sophia/ansible-infra
0
0
Fork 0
forked from CCCHH/ansible-infra
Code Pull requests Activity
304 commits 5 branches 0 tags 2.4 MiB
Commit graph

304 commits

This branch
This branch
All branches
Author SHA1 Message Date
c6ristian
a86b34cf34
 		set nginx logging to use journald 2025-01-19 20:30:53 +01:00
c6ristian
328ec744cc
 		Add base_config and deploy_systemd_journal_config 2025-01-19 20:30:05 +01:00
c6ristian
93212e2248
 		pretalx: set custom docker network in compose file 2025-01-16 14:35:12 +01:00
c6ristian
1d621e12fb
 		fix pretalx for cfp.eh22.easterhegg.eu CSRF problem 2025-01-16 14:06:36 +01:00
June
64343ae9ec
 		have the docker role conf. the Docker daemon to log to systemd journal 2025-01-14 23:19:38 +01:00
June
e3a1443df9
 		use deploy_ssh_server_config role for all Chaosknoten hosts 2025-01-14 22:36:51 +01:00
c6ristian
e1866b2449
 		add cfp.eh22.easterhegg.eu to pretalx 2025-01-13 23:37:20 +01:00
Stefan Bethke
8bb6c44bec Allow 50MB uploads 2025-01-13 19:42:37 +01:00
jtbx
4fff0a9d0d dokuwiki: Refactor support for multiple OS versions 2024-12-08 19:48:48 +01:00
June
03e994b41f
 		dokuwiki: update role to support Debian 12 2024-12-08 18:37:41 +01:00
June
19abc5f585
 		reference new "resources" dir and generally fix up and improve README 2024-12-08 02:55:25 +01:00
June
e713b2ea5b
 		exclude symlinked ("roles" and "resources") dirs from vscode search 
Also remove the ".vscode" directory from the ".gitignore" as the repo
includes stuff in it.
 2024-12-08 02:55:25 +01:00
June
63390c5588
 		enable pipelining as it seems to work and be faster 
See:
https://docs.ansible.com/ansible/latest/reference_appendices/config.html#ansible-pipelining
 2024-12-08 02:55:25 +01:00
June
07dbbf055c
 		reorganize (config) files and templates into one "resources" dir 
This groups the files and templates for each host together and therefore
makes it easier to see all the (config) files for a host.

Also clean up incorrect, unused docker_compose config for mumble and
clean up unused engelsystem configs.
 2024-12-08 02:55:25 +01:00
June
4b0e03e8b2
 		ensure all template files have a .j2 file extension 
As they should and as this is preparation for a future change
reorganizing the file structure.
 2024-12-08 02:55:25 +01:00
June
f16f8697c2
 		move roles, files and templates dirs out of playbook dir into root dir 
Because of how Ansible local relative search paths work, the global
"files" and "templates" directories need to be next to the playbooks.
However its not intuitive to look into the "playbooks" directory to find
the files and templates for a host.
Therefore move them out of the "playbooks" directory into the root
directory and add symlinks so everything still works.

Similarly for local roles, they also need to be next to the playbooks.
So for a nicer structure, move the "roles" directory out into the root
directory as well and add a symlink so everything still works.

Also see:
https://docs.ansible.com/ansible/latest/playbook_guide/playbook_pathing.html#resolving-local-relative-paths
https://docs.ansible.com/ansible/latest/playbook_guide/playbooks_reuse_roles.html#storing-and-finding-roles
 2024-12-08 02:55:25 +01:00
June
2460c31e78
 		check.yaml: add logic for printing all .dpkg-* files 2024-12-08 02:55:25 +01:00
June
2a4d3c5415
 		check.yaml: introduce check playbook with it printing host distro info 
This playbook is for checking various host parameters.
 2024-12-08 02:55:25 +01:00
June
e22d29a75c
 		pin ansible-lint (action) to a specific version to avoid random breakage 
ansible-lint just broke for our repo, therefore pin it to a specific
version to avoid that.
 2024-12-08 02:49:50 +01:00
June
e6d6d9eed0
 		report changed properly for "deactivate short moduli" task 
This fixes the ansible-lint no-changed-when complaint and also allows to
notify the reboot handler.
 2024-12-01 22:20:15 +01:00
June
e3a29c422a
 		convert two reboot tasks running on changed to handlers 
This fixes ansible-lint no-handler complaints.
 2024-12-01 04:38:07 +01:00
June
db02969168
 		add CI running ansible-lint 2024-12-01 04:16:42 +01:00
June
d3d37e2e4c
 		exclude .forgejo/ directory from ansible-lint 2024-11-24 01:08:13 +01:00
June
cf5e6c4e1a
 		fix ansible-lint error by not comparing to literal false 2024-11-23 02:56:16 +01:00
June
bb24e6fd5a
 		disable name[casing] check in ansible-lint config 2024-11-23 02:53:06 +01:00
June
4ff826e508
 		add .ansible-lint config with setting to skip yaml line-length check 2024-11-23 02:50:37 +01:00
June
4060dbbe21
 		fix all ansible-lint yaml errors (except for line-length) 2024-11-23 02:49:23 +01:00
June
a6453711d8
 		add .yamllint.yaml for some nicer yaml configuration for ansible-lint 2024-11-23 02:31:31 +01:00
June
6dcf254a24
 		add .editorconfig to ensure some style and format consistency 2024-11-23 02:11:48 +01:00
c6ristian
433008d211
 		Cleanup old configurations we no longer use. 
We have a bunch of old hosts, host_vars and roles we no longer use.
There is no real value to keep them as they can just be fetched from the
git history, should they be needed again.
This make gettin a overview of the repository much simpler.
 2024-11-22 23:09:35 +01:00
Stefan Bethke
739a2e1cbd Redirect to 38c3 hackertours shop for now 2024-11-18 12:22:45 +01:00
June
9faf2f731d
 		public-reverse-proxy: add config for www. and staging.c3cat.de 2024-11-12 23:07:14 +01:00
c6ristian
a386f9e2eb
 		custom alerts for CI VMs 
its expected for some VMs to have high Read / Write rates for some time
so this is a custom alerts for ours CI VMs
 2024-11-10 17:06:41 +01:00
c6ristian
3284fae62a
 		Add more prometheus node exporter 2024-11-05 19:16:28 +01:00
c6ristian
261bd7d654
 		Add prometheus-node-exporter role and add it to most hosts 2024-11-03 21:27:51 +01:00
c6ristian
88b8d3b9ba
 		Update Nextcloud to version 29 2024-10-31 23:17:24 +01:00
Stefan Bethke
d526e9fdfa Add cron job to prune old images 2024-10-31 11:27:12 +01:00
Stefan Bethke
f184ad220b Update to current version 2024-10-31 11:26:57 +01:00
June
1921a75339
 		public-reverse-proxy: add config for hydra.hamburg.ccc.de 2024-10-29 23:52:30 +01:00
Herr-Dante
735fe0ca9b Add local port forwarding for debug sessions 2024-10-27 22:27:07 +01:00
c6ristian
34dc6d9a84
 		Reduce Host Memory is underutilized to 10% 2024-10-18 21:15:20 +02:00
Stefan Bethke
b660d937dc Allow GPG keys as uploads 2024-10-18 12:40:24 +02:00
Stefan Bethke
2f00d21821 Redirect home page to wiki 2024-10-13 13:50:50 +02:00
Stefan Bethke
235e6e514f Move Pretix from hackertours to tickets 2024-10-13 09:10:10 +02:00
June
7cd4a9a723
 		public-reverse-proxy: add config for staging.hackertours.hamburg.ccc.de 2024-10-12 22:08:28 +02:00
June
d7a9534eeb
 		public-reverse-proxy: use public-web-static as host for hackert. ccchh 2024-10-12 22:00:14 +02:00
Stefan Bethke
a35fcc13cf Merge branch 'main' of git.hamburg.ccc.de:CCCHH/ansible-infra 2024-10-08 20:28:57 +02:00
Stefan Bethke
2fc54f5a83 Add missing headers to avoid CSRF errors 2024-10-08 20:28:56 +02:00
June
4cac84e7ec
 		prometheus: have different disk alerts for physical and virtual hosts 
Have more relaxed read/write alerts for physical hosts as they are
probably hypervisors and regular high read/writes are more common.
Also differentiate between physical and virtual hosts for IO alerts and
allow for hard disks to spend more time in IO.
 2024-10-05 17:22:45 +02:00
June
f721dd9fea
 		prometheus: make opnsense-ccchh job not fail half the time 
The scrape seems to take around a second to complete and with the
configured timeout of 1s that failed half the time. Therefore use the
default, more relaxed scrape interval and timeout and have it be
reliable.
 2024-10-05 17:22:45 +02:00