Author	SHA1	Message	Date
June	4ffb5c18a1	use jtbx SSH key instead of PGP key and use SOPS merge for admin keys ... Use jtbx SSH key instead of his PGP key and re-organize .sops.yaml around the SOPS merge feature to accommodate admin age/SSH keys.	2026-09-24 20:11:54 +02:00
June	f1135b818f	z9-router(host): new keys for Junes WireGuard	2026-09-21 19:09:07 +02:00
Stefan Bethke	233131b612	Use correct hostname	2026-08-18 19:27:54 +02:00
lilly	379aa7c451	add configuration required for dooris -> spaceapid integration	2026-08-11 20:54:27 +02:00
bitwhisker	d97c22cc8e	z9-router(host): fix dns	2026-08-07 23:36:37 +02:00
bitwhisker	22ace3c537	z9-router(host): fix file permissions	2026-08-07 23:13:44 +02:00
bitwhisker	51b2cac907	z9-router(host): remove netwan, vlan55 untagged, add and fix DNS, fix formatting	2026-08-07 22:56:07 +02:00
bitwhisker	fa91690485	z9(pve01): change thinkcccore0 to pve01	2026-08-07 22:55:33 +02:00
bitwhisker	9e92a3c390	z9(group): remove all z9 references as subdomain	2026-08-07 22:55:33 +02:00
bitwhisker	1a0ac38861	unbound(role): use existing deploy_systemd_resolved_config role and some reordering	2026-08-07 22:55:32 +02:00
bitwhisker	8351c28cd0	z9-router(host): add ansible pull	2026-08-07 22:55:31 +02:00
bitwhisker	1dff022146	z9-router(host): rename rt1 to z9-router	2026-08-07 22:55:31 +02:00
bitwhisker	010b8d1224	rt1(z9 host) unbound(role) kea_dhcp(role): create unbound and kea_dhcp role for rt1 ... - create unbound role - create kea_dhcp role - configure unbound and keadhcp on rt1(z9 host)	2026-08-07 22:55:31 +02:00
bitwhisker	aeaa80d2c4	rt1(z9 host): create host and configure networkd and nftables	2026-08-07 22:55:31 +02:00
Stefan Bethke	f749ed436c	Use fixed port range to allow for better fw rules	2026-08-02 17:25:30 +02:00
Stefan Bethke	0377db2812	Use correct hostname for yate	2026-08-02 17:24:58 +02:00
lilly	de8daaf56c	add dooris role for setup of dooris interaction on the node itself	2026-07-29 14:16:04 +02:00
June	7d7cf455eb	forgejo_runner(role): create role for setting up Forgejo Runner install	2026-07-03 03:42:18 +02:00
Stefan Bethke	3e0fdb6074	Configure transmission	2026-06-28 17:02:05 +02:00
Stefan Bethke	fa598c72fc	Add opensourcetorrents	2026-06-01 21:15:31 +02:00
Stefan Bethke	0842a51ae0	Merge branch 'main' of git.hamburg.ccc.de:CCCHH/ansible-infra	2026-05-24 00:12:52 +02:00
Stefan Bethke	603d3fb6f4	Update machine SMTP mail sending config	2026-05-24 00:12:50 +02:00
June	4574dbf4ba	secrets(role): introduce secrets role for storing secrets ... Allows storage of secrets to then be referenced in other places. The motivation was storing WireGuard secrets for systemd-networkd.	2026-05-23 22:40:17 +02:00
June	0c83fcc2b2	sops: darios key expired, so remove for now	2026-05-20 04:09:28 +02:00
bitwhisker	ec4dd36178	dooris(host): move to dns-01-acme-dns	2026-04-19 23:48:11 +02:00
June	26fbbc9035	sops: use fis new key	2026-04-19 00:36:37 +02:00
bitwhisker	abcd622757	light(host): move to dns-01-acme-dns	2026-04-11 04:34:24 +02:00
June	21f51ea2d7	z9(hosts): setup ansible-pull for all z9 hosts	2026-03-30 21:55:44 +02:00
June	c246a6815c	ansible-lint: fix issues	2026-03-06 21:27:51 +01:00
lilly	4f3caaf5ed	add bitwhisker to sops	2026-03-05 20:18:53 +01:00
June	711f2f1c64	certbot(role): don't use certbot__version_spec anymore as its not used	2026-03-01 20:08:49 +01:00
Stefan Bethke	e823c46a2d	stb updated key	2026-02-18 09:51:25 +01:00
Stefan Bethke	5f31392a27	Remove authoritative-dns as its not needed anymore	2026-02-11 10:38:04 +01:00
chris	6a92aa68c1	light: fix tls cert expiring and not renewing	2026-01-25 22:36:30 +01:00
chris	5693989c38	add alloy to the z9 hosts and some cleanup	2026-01-25 21:44:49 +01:00
June	51bbdd42a2	dooris(host): make certbot work	2026-01-13 16:55:22 +01:00
June	cffe5c2b16	dooris: use hostname instead of IP	2025-11-06 18:25:29 +01:00
June	ae60d6fea6	docker_compose(role): use community.docker.docker_compose_v2 module ... Use the community.docker.docker_compose_v2 module as it supports proper changed handling out of the box, making the roles code more straightforward and work. Also just do a docker compose restart instead of having the custom docker compose reload script. https://docs.ansible.com/ansible/latest/collections/community/docker/docker_compose_v2_module.html	2025-11-02 23:13:20 +01:00
June	18dda95c46	remove max expired key	2025-10-13 22:12:31 +02:00
June	f943e95e2e	fix ansible_lint issues ... Use prefix for role variables, have an ending newline at the end of files and use changed_when for command. Also exclude *.sops.yaml files from ansible-lint.	2025-10-13 17:43:00 +02:00
June	434ddfc955	ansible_pull(role): introduce ansible_pull role ... Introduce ansible_pull role for setting up automatic ansible_pull runs. Also add accompanying host group and playbook play.	2025-10-13 16:56:18 +02:00
Stefan Bethke	592afdced9	add waybackproxy	2025-09-06 11:39:05 +02:00
Stefan Bethke	9c50708b4e	Add second DECT	2025-08-02 09:43:18 +02:00
Stefan Bethke	cbb4beceb6	Add Werkstatt phone	2025-08-02 09:41:48 +02:00
c6ristian	72489be8bd	updatekeys for junes new key	2025-07-20 20:29:22 +02:00
Stefan Bethke	e628dcbce2	Legacy-Yate mit eigenem Eintrag	2025-07-11 19:37:05 +02:00
Stefan Bethke	ef4b45925c	Move lines over to yate ... Basic functionality should be working for incoming calls: * Fux Intercom to 1337 * Fonial to the Hamburg number * EPVPN Still to do: clean up internal extensions and more extensive testing	2025-07-06 19:07:27 +02:00
Stefan Bethke	2edb3443d6	Kick yate when config file changes ... closes #29	2025-07-06 17:32:23 +02:00
Stefan Bethke	4e651bca25	Fix password fro FB account	2025-07-05 11:10:05 +02:00
Stefan Bethke	2a322f9c85	Add production secrets ... Also use the correct file name for the SOPS secrets	2025-07-05 11:05:26 +02:00