cc6790dff2
Merge branch 'main' of git.hamburg.ccc.de:CCCHH/ansible-infra
2026-11-05 09:08:03 +01:00
9174ed6152
hta: set proper django secret key
2026-11-05 09:08:01 +01:00
947d8fd0a0
ansible-pull(role): deploy failure notify service using the copy loop
...
Deploy the ansible-pull-failure-notify.service using the loop using
ansible.builtin.copy as it doesn't have any template logic.
2026-11-04 17:28:05 +01:00
a4a92448dc
ansible-pull(role): have failure notify deploy match other script deploy
...
Have the deployment of the ansible-pull-failure-notify script match the
deployment of the other helper scripts.
2026-11-04 17:28:05 +01:00
96a7eabbac
ansible-pull(role): move ansible-pull reboot logic to script as well
...
Do this to unify the way these helper scripts get deployed.
2026-11-04 17:28:05 +01:00
1157c98ff5
ansible-pull(role): make successful run timestamp exporter work
...
The successful run timestamp exporter didn't work, because the
ansible-pull user wouldn't necessarily have the necessary permissions
and because the command wouldn't properly work.
Move the timestamp export as well as the reboot to separate services,
which always run as root, to ensure these operations work and to have a
clean setup using systemd services.
Also move the successful run timestamp exporter to a custom script to
have it work properly.
2026-11-04 17:28:03 +01:00
f6f6cc4804
ansible-pull(role): export last successful run timestamp statistic
...
Using the node exporter textfile collector, expose the timestamp of the
last successful ansible-pull run.
2026-11-03 19:58:03 +01:00
52d3d8ecd9
alloy(role): enable node exporter textfile collector
...
Enable the node exporter textfile collector, which allows for collecting
custom statistics in a simple way.
https://github.com/prometheus/node_exporter#textfile-collector
2026-11-03 19:58:03 +01:00
94430cb43a
hta: Enable OIDC login
2026-11-03 00:23:15 +01:00
6a87ba0562
Add Hackertours Admin (hta) ( #182 )
...
The two images are built in https://git.hamburg.ccc.de/CCCHH/hackertours-admin
Reviewed-on: CCCHH/ansible-infra#182
Reviewed-by: chris <c6ristian+git-ccchh@christian.moe>
2026-11-02 18:51:09 +01:00
04f2b1d25c
Limit the size of logs more severly
...
The goal is to:
* limit the amount of (potentially) PII data by limiting retention time
* make sure the disk doesn't fill up with log data
* make it easier to look at logs on the system without having to wade through many old entries
2026-11-02 18:28:50 +01:00
04bb14c6f4
update matrix moderation guidelines based on infra-team discussion
2026-11-01 22:58:26 +01:00
c28d7706a3
autoremove apt packages after upgrades
2026-10-31 16:27:51 +01:00
8fb44f13ce
add dooris-pve
2026-10-30 00:39:38 +01:00
30ab1f2238
bump draupnir to 3.2.0
2026-10-29 19:45:34 +01:00
47d4da604a
ansible-lint: ignore more directories that aren't part of the repo
2026-10-29 15:50:53 +01:00
5c558950e4
Add log rotation
2026-10-29 15:50:04 +01:00
df4f065a30
Sync about every 2 minutes
2026-10-29 15:50:04 +01:00
1dc38a5de0
Add matrix-sync compose setup
2026-10-29 15:50:04 +01:00
13f47cce68
add static ip and dns for openwebrx
2026-10-27 23:22:30 +01:00
d7ef159455
add static ip and dns for crabsdr
2026-10-27 23:08:55 +01:00
e56e03176e
auth-dns(host): fix club-assistant acme cname
2026-10-22 16:54:08 +02:00
88887b3109
Update docker.io/library/nginx Docker tag to v1.31.8
2026-10-22 02:17:06 +00:00
f078b902b3
Re-enable ccchoir blog
2026-10-21 23:29:02 +02:00
39028a6557
dokuwiki(role): set php strict_mode and disable upload_progress
2026-10-21 18:02:13 +02:00
be76c3d792
wiki.ccchh.net is not longer in the dns
...
so we remove it from all other configs as well
2026-10-21 16:55:32 +02:00
311404a6be
dokuwiki(role): add support for Debian 13 & remove for 11
2026-10-21 16:33:55 +02:00
ec2be61327
Update docker.io/grafana/loki Docker tag to v3.7.9
2026-10-21 02:17:27 +00:00
56ecf7ff18
grafana: remove ccchh opnsense for scrape jobs
2026-10-20 20:52:10 +02:00
ce96105463
Make Jitsi JVB work correctly with IPv6
...
Since the Jitsi Docker Compose stack does not properly take IPv6 into consideration, patch the JVB config to add mappings from the private IPv6 address of the Docker network to the public IPv6 address.
This should be the source of the reported problems with conferences with 3+ people.
2026-10-20 15:34:05 +02:00
442231323c
disable ccchoir.de for now
2026-10-20 15:05:55 +02:00
c02b7e6f35
Merge branch 'main' into jitsi-docker-compose-role
2026-10-20 15:04:15 +02:00
9032e5b34a
also fix www.didays.de monitoring
2026-10-19 13:17:54 +02:00
7061ff8b14
fix didays.de monitoring
2026-10-19 13:11:43 +02:00
8e0bc6c406
fix onlyoffice monitoring
2026-10-16 17:49:13 +02:00
c970e5fb83
Update docker.io/library/nginx Docker tag to v1.31.7
2026-10-15 14:16:47 +00:00
c898a0ec0e
Merge branch 'main' into jitsi-docker-compose-role
2026-10-14 12:57:38 +02:00
743a7d609c
Update docker.io/onlyoffice/documentserver Docker tag to v10
2026-10-12 20:17:02 +00:00
42df2e4af1
revert 106a5cb97a
...
revert auth-dns: dooris has wrong ipv6 address
2026-10-11 00:01:24 +02:00
106a5cb97a
auth-dns: dooris has wrong ipv6 address
2026-10-10 23:58:31 +02:00
086eb9ff46
auth-dns: add ptouch-print-server to ccchh.net
2026-10-10 23:38:48 +02:00
54a4015bb0
Add matrix-sync
2026-10-08 14:27:27 +02:00
816c7497fa
Merge branch 'main' into jitsi-docker-compose-role
2026-10-08 11:12:38 +02:00
8bf5690275
Customize with our logos
2026-10-08 10:50:48 +02:00
610a1faca8
Allow UI customization
2026-10-08 10:50:23 +02:00
86e793c624
Use jitsi role to configure jitsi
...
The host has been manually cleaned up (removed old packages and config) and this config has been deployed already.
2026-10-08 10:24:38 +02:00
dbac5ede16
Add a role for Jitsi in Docker Compose
...
We need this role to follow the recommended deployment approach from https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-docker/
This role enables us to keep our config and customizations separate from releases of the Compose setup the Jitsi project publishs.
2026-10-08 10:23:17 +02:00
0f23f117a7
Update docker.io/pretix/standalone Docker tag to v2026.8
2026-10-04 14:16:17 +00:00
78ee1382d5
Confige sending mail with auth
2026-10-04 15:05:06 +02:00
d03264c256
set client_max_body_size to 100m on pad nginx
2026-10-02 16:21:07 +02:00
