Commit graph

923 commits

Author SHA1 Message Date
stb
c898a0ec0e Merge branch 'main' into jitsi-docker-compose-role 2026-10-14 12:57:38 +02:00
743a7d609c Update docker.io/onlyoffice/documentserver Docker tag to v10 2026-10-12 20:17:02 +00:00
42df2e4af1 revert 106a5cb97a
revert auth-dns: dooris has wrong ipv6 address
2026-10-11 00:01:24 +02:00
106a5cb97a
auth-dns: dooris has wrong ipv6 address 2026-10-10 23:58:31 +02:00
086eb9ff46
auth-dns: add ptouch-print-server to ccchh.net 2026-10-10 23:38:48 +02:00
54a4015bb0 Add matrix-sync 2026-10-08 14:27:27 +02:00
stb
816c7497fa Merge branch 'main' into jitsi-docker-compose-role 2026-10-08 11:12:38 +02:00
8bf5690275 Customize with our logos 2026-10-08 10:50:48 +02:00
610a1faca8 Allow UI customization 2026-10-08 10:50:23 +02:00
86e793c624 Use jitsi role to configure jitsi
The host has been manually cleaned up (removed old packages and config) and this config has been deployed already.
2026-10-08 10:24:38 +02:00
dbac5ede16 Add a role for Jitsi in Docker Compose
We need this role to follow the recommended deployment approach from https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-docker/

This role enables us to keep our config and customizations separate from releases of the Compose setup the Jitsi project publishs.
2026-10-08 10:23:17 +02:00
0f23f117a7 Update docker.io/pretix/standalone Docker tag to v2026.8 2026-10-04 14:16:17 +00:00
78ee1382d5 Confige sending mail with auth 2026-10-04 15:05:06 +02:00
d03264c256
set client_max_body_size to 100m on pad nginx 2026-10-02 16:21:07 +02:00
08d6f039ca Update quay.io/oauth2-proxy/oauth2-proxy Docker tag to v7.15.5 2026-10-01 14:16:30 +00:00
e21c7dccec Update git.hamburg.ccc.de/ccchh/oci-images/keycloak Docker tag to v26.7.5 2026-10-01 02:45:54 +00:00
5a18fbdb5a
status(host): add monitoring for www.didays.de (a redirect to didays.de) 2026-09-29 02:57:51 +02:00
6e9a75fa97
public-reverse-proxy(host): add config for www.didays.de 2026-09-29 02:57:51 +02:00
d9a13c7497
set new dooris' main lock to "Hauptraum" 2026-09-28 15:03:15 +02:00
d39ff1f861
fix *matrix: create room* guide link not being clickable 2026-09-27 18:20:49 +02:00
2ae7f86f6b
add c6ris age key backed via fido piv 2026-09-26 01:03:43 +02:00
Max
b9cc68bda1
reduce renovate executions to twice every six hours 2026-09-26 00:51:51 +02:00
d0fe432d9e Update quay.io/oauth2-proxy/oauth2-proxy Docker tag to v7.15.4 2026-09-25 12:05:35 +02:00
adf5ecdb54 Update mariadb Docker tag to v12.3.3 2026-09-25 00:16:55 +00:00
4ffb5c18a1
use jtbx SSH key instead of PGP key and use SOPS merge for admin keys
Use jtbx SSH key instead of his PGP key and re-organize .sops.yaml
around the SOPS merge feature to accommodate admin age/SSH keys.
2026-09-24 20:11:54 +02:00
Max
e2277e0e9c
bypass pull request workflow for automatic patch updates 2026-09-22 22:10:44 +02:00
83b0ab0950 public-reverse-proxy(host): Increase nginx worker fd limit
By default the limit on file descriptors is at a 1024 hard limit and 520k hard limit.
Unsure how this affects nginx, but each client connection needs two file descriptors.
So let's try to set the limit of open files explicitly.
2026-09-22 16:05:05 +02:00
1901ca515d Update git.hamburg.ccc.de/ccchh/oci-images/keycloak Docker tag to v26.7.4 2026-09-22 00:16:40 +00:00
049682bce2
host(draupnir): set backgroundDelayMS to have Draupnir act fast
Use a recommended low value for backgroundDelayMS to have Draupnir chain
consecutive backgrounded operations faster and therefore act faster.
2026-09-22 02:10:47 +02:00
81e5380a14 Update docker.io/library/nginx Docker tag to v1.31.6 2026-09-21 22:52:07 +02:00
acf0b57d97 Update docker.io/grafana/loki Docker tag to v3.7.8 2026-09-21 22:49:09 +02:00
fbddd28c71 public-reverse-proxy(host): Add bildungsurlaub.hamburg.ccc.de 2026-09-21 19:51:18 +02:00
a649455d92 auth-dns(host): Move bildungsurlaub.hamburg.ccc.de to public-web-static 2026-09-21 19:48:56 +02:00
547210d31f auth-dns(host): Remove deleted www2 and www3 VMs 2026-09-21 19:44:51 +02:00
f1135b818f
z9-router(host): new keys for Junes WireGuard 2026-09-21 19:09:07 +02:00
ee810bfc16
update matrix moderation docs to reflect that we now have two ban lists 2026-09-18 17:45:48 +02:00
d422b9660a
docs: correct mjolnir -> draupnir 2026-09-16 13:39:42 +02:00
5925b22bf5
setup cccfr secondary DNS 2026-09-11 10:52:37 +02:00
4bdd36b8f7
update knot role to support more operational variety
Now secondary zones, dynamic zones, interpeted catalog zones, etc.
are supported by our knot role
2026-09-11 10:52:33 +02:00
1290063204
update our moderation policy room access policy 2026-09-08 15:44:10 +02:00
f2a6ae5de9 Update docker.io/xenrox/ntfy-alertmanager Docker tag to v1.0.1 2026-09-07 23:43:48 +02:00
e3635939f4
fix draupnir ban docs 2026-09-07 18:38:39 +02:00
f7c3e2146d
migrate mjolnir to draupnir 2026-09-06 14:40:45 +02:00
ddce7783db add guide for common matrix moderation actions 2026-09-05 23:29:09 +02:00
8f07ad8ca4 add guide about matrix room creation 2026-09-05 23:29:09 +02:00
6a1caed856 add concept doc for matrix moderation 2026-09-05 23:29:09 +02:00
d20120d708 Migrate config renovate.json 2026-09-05 12:23:31 +02:00
bf04f2d163 Docs: Add dokuwiki upgrade guide 2026-09-04 21:13:58 +02:00
Max
39d95a7b9f except keycloak from grouped update PRs
keycloak is a critical service
separating keycloak updates makes it easier to respond quickly to
critical updates or delay them when there are breaking changes
2026-09-03 18:24:43 +02:00
Max
247cb031f2 auto update patch versions 2026-09-03 18:24:43 +02:00