Commit graph ansible-infra/.sops.yaml
Author SHA1 Message Date
4ffb5c18a1
use jtbx SSH key instead of PGP key and use SOPS merge for admin keys
Use jtbx SSH key instead of his PGP key and re-organize .sops.yaml
around the SOPS merge feature to accommodate admin age/SSH keys.
2026-09-24 20:11:54 +02:00
f7c3e2146d
migrate mjolnir to draupnir 2026-09-06 14:40:45 +02:00
8351c28cd0
z9-router(host): add ansible pull 2026-08-07 22:55:31 +02:00
6eafc47773 jitsi dazu
Erstmal nur der Host, die eigentliche Config muss später passieren
2026-07-29 22:52:13 +02:00
dd1cd6f529
forgejo-runner-external(host): basic setup 2026-07-08 00:20:02 +02:00
94120337aa
forgejo-runner(host): basic setup 2026-07-03 03:42:17 +02:00
0c83fcc2b2
sops: darios key expired, so remove for now 2026-05-20 04:09:28 +02:00
d9fc1ef401
add host auth-dns.hamburg.ccc.de 2026-04-29 21:24:59 +02:00
d7811f249a
diday-staging-runner(host): deploy host runner for diday staging deploy 2026-04-28 20:12:27 +02:00
26fbbc9035
sops: use fis new key 2026-04-19 00:36:37 +02:00
21f51ea2d7
z9(hosts): setup ansible-pull for all z9 hosts 2026-03-30 21:55:44 +02:00
0788fde69d only allow sops encryption of *.sops.* files 2026-03-06 20:21:33 +01:00
4f3caaf5ed
add bitwhisker to sops 2026-03-05 20:18:53 +01:00
e823c46a2d stb updated key 2026-02-18 09:51:25 +01:00
fe647da3bf
mjolnir: deploy mjolnir using docker compose
Moving from mjolnir from nix-infra to ansible-infra.
Also using native encryption now instead of the deprecated pantalaimon
and having protectAllJoinedRooms set to true for easier and quicker
usage.
2026-02-11 03:10:43 +01:00
2f67cb875d
status(host): rotate age key 2026-02-09 17:43:25 +01:00
0f3cd2c70a amcedns to enable Let's Encrypt DNS-01 challenges 2026-01-25 22:41:42 +01:00
5693989c38
add alloy to the z9 hosts and some cleanup 2026-01-25 21:44:49 +01:00
cee1fe970a Add spaceapiccc as a replacement for erfafoo 2026-01-25 14:03:54 +01:00
fe52127e82
status(host): configure external status page and uptime monitoring host 2026-01-18 01:26:52 +01:00
94e1920388
setup ansible-pull for all Chaosknoten hosts
Additionally setup ansible-pull for: ccchoir, tickets, keycloak, lists,
mumble, pad, public-reverse-proxy, zammad, ntfy
2025-10-20 21:25:56 +02:00
a32998d8da
renovate(host): initialize renovate host 2025-10-16 17:44:23 +02:00
f646cc0bf2
fix creation rules for eh22-wiki, sunders and wiki hosts
Also update the keys of the secret files accordingly.
This should then fix ansible-pull on these hosts.
2025-10-15 10:45:54 +02:00
1d6d1094bc
setup ansible-pull for 7 more hosts
Setup for: cloud, eh22-wiki, grafana, onlyoffice, pretalx, sunders and
wiki.
2025-10-15 01:59:29 +02:00
17fd71f079
define common msmtp configuration for chaosknoten inventory hosts
Define common configuration as it is the same for all hosts.
2025-10-14 01:45:44 +02:00
18dda95c46
remove max expired key 2025-10-13 22:12:31 +02:00
1f394a08dd
refactor .sops.yaml to make it less verbose
Make it less verbose by introducing an anchor for the admin_gpg_keys.
2025-10-13 20:51:31 +02:00
bd281713f1
netbox(host): setup ansible_pull for host 2025-10-13 16:59:42 +02:00
8bc9534ce6
set junes new key 2025-07-20 20:20:41 +02:00
3a80459fa0 junes key has been renewed 2025-07-05 10:51:01 +02:00
4c4ca9127a Comment out expired key 2025-07-04 20:51:05 +02:00
6824bf5e4f
ntfy 2025-06-02 00:29:08 +02:00
7526d1c6a1 Add dooris (2.0) 2025-05-29 17:42:59 +02:00
7f1afef50d
move secrets from sops lookup plugin to sops vars plugin
This makes secret configuration and usage a good bit cleaner.
2025-05-04 16:50:15 +02:00
a943b152f2
zammad(host): move secrets to SOPS 2025-05-03 23:26:58 +02:00
fa634f6900
onlyoffice(host): move secrets to SOPS 2025-05-03 23:22:45 +02:00
b841cc1409
tickets(host): move secrets to SOPS 2025-05-03 23:16:34 +02:00
60b2093a02
netbox(host): move secrets to SOPS 2025-05-03 23:08:41 +02:00
65b6eff5bd
pretalx(host): move secrets to SOPS 2025-05-03 22:59:37 +02:00
31ad4654c6
ccchoir(host): move secrets to SOPS 2025-05-03 22:48:49 +02:00
7c598132ee
pad(host): move secrets to SOPS 2025-05-03 22:39:37 +02:00
97b8386878
grafana(host): move secrets to SOPS 2025-05-03 22:18:26 +02:00
37e8782a0b
keycloak(host): move secrets to SOPS 2025-05-03 21:53:40 +02:00
8de07c2688
cloud(host): move secrets to SOPS 2025-05-03 21:30:06 +02:00