Author	SHA1	Message	Date
June	4ffb5c18a1	use jtbx SSH key instead of PGP key and use SOPS merge for admin keys ... Use jtbx SSH key instead of his PGP key and re-organize .sops.yaml around the SOPS merge feature to accommodate admin age/SSH keys.	2026-09-24 20:11:54 +02:00
June	f1135b818f	z9-router(host): new keys for Junes WireGuard	2026-09-21 19:09:07 +02:00
lilly	5925b22bf5	setup cccfr secondary DNS	2026-09-11 10:52:37 +02:00
lilly	4bdd36b8f7	update knot role to support more operational variety ... Now secondary zones, dynamic zones, interpeted catalog zones, etc. are supported by our knot role	2026-09-11 10:52:33 +02:00
lilly	f7c3e2146d	migrate mjolnir to draupnir	2026-09-06 14:40:45 +02:00
Stefan Bethke	233131b612	Use correct hostname	2026-08-18 19:27:54 +02:00
Stefan Bethke	53c1801eba	Change confirmation lifetime to 7d	2026-08-16 09:28:42 +02:00
lilly	379aa7c451	add configuration required for dooris -> spaceapid integration	2026-08-11 20:54:27 +02:00
bitwhisker	d97c22cc8e	z9-router(host): fix dns	2026-08-07 23:36:37 +02:00
bitwhisker	22ace3c537	z9-router(host): fix file permissions	2026-08-07 23:13:44 +02:00
bitwhisker	51b2cac907	z9-router(host): remove netwan, vlan55 untagged, add and fix DNS, fix formatting	2026-08-07 22:56:07 +02:00
bitwhisker	fa91690485	z9(pve01): change thinkcccore0 to pve01	2026-08-07 22:55:33 +02:00
bitwhisker	9e92a3c390	z9(group): remove all z9 references as subdomain	2026-08-07 22:55:33 +02:00
bitwhisker	1a0ac38861	unbound(role): use existing deploy_systemd_resolved_config role and some reordering	2026-08-07 22:55:32 +02:00
bitwhisker	8351c28cd0	z9-router(host): add ansible pull	2026-08-07 22:55:31 +02:00
bitwhisker	1dff022146	z9-router(host): rename rt1 to z9-router	2026-08-07 22:55:31 +02:00
bitwhisker	010b8d1224	rt1(z9 host) unbound(role) kea_dhcp(role): create unbound and kea_dhcp role for rt1 ... - create unbound role - create kea_dhcp role - configure unbound and keadhcp on rt1(z9 host)	2026-08-07 22:55:31 +02:00
bitwhisker	aeaa80d2c4	rt1(z9 host): create host and configure networkd and nftables	2026-08-07 22:55:31 +02:00
Stefan Bethke	f749ed436c	Use fixed port range to allow for better fw rules	2026-08-02 17:25:30 +02:00
Stefan Bethke	0377db2812	Use correct hostname for yate	2026-08-02 17:24:58 +02:00
Stefan Bethke	6eafc47773	jitsi dazu ... Erstmal nur der Host, die eigentliche Config muss später passieren	2026-07-29 22:52:13 +02:00
lilly	de8daaf56c	add dooris role for setup of dooris interaction on the node itself	2026-07-29 14:16:04 +02:00
Stefan Bethke	685646c697	Set up Keycloak to Mailman sync for chaos@ ... DRY_RUN=true, so no changes to Mailman are performed yet.	2026-07-26 16:19:41 +02:00
Stefan Bethke	647058f6ad	ccchoir: stick to major version and cronjob update	2026-07-26 13:21:41 +02:00
Stefan Bethke	283bc80b41	Update wordpress image	2026-07-26 00:47:54 +02:00
Stefan Bethke	70b1039f95	Upgrade Hedgdedoc to 1.11.1 ... Closes #130 Also add appropriate config for renovate to upgrade Hedgedoc.	2026-07-24 23:26:23 +02:00
Renovate	374e8f981a	Update git.hamburg.ccc.de/ccchh/oci-images/nextcloud Docker tag to v34	2026-07-23 20:16:22 +00:00
Renovate	1ae4a39f57	Update all stable non-major dependencies	2026-07-08 00:16:11 +00:00
June	9ae16363c5	forgejo-runner-external(host): configure forgejo-runner setup ... Configure connection for the DI-Day/website repo.	2026-07-08 00:42:50 +02:00
June	dd1cd6f529	forgejo-runner-external(host): basic setup	2026-07-08 00:20:02 +02:00
June	d44d84ae2a	forgejo-runner(host): configure forgejo-runner setup	2026-07-03 03:42:18 +02:00
June	7d7cf455eb	forgejo_runner(role): create role for setting up Forgejo Runner install	2026-07-03 03:42:18 +02:00
June	94120337aa	forgejo-runner(host): basic setup	2026-07-03 03:42:17 +02:00
Stefan Bethke	3e0fdb6074	Configure transmission	2026-06-28 17:02:05 +02:00
lilly	431aaefb36	dns: remove ns.vie.ccc.de from already migrated zones	2026-06-10 16:05:51 +02:00
lilly	6d922b7c8b	dns: also notify erfadns.ber.ccc.de for catalog zone changes	2026-06-10 13:12:00 +02:00
lilly	b283089b06	readd ns.vie.ccc.de to our zones because zones are not delegated yet	2026-06-09 21:27:33 +02:00
lilly	471012928a	auth-dns: configure nameserver secondary solely to erfadns.ber.ccc.de	2026-06-09 10:31:32 +02:00
lilly	5f94d7f284	remove ns-intern.hamburg.ccc.de from notify targets of our domains	2026-06-06 16:26:47 +02:00
lilly	66e0095070	add zone diday.org. to authoritative DNS	2026-06-06 16:25:18 +02:00
June	fa6e280594	www2/www3(host): remove hosts as they got removed	2026-06-04 00:54:55 +02:00
Stefan Bethke	fa598c72fc	Add opensourcetorrents	2026-06-01 21:15:31 +02:00
Stefan Bethke	0842a51ae0	Merge branch 'main' of git.hamburg.ccc.de:CCCHH/ansible-infra	2026-05-24 00:12:52 +02:00
Stefan Bethke	603d3fb6f4	Update machine SMTP mail sending config	2026-05-24 00:12:50 +02:00
June	4574dbf4ba	secrets(role): introduce secrets role for storing secrets ... Allows storage of secrets to then be referenced in other places. The motivation was storing WireGuard secrets for systemd-networkd.	2026-05-23 22:40:17 +02:00
chris	ec27b52820	cloud: bump nextcloud to 33 and postgres 15.18	2026-05-20 19:49:53 +02:00
lilly	292c626629	add ns2.vie.ccc.de as dns secondary	2026-05-20 15:44:47 +02:00
June	0c83fcc2b2	sops: darios key expired, so remove for now	2026-05-20 04:09:28 +02:00
lilly	8a8ce7206d	add infrastructure-authorized-keys to lists host	2026-05-19 16:27:59 +02:00
lilly	6bb09901a0	add ns.vie.ccc.de. as direct secondary for authoritative DNS zones	2026-05-19 11:00:03 +02:00