Author	SHA1	Message	Date
Stefan Bethke	ce96105463	Make Jitsi JVB work correctly with IPv6 ... Since the Jitsi Docker Compose stack does not properly take IPv6 into consideration, patch the JVB config to add mappings from the private IPv6 address of the Docker network to the public IPv6 address. This should be the source of the reported problems with conferences with 3+ people.	2026-10-20 15:34:05 +02:00
Stefan Bethke	610a1faca8	Allow UI customization	2026-10-08 10:50:23 +02:00
Stefan Bethke	86e793c624	Use jitsi role to configure jitsi ... The host has been manually cleaned up (removed old packages and config) and this config has been deployed already.	2026-10-08 10:24:38 +02:00
Stefan Bethke	dbac5ede16	Add a role for Jitsi in Docker Compose ... We need this role to follow the recommended deployment approach from https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-docker/ This role enables us to keep our config and customizations separate from releases of the Compose setup the Jitsi project publishs.	2026-10-08 10:23:17 +02:00
Max	b9cc68bda1	reduce renovate executions to twice every six hours	2026-09-26 00:51:51 +02:00
lilly	4bdd36b8f7	update knot role to support more operational variety ... Now secondary zones, dynamic zones, interpeted catalog zones, etc. are supported by our knot role	2026-09-11 10:52:33 +02:00
chris	00524f7bab	base_config: only install kitty-terminfo, not kitty	2026-08-11 23:55:03 +02:00
lilly	379aa7c451	add configuration required for dooris -> spaceapid integration	2026-08-11 20:54:27 +02:00
lilly	73760a9995	fix ansible-lint warnings	2026-08-11 17:38:51 +02:00
bitwhisker	ebdafb997f	unbound(role): also over write fallback_dns in resolvd	2026-08-07 23:36:22 +02:00
bitwhisker	1ec54ad502	secrets(role): add parent folder settings	2026-08-07 23:10:54 +02:00
bitwhisker	4fbac5cfe6	unbound(role): add config flag in README	2026-08-07 22:56:07 +02:00
bitwhisker	c45fb91f76	kea_dhcp(role): seperate package installes	2026-08-07 22:55:57 +02:00
bitwhisker	47fbd96642	kea_dhcp(role): update README	2026-08-07 22:55:57 +02:00
bitwhisker	897ee5fa43	kea_dhcp(role): remove unused	2026-08-07 22:55:57 +02:00
bitwhisker	7eabd88e2c	unbound(role): update readme and move task block to top level and remove unused	2026-08-07 22:55:57 +02:00
bitwhisker	32caa40f77	unbound(role): fix some unbound setup stuff	2026-08-07 22:55:55 +02:00
bitwhisker	8d9cb0007c	kea_dhcp(role): update to newest fux noc version	2026-08-07 22:55:55 +02:00
bitwhisker	9271cbda97	unbound(role): fix systemd unit of prometheus exporter	2026-08-07 22:55:34 +02:00
bitwhisker	83f654037a	unbound(role): fix unbound prometheus exporter install on debian ... - download debian image from github und verify checksum - setup systemd service unit	2026-08-07 22:55:33 +02:00
bitwhisker	6b05c4b05a	unbound(role): fix unbound config template ... - fix some indentation problems - fix access control - fix remote control unix socket and thrust anchor file (because debain appamour ist annoying) - add unbound-anchor package	2026-08-07 22:55:33 +02:00
bitwhisker	db6ef3fcb2	kea_dhcp(role): fix include wars check	2026-08-07 22:55:33 +02:00
bitwhisker	a0b0e8188f	unbound(role): move resolvd vars to task	2026-08-07 22:55:33 +02:00
bitwhisker	5423558ab4	unbound(role): make unbound thread number configurable	2026-08-07 22:55:32 +02:00
bitwhisker	bb141ddab3	unbound(role): reformat config template and use all vcpus	2026-08-07 22:55:32 +02:00
bitwhisker	9a5dafb2bc	unbound(role): remove tags inside role	2026-08-07 22:55:32 +02:00
bitwhisker	a4bb9a82d2	unbound(role): add FIXME note to unbound prometheus exporter install	2026-08-07 22:55:32 +02:00
bitwhisker	1a0ac38861	unbound(role): use existing deploy_systemd_resolved_config role and some reordering	2026-08-07 22:55:32 +02:00
bitwhisker	613e0528d7	kea_dhcp(role): make stork-agent.env smaller and add link to documentation	2026-08-07 22:55:32 +02:00
bitwhisker	6734843e8a	kea_dhcp(role): fix indentation in template	2026-08-07 22:55:32 +02:00
bitwhisker	c803b1fc67	kea_dhcp(role): add README.md	2026-08-07 22:55:31 +02:00
bitwhisker	7440e8fd15	kea_dhcp(role): some fixes and removing arch part ... - remove tags from tasks - remove archlinux part - use debian default package for kea	2026-08-07 22:55:31 +02:00
bitwhisker	010b8d1224	rt1(z9 host) unbound(role) kea_dhcp(role): create unbound and kea_dhcp role for rt1 ... - create unbound role - create kea_dhcp role - configure unbound and keadhcp on rt1(z9 host)	2026-08-07 22:55:31 +02:00
June	9a78164b7b	roles(dooris): remove blank line to make ansible-lint happy	2026-08-03 00:06:44 +02:00
lilly	de8daaf56c	add dooris role for setup of dooris interaction on the node itself	2026-07-29 14:16:04 +02:00
lilly	699a2bcfff	specify that docker_compose role may not be included twice ... Our docker compose role is configured via ansible variables in a way that overwrites each other if it is activated twice with different variable assignments (unless e.g. a role that just installs more packages). To prevent misuse of the role, the allow_duplicates key of the role meta is set to false. This should make ansible complain if the role is included twice for a single host.	2026-07-29 14:16:04 +02:00
chris	4218b59d3b	fix: alloy role the suites for deb repo must be stable	2026-07-23 22:08:58 +02:00
chris	900971ebe9	alloy(role): pull in alloy role that works from fux (#112) ... Reviewed-on: CCCHH/ansible-infra#112 Reviewed-by: June <june@noreply.git.hamburg.ccc.de>	2026-07-23 20:34:02 +02:00
June	a35326a065	transmission(role): running the handler should always report changed ... Make ansible-lint happy by specifying that.	2026-07-08 00:59:02 +02:00
Stefan Bethke	81b16a04cb	Explain why this is necessary	2026-07-05 10:40:29 +02:00
June	0acc56b238	docker(role): document gVisor issue with user-def. br. and provide help ... Document issue with containers on user-defined bridges and using the gVisor runsc runtime. Also provide a helper resolv.conf as a workaround.	2026-07-03 03:42:18 +02:00
June	2e50226b94	docker(role): provide option to set up gVisor (runsc runtime)	2026-07-03 03:42:18 +02:00
June	7d7cf455eb	forgejo_runner(role): create role for setting up Forgejo Runner install	2026-07-03 03:42:18 +02:00
Stefan Bethke	3e0fdb6074	Configure transmission	2026-06-28 17:02:05 +02:00
lilly	5973de0959	dns: validate zone files before apply in knot role	2026-06-10 16:17:58 +02:00
lilly	8ca5d82d39	knot: fix templating inconsistency in netplan config	2026-06-06 15:06:11 +02:00
lilly	3a09c107b9	knot: use explicit ansible_facts reference	2026-06-06 14:59:16 +02:00
June	4574dbf4ba	secrets(role): introduce secrets role for storing secrets ... Allows storage of secrets to then be referenced in other places. The motivation was storing WireGuard secrets for systemd-networkd.	2026-05-23 22:40:17 +02:00
lilly	3541c68357	disable dnssec for catalog zones on auth-dns ... Catalog zones are not real zones in the DNS hierarchy and don't have a parent zone. Therefore they will never have a valid DNSSEC delegation so we should skip signing those zones.	2026-05-19 11:01:52 +02:00
June	73e77bde70	tag plays in playbooks (instead of tasks in roles)	2026-05-19 00:24:10 +02:00