292 commits

Author	SHA1	Message	Date
bitwhisker	8351c28cd0	z9-router(host): add ansible pull	2026-08-07 22:55:31 +02:00
bitwhisker	1dff022146	z9-router(host): rename rt1 to z9-router	2026-08-07 22:55:31 +02:00
bitwhisker	010b8d1224	rt1(z9 host) unbound(role) kea_dhcp(role): create unbound and kea_dhcp role for rt1 ... - create unbound role - create kea_dhcp role - configure unbound and keadhcp on rt1(z9 host)	2026-08-07 22:55:31 +02:00
bitwhisker	aeaa80d2c4	rt1(z9 host): create host and configure networkd and nftables	2026-08-07 22:55:31 +02:00
Stefan Bethke	f749ed436c	Use fixed port range to allow for better fw rules	2026-08-02 17:25:30 +02:00
Stefan Bethke	0377db2812	Use correct hostname for yate	2026-08-02 17:24:58 +02:00
Stefan Bethke	6eafc47773	jitsi dazu ... Erstmal nur der Host, die eigentliche Config muss später passieren	2026-07-29 22:52:13 +02:00
lilly	de8daaf56c	add dooris role for setup of dooris interaction on the node itself	2026-07-29 14:16:04 +02:00
Stefan Bethke	685646c697	Set up Keycloak to Mailman sync for chaos@ ... DRY_RUN=true, so no changes to Mailman are performed yet.	2026-07-26 16:19:41 +02:00
Stefan Bethke	647058f6ad	ccchoir: stick to major version and cronjob update	2026-07-26 13:21:41 +02:00
Stefan Bethke	283bc80b41	Update wordpress image	2026-07-26 00:47:54 +02:00
Stefan Bethke	70b1039f95	Upgrade Hedgdedoc to 1.11.1 ... Closes #130 Also add appropriate config for renovate to upgrade Hedgedoc.	2026-07-24 23:26:23 +02:00
Renovate	374e8f981a	Update git.hamburg.ccc.de/ccchh/oci-images/nextcloud Docker tag to v34	2026-07-23 20:16:22 +00:00
Renovate	1ae4a39f57	Update all stable non-major dependencies	2026-07-08 00:16:11 +00:00
June	9ae16363c5	forgejo-runner-external(host): configure forgejo-runner setup ... Configure connection for the DI-Day/website repo.	2026-07-08 00:42:50 +02:00
June	dd1cd6f529	forgejo-runner-external(host): basic setup	2026-07-08 00:20:02 +02:00
June	d44d84ae2a	forgejo-runner(host): configure forgejo-runner setup	2026-07-03 03:42:18 +02:00
June	7d7cf455eb	forgejo_runner(role): create role for setting up Forgejo Runner install	2026-07-03 03:42:18 +02:00
June	94120337aa	forgejo-runner(host): basic setup	2026-07-03 03:42:17 +02:00
Stefan Bethke	3e0fdb6074	Configure transmission	2026-06-28 17:02:05 +02:00
lilly	431aaefb36	dns: remove ns.vie.ccc.de from already migrated zones	2026-06-10 16:05:51 +02:00
lilly	6d922b7c8b	dns: also notify erfadns.ber.ccc.de for catalog zone changes	2026-06-10 13:12:00 +02:00
lilly	b283089b06	readd ns.vie.ccc.de to our zones because zones are not delegated yet	2026-06-09 21:27:33 +02:00
lilly	471012928a	auth-dns: configure nameserver secondary solely to erfadns.ber.ccc.de	2026-06-09 10:31:32 +02:00
lilly	5f94d7f284	remove ns-intern.hamburg.ccc.de from notify targets of our domains	2026-06-06 16:26:47 +02:00
lilly	66e0095070	add zone diday.org. to authoritative DNS	2026-06-06 16:25:18 +02:00
June	fa6e280594	www2/www3(host): remove hosts as they got removed	2026-06-04 00:54:55 +02:00
Stefan Bethke	fa598c72fc	Add opensourcetorrents	2026-06-01 21:15:31 +02:00
Stefan Bethke	0842a51ae0	Merge branch 'main' of git.hamburg.ccc.de:CCCHH/ansible-infra	2026-05-24 00:12:52 +02:00
Stefan Bethke	603d3fb6f4	Update machine SMTP mail sending config	2026-05-24 00:12:50 +02:00
June	4574dbf4ba	secrets(role): introduce secrets role for storing secrets ... Allows storage of secrets to then be referenced in other places. The motivation was storing WireGuard secrets for systemd-networkd.	2026-05-23 22:40:17 +02:00
chris	ec27b52820	cloud: bump nextcloud to 33 and postgres 15.18	2026-05-20 19:49:53 +02:00
lilly	292c626629	add ns2.vie.ccc.de as dns secondary	2026-05-20 15:44:47 +02:00
June	0c83fcc2b2	sops: darios key expired, so remove for now	2026-05-20 04:09:28 +02:00
lilly	8a8ce7206d	add infrastructure-authorized-keys to lists host	2026-05-19 16:27:59 +02:00
lilly	6bb09901a0	add ns.vie.ccc.de. as direct secondary for authoritative DNS zones	2026-05-19 11:00:03 +02:00
Stefan Bethke	a76f01aea7	Move secrets to SOPS, add REST_USER	2026-05-16 13:06:19 +02:00
lilly	164f784957	remove errornously added irz42 reverse-dns secondaries	2026-05-15 14:50:15 +02:00
lilly	18ffa42358	remove actually unused reverse-dns zones	2026-05-13 15:14:37 +02:00
lilly	d2f95237a0	add wieskes nameservers for reverse-dns zone transfers from auth-dns	2026-05-13 15:11:29 +02:00
lilly	50beedbc62	configure metric scraping from knot on auth-dns	2026-05-06 15:51:38 +02:00
lilly	f7306b91a6	remove unused dns zones	2026-05-06 14:37:53 +02:00
lilly	021843b5ce	migrate reverse dns zones to new auth-dns server	2026-05-06 14:33:04 +02:00
lilly	46b0a49eb8	migrate dns zone eh22.easterhegg.eu to new auth-dns server	2026-05-06 12:34:23 +02:00
lilly	d535607ae6	migrate dns zone eh20.easterhegg.eu. to new auth-dns server	2026-05-06 12:31:55 +02:00
lilly	04a6c685d1	migrate dns zone hamburg.ccc.de. to new auth-dns server	2026-05-06 12:17:51 +02:00
lilly	fa021fb737	migrate dns zone ccchh.net. to new auth-dns server	2026-05-06 12:12:54 +02:00
lilly	9ca4eb14e1	configure hh.ccc.de on auth-dns	2026-05-06 11:47:10 +02:00
lilly	becee70ab9	disable systemd-resolved on auth-dns	2026-05-06 11:47:10 +02:00
lilly	fa94d59df6	add barebones knot config ... This configuration does not yet do much but it provisions a knot server that runs.	2026-05-06 11:47:10 +02:00