653 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
June	1d2d03e4b3	status(host): add monitoring for (www./staging.)c3dog.de	2026-04-11 20:53:57 +02:00
June	f4c9d203da	public-reverse-proxy(host): add config for staging.c3dog.de	2026-04-11 20:53:57 +02:00
bitwhisker	abcd622757	light(host): move to dns-01-acme-dns	2026-04-11 04:34:24 +02:00
June	8630efeca6	keycloak(host): set specific Keycloak version as image also has it now	2026-04-05 01:02:37 +02:00
June	230da323dc	public-reverse-proxy(host): add config for docs.c3voc.de and staging	2026-04-04 15:39:33 +02:00
chris	3f94a992fe	ntfy-alertmanager: edit msg when alert resolve's	2026-04-03 17:41:24 +02:00
Renovate	28d154edcd	Update docker.io/xenrox/ntfy-alertmanager Docker tag to v1	2026-04-03 13:16:18 +00:00
June	7b03059440	public-reverse-proxy(host): add config for c3dog.de	2026-04-03 15:08:02 +02:00
Renovate	aa28d30e8d	Update docker.io/library/redis Docker tag to v8	2026-04-02 09:30:51 +00:00
June	8945b86c85	tickets(host): update postgresql image from version 15 to 18	2026-04-02 11:24:42 +02:00
Renovate	db8dfac07a	Update docker.io/pretix/standalone Docker tag to v2026	2026-04-01 23:47:03 +00:00
June	8e5b0083b3	fix docker compose services not coming up after reboot ... Fix the issue by adding missing restart configuration to docker compose deployments.	2026-04-02 01:16:08 +02:00
Stefan Bethke	7a9929c66d	Version bump	2026-04-01 09:10:05 +02:00
June	0df667fc58	keycloak(host): update postgresql image from version 15 to 18	2026-04-01 02:19:13 +02:00
June	34958a0584	pad(host): update postgresql image from version 15 to 18	2026-04-01 01:51:22 +02:00
June	6bc872f1c0	pretalx(host): move to dns-01-acme-dns as http-01 failed for cfp.eh22	2026-03-31 17:51:06 +02:00
June	73ed238a28	sunders(host): move to dns-01-acme-dns	2026-03-31 16:59:02 +02:00
June	8bf6dfbefb	certbot(role): support DNS-01 certs using acme-dns ... Introduce new configuration structure called certbot__certs, which allows for different challenge types per cert with the first challenge type supported being dns-01-acme-dns.	2026-03-31 16:48:00 +02:00
June	21f51ea2d7	z9(hosts): setup ansible-pull for all z9 hosts	2026-03-30 21:55:44 +02:00
Renovate	66830eaf30	Update all stable non-major dependencies	2026-03-28 01:01:38 +00:00
chris	904c50c17c	fux alert: set for to 2min	2026-03-10 21:45:52 +01:00
chris	242746bcbd	alerts-fux: add alert for blackbox exporter probes	2026-03-09 21:14:26 +01:00
June	e961886972	pad(host): set session secret, so users won't be logged out on restart ... Closes #74	2026-03-09 21:09:08 +01:00
June	c246a6815c	ansible-lint: fix issues	2026-03-06 21:27:51 +01:00
Renovate	9b092d0daf	Update all stable non-major dependencies	2026-03-06 20:16:48 +00:00
June	2b5f261cd3	docker(role): move automatic cleanup of unused Docker data here ... Move the automatic cleanup of unused Docker data to the docker role from the docker_compose role, so that hosts, which only use Docker (like renovate) also have an automatic cleanup set up. Also use a systemd timer instead of cron.	2026-03-06 21:09:47 +01:00
lilly	0788fde69d	only allow sops encryption of *.sops.* files	2026-03-06 20:21:33 +01:00
June	f345ff5e00	renovate: make exclusion of CalVer non-patch/-minor upgrades work ... Pretix and Pretalx both use CalVer, so we don't want to have upgrades to their second number be identified as minor updates and get grouped with all the other minor and patch updates. The regex to re-classify the second number as major doesn't work. Probably because of: "Important: all capture groups must contain only purely numeric values." (https://docs.renovatebot.com/modules/versioning/regex/) So instead match on the minor update type for Pretix and Pretalx and set the group name to null.	2026-03-06 19:53:24 +01:00
June	e98f6d68bd	Revert "wip: test renovate" ... This reverts commit 05d8c39b75. Doesn't work.	2026-03-06 19:15:55 +01:00
lilly	4f3caaf5ed	add bitwhisker to sops	2026-03-05 20:18:53 +01:00
June	05d8c39b75	wip: test renovate	2026-03-05 15:26:51 +01:00
June	fee18bd349	certbot(role): allow empty list of certificate domains ... Also explicitly document that they are used with the HTTP-01 challenge. This is in preparation for adding a new option with DNS-01 challenge support.	2026-03-05 14:37:17 +01:00
June	3820a97584	certbot(role): move arguments documentation into README ... Do this to match how it's done in newer roles.	2026-03-05 14:37:17 +01:00
chris	0331c77d55	grafana: fuxnoc macht mehr internet mit ipv6	2026-03-01 21:32:10 +01:00
June	711f2f1c64	certbot(role): don't use certbot__version_spec anymore as its not used	2026-03-01 20:08:49 +01:00
lilly	165487884c	setup reverse-proxying for *.staging.diday.org	2026-02-27 21:51:09 +01:00
lilly	bc9e76b8ed	remove did.hamburg.ccc.de from public-reverse-proxy	2026-02-27 21:51:09 +01:00
lilly	983584a510	configure reverse proxy map explicitly for hostnames	2026-02-27 21:51:09 +01:00
June	7ca446457a	onlyoffice: support custom fonts and add di.day fonts	2026-02-26 23:13:30 +01:00
lilly	fcc0d615a7	configure diday.org on public-reverse-proxy	2026-02-26 18:01:52 +01:00
lilly	41dc9c8529	configure www2 nginx	2026-02-26 17:44:24 +01:00
lilly	3e3cedd357	add www2 and www3 hosts	2026-02-24 19:09:20 +01:00
Stefan Bethke	ac013ca8a1	Fix template syntax	2026-02-22 18:37:16 +01:00
Stefan Bethke	08101ccef1	Fix permission	2026-02-22 18:37:01 +01:00
Stefan Bethke	7a1ea7d40e	Override base.html template to brand site	2026-02-22 18:22:12 +01:00
Stefan Bethke	d26fbf2577	Allow syncing an arbitrary set of files to the target	2026-02-22 18:21:47 +01:00
Stefan Bethke	a3c514d18d	Ignore pycaches	2026-02-22 18:21:15 +01:00
lilly	bb06f21c53	configure diday website deployment	2026-02-18 11:57:21 +01:00
Stefan Bethke	e823c46a2d	stb updated key	2026-02-18 09:51:25 +01:00
Stefan Bethke	910655adfb	Explain how to update GPG keys	2026-02-18 09:34:27 +01:00