
								Remove incorrect check from deploy_ssh_server_config role  
							
							
							
							
						 
						
							2023-07-30 05:49:46 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	c2a183c013  
						 
						
							
							
								
								
								Add missing "become: true"  
							
							
							
							
						 
						
							2023-07-30 05:25:43 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	2efdfcad6d  
						 
						
							
							
								
								
								Setup repo pin. to ensure nginx package gets installed from NGINX repos  
							
							
							
							
						 
						
							2023-07-30 05:19:22 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	38fc33ce70  
						 
						
							
							
								
								
								Don't use apt-key anymore, since it's deprecated  
							
							
							
							
						 
						
							2023-07-30 01:21:43 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	efc72f70f6  
						 
						
							
							
								
								
								audiopi: Update role  
							
							
							
							
						 
						
							2023-07-30 01:04:25 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	8a2c2769c8  
						 
						
							
							
								
								
								Use new secrets path, bc of noc pass store merge into general store  
							
							
							
							
						 
						
							2023-07-29 23:15:00 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	23deedf0d6  
						 
						
							
							
								
								
								Update deploy_ssh_server_config role for Debian 12 support  
							
							
							
							
						 
						
							2023-07-29 20:17:22 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	f62135e263  
						 
						
							
							
								
								
								Don't reference obsolete secret env files  
							
							
							
							
						 
						
							2023-07-29 01:47:21 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	a12b38b284  
						 
						
							
							
								
								
								Provide secrets for engelsystem VM from pass  
							
							
							
							
						 
						
							2023-07-29 01:46:30 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	69edb75112  
						 
						
							
							
								
								
								Use correct variable for initial config in zigbee2mqtt role  
							
							
							
							
						 
						
							2023-07-29 01:16:49 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	51c1b667f4  
						 
						
							
							
								
								
								Provide secrets for keycloak VM from pass  
							
							
							
							
						 
						
							2023-07-29 00:59:01 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	
	
		
			
		
	
	c3fc040751 
 
						 
						
							
							
								
								
								AES: patch code and l10n to add train drivers license  
							
							
							
							
						 
						
							2023-07-28 23:59:02 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	727cd0bc74  
						 
						
							
							
								
								
								Bump Keycloak to 22.0  
							
							
							
							
						 
						
							2023-07-28 23:16:46 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	2f7e3ae893  
						 
						
							
							
								
								
								Build on docker compose up as well  
							
							
							
							
						 
						
							2023-07-28 23:16:27 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	
	
	18990b3b5f 
 
						 
						
							
							
								
								
								Bump zigbee2mqtt to 1.32.1  
							
							
							
							
						 
						
							2023-07-27 18:26:47 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	
	
	1570b0c04e 
 
						 
						
							
							
								
								
								Bump esphome to 2023.7.0  
							
							
							
							
						 
						
							2023-07-27 18:22:58 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	d5285a3fd2  
						 
						
							
							
								
								
								deploy an engelsystem named AES  
							
							
							
							
						 
						
							2023-07-09 01:57:55 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	b536e5c2fb  
						 
						
							
							
								
								
								Fix: Add necessary becomes  
							
							
							
							
						 
						
							2023-07-09 00:26:20 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	b2e9c22821  
						 
						
							
							
								
								
								cert, nginx: Update for debian 12  
							
							
							
							
						 
						
							2023-07-09 00:03:38 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	67483ece20  
						 
						
							
							
								
								
								docker roles: Support debian 12  
							
							
							
							
						 
						
							2023-07-08 23:47:04 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	82b64e24c6  
						 
						
							
							
								
								
								Fix variable name  
							
							... 
							
							
							
							
							Thanks jtbx for pointing that out! 
							
						 
						
							2023-07-08 23:41:12 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	8bc60e42a8  
						 
						
							
							
								
								
								Extend distribution_check role to account for Ansible changes reg. facts  
							
							... 
							
							
							
							
							Somewhere between ansible [core 2.14.4] and ansible [core 2.15.0] the
logic for the distribution_version Ansible fact got changed. With the
newer Ansible version Debians distribution_version gets reported as 11.7
as opposed to getting reported as 11 with the old Ansible version. To
still allow for useful distribution checks, extend the
distribution_check role by allowing the specification of
distribution_major_versions and distribution_releases as well.
This way you can check for an Ubuntu version by using
distribution_version (which for example resolves to 18.04, while
distribution_major_version would resolve to 18 in that case) and check
for a Debian version by using distribution_major_version (which for
example resolves to 11, while distribution_version would resolve to 11.7
in that case). 
							
						 
						
							2023-07-08 19:58:02 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	0c62a8f3e0  
						 
						
							
							
								
								
								Add role for deploying SSH config and also add mailserver-endpoint host  
							
							
							
							
						 
						
							2023-06-06 23:37:42 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	ebfa591484  
						 
						
							
							
								
								
								Use larger buf. size to fix 502s sometimes occur. when going through PVE  
							
							
							
							
						 
						
							2023-05-26 03:27:56 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	55506a003a  
						 
						
							
							
								
								
								Make Rspamd configs world-readable  
							
							
							
							
						 
						
							2023-05-26 03:27:56 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	
	
		
			
		
	
	e37d84c60d 
 
						 
						
							
							
								
								
								clean up foobazdmx role  
							
							... 
							
							
							
							
							make git repo url and version to check out a variable instead of a
hard-coded value the role, and update host_vars to match. 
							
						 
						
							2023-05-21 15:12:42 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	
	
	2d5f116ff3 
 
						 
						
							
							
								
								
								Use access token with Reporter role for foobazdmx  
							
							
							
							
						 
						
							2023-05-21 03:03:02 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	
	
	da710bcf8f 
 
						 
						
							
							
								
								
								Reduce maximum AirPlay volume for Audio Pi  
							
							
							
							
						 
						
							2023-05-21 01:29:25 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	
	
		
			
		
	
	a6db315138 
 
						 
						
							
							
								
								
								Update foobazdmx repository url and release target  
							
							... 
							
							
							
							
							Update foobazdmx repository url in foobazdmx role to main repo.
Change commit to be checked out by ansible to latest commit on main. 
							
						 
						
							2023-05-20 22:58:24 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	
	
	544abc1c27 
 
						 
						
							
							
								
								
								Rename automation host to mqtt  
							
							
							
							
						 
						
							2023-05-10 18:02:10 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	
	
	33d1cfca1f 
 
						 
						
							
							
								
								
								Move become: true into esphome role  
							
							... 
							
							
							
							
							Move become: true into zigbee2mqtt role
Remove become: true from deploy_public_reverse_proxy playbook
Remove become: true from deploy_dokuwiki playbook
Move become: true from deploy_audio_pi and deploy_light playbooks into roles
Remove become: true from deploy_keycloak playbook
Move become: true from deploy_automation playbook to mosquitto role 
							
						 
						
							2023-05-10 18:02:10 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	b56ca3899d  
						 
						
							
							
								
								
								Add send_only_mailserver role and deploy Send-Only-Mailserver with it  
							
							... 
							
							
							
							
							Co-authored-by: yuri <yuri@nekover.se> 
							
						 
						
							2023-05-09 23:01:57 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	f4a79fb4e2  
						 
						
							
							
								
								
								Make it possible to set custom permissions for certificate files  
							
							... 
							
							
							
							
							This is in preparation for a role using OpenSMTPD. 
							
						 
						
							2023-05-09 22:07:44 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	
	
	78023f5198 
 
						 
						
							
							
								
								
								Use cert role to deploy a valid certificate for esphome.ccchh.net  
							
							
							
							
						 
						
							2023-05-09 21:02:32 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	
	
	ca3a30360f 
 
						 
						
							
							
								
								
								Use cert role to deploy a valid certificate for zigbee2mqtt.ccchh.net  
							
							
							
							
						 
						
							2023-05-09 17:24:20 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	
	
	1cd0700cf5 
 
						 
						
							
							
								
								
								Fix filename for include_tasks  
							
							
							
							
						 
						
							2023-05-09 17:20:24 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	
	
	9dc77ad5a5 
 
						 
						
							
							
								
								
								Only deploy zigbee2mqtt config when it doesn't exist  
							
							
							
							
						 
						
							2023-05-09 14:39:50 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
						 
						
							
							
								
							
							
	
	
	1bcb77961b 
 
						 
						
							
							
								
								
								Use the .yaml file extension for all YAML files  
							
							
							
							
						 
						
							2023-05-08 19:55:08 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									julian 
								
							 
						 
						
							
							
								
							
							
	9d0697f0d0  
						 
						
							
							
								
								
								Use PROXY Protocol for Keycloak  
							
							
							
							
						 
						
							2023-05-05 00:00:48 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									Jannik Beyerstedt 
								
							 
						 
						
							
							
								
							
							
	7710bf384d  
						 
						
							
							
								
								
								Keycloak: Fix restart condition  
							
							
							
							
						 
						
							2023-05-04 23:39:51 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									julian 
								
							 
						 
						
							
							
								
							
							
	2dc4b6f5fd  
						 
						
							
							
								
								
								Add keycloak  
							
							
							
							
						 
						
							2023-05-02 06:12:56 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									julian 
								
							 
						 
						
							
							
								
							
							
	91274de823  
						 
						
							
							
								
								
								Add my docker and docker_compose role  
							
							... 
							
							
							
							
							Do this in preparation for the keycloak deployment. 
							
						 
						
							2023-05-01 01:45:15 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									julian 
								
							 
						 
						
							
							
								
							
							
	d4d2e973a1  
						 
						
							
							
								
								
								Get certificate for wiki using cert role  
							
							
							
							
						 
						
							2023-05-01 00:22:05 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									julian 
								
							 
						 
						
							
							
								
							
							
	1a0636307b  
						 
						
							
							
								
								
								Use Certbot naming for certificate files  
							
							
							
							
						 
						
							2023-05-01 00:18:59 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									julian 
								
							 
						 
						
							
							
								
							
							
	aac049efb2  
						 
						
							
							
								
								
								Use BIND 9 server instead of Cloudfl. for DNS-01 challenge via nsupdate  
							
							... 
							
							
							
							
							Co-authored-by: Jannik Beyerstedt <code@jannikbeyerstedt.de> 
							
						 
						
							2023-04-27 23:38:14 +02:00 
							
								 
							
							
								 
							
						 
					 
				
					
						
							
								
								
									julian 
								
							 
						 
						
							
							
								
							
							
	4814ea8bda  
						 
						
							
							
								
								
								Use one ACME account key per host  
							
							... 
							
							
							
							
							This is nicer for us, since this avoids sharing a secret.
Also put certificate directories in `certs` sub-directory for better
organization. 
							
						 
						
							2023-04-25 18:03:59 +02:00