d0fe432d9e
Update quay.io/oauth2-proxy/oauth2-proxy Docker tag to v7.15.4
2026-09-25 12:05:35 +02:00
adf5ecdb54
Update mariadb Docker tag to v12.3.3
2026-09-25 00:16:55 +00:00
4ffb5c18a1
use jtbx SSH key instead of PGP key and use SOPS merge for admin keys
...
Use jtbx SSH key instead of his PGP key and re-organize .sops.yaml
around the SOPS merge feature to accommodate admin age/SSH keys.
2026-09-24 20:11:54 +02:00
e2277e0e9c
bypass pull request workflow for automatic patch updates
2026-09-22 22:10:44 +02:00
83b0ab0950
public-reverse-proxy(host): Increase nginx worker fd limit
...
By default the limit on file descriptors is at a 1024 hard limit and 520k hard limit.
Unsure how this affects nginx, but each client connection needs two file descriptors.
So let's try to set the limit of open files explicitly.
2026-09-22 16:05:05 +02:00
1901ca515d
Update git.hamburg.ccc.de/ccchh/oci-images/keycloak Docker tag to v26.7.4
2026-09-22 00:16:40 +00:00
049682bce2
host(draupnir): set backgroundDelayMS to have Draupnir act fast
...
Use a recommended low value for backgroundDelayMS to have Draupnir chain
consecutive backgrounded operations faster and therefore act faster.
2026-09-22 02:10:47 +02:00
81e5380a14
Update docker.io/library/nginx Docker tag to v1.31.6
2026-09-21 22:52:07 +02:00
acf0b57d97
Update docker.io/grafana/loki Docker tag to v3.7.8
2026-09-21 22:49:09 +02:00
fbddd28c71
public-reverse-proxy(host): Add bildungsurlaub.hamburg.ccc.de
2026-09-21 19:51:18 +02:00
a649455d92
auth-dns(host): Move bildungsurlaub.hamburg.ccc.de to public-web-static
2026-09-21 19:48:56 +02:00
547210d31f
auth-dns(host): Remove deleted www2 and www3 VMs
2026-09-21 19:44:51 +02:00
f1135b818f
z9-router(host): new keys for Junes WireGuard
2026-09-21 19:09:07 +02:00
ee810bfc16
update matrix moderation docs to reflect that we now have two ban lists
2026-09-18 17:45:48 +02:00
d422b9660a
docs: correct mjolnir -> draupnir
2026-09-16 13:39:42 +02:00
5925b22bf5
setup cccfr secondary DNS
2026-09-11 10:52:37 +02:00
4bdd36b8f7
update knot role to support more operational variety
...
Now secondary zones, dynamic zones, interpeted catalog zones, etc.
are supported by our knot role
2026-09-11 10:52:33 +02:00
1290063204
update our moderation policy room access policy
2026-09-08 15:44:10 +02:00
f2a6ae5de9
Update docker.io/xenrox/ntfy-alertmanager Docker tag to v1.0.1
2026-09-07 23:43:48 +02:00
e3635939f4
fix draupnir ban docs
2026-09-07 18:38:39 +02:00
f7c3e2146d
migrate mjolnir to draupnir
2026-09-06 14:40:45 +02:00
ddce7783db
add guide for common matrix moderation actions
2026-09-05 23:29:09 +02:00
8f07ad8ca4
add guide about matrix room creation
2026-09-05 23:29:09 +02:00
6a1caed856
add concept doc for matrix moderation
2026-09-05 23:29:09 +02:00
d20120d708
Migrate config renovate.json
2026-09-05 12:23:31 +02:00
bf04f2d163
Docs: Add dokuwiki upgrade guide
2026-09-04 21:13:58 +02:00
39d95a7b9f
except keycloak from grouped update PRs
...
keycloak is a critical service
separating keycloak updates makes it easier to respond quickly to
critical updates or delay them when there are breaking changes
2026-09-03 18:24:43 +02:00
247cb031f2
auto update patch versions
2026-09-03 18:24:43 +02:00
4540dc5516
Update to current version, open up fully again.
2026-08-25 19:04:44 +02:00
bd71738df3
Temporary block until we can update Keycloak
2026-08-25 18:41:40 +02:00
ae314ea9b3
Configure manual subscriber lists
2026-08-24 10:01:16 +02:00
a2eba1ac70
fixed IP for Retro Sun SparcStation 4
2026-08-21 23:34:10 +02:00
5ae8a3b186
Re-add IP for waybackproxy
2026-08-21 23:28:21 +02:00
6389a936c8
Merge branch 'main' of git.hamburg.ccc.de:CCCHH/ansible-infra
2026-08-18 19:27:56 +02:00
233131b612
Use correct hostname
2026-08-18 19:27:54 +02:00
a87c27b3d5
keycloak(host): allow right ipv4 of z9 router
2026-08-17 21:39:00 +02:00
e9a5b711ae
Start migrating config to Ansible
...
The real file still lives in /opt/mailman on the host for now, need to migrate whole config into Ansible.
2026-08-17 09:25:23 +02:00
548d761def
Migrate officemail away
2026-08-17 09:20:13 +02:00
53c1801eba
Change confirmation lifetime to 7d
2026-08-16 09:28:42 +02:00
e668c44273
Enable list subscription management for intern@
2026-08-16 09:01:57 +02:00
00524f7bab
base_config: only install kitty-terminfo, not kitty
2026-08-11 23:55:03 +02:00
379aa7c451
add configuration required for dooris -> spaceapid integration
2026-08-11 20:54:27 +02:00
73760a9995
fix ansible-lint warnings
2026-08-11 17:38:51 +02:00
39d8ff4ef8
update wireguard publicKey for lilly
2026-08-11 17:33:57 +02:00
938a913094
z9-router(host): add firewall rule chaosknoten to z9 pbs
2026-08-09 17:32:36 +02:00
6a402aa544
z9-router(host): fix dhcp6 config, wrong interface
2026-08-09 17:09:40 +02:00
35381d5bb9
z9-router and auth-dns(host): add static dhcp lease and dns entry for wled-eh22
2026-08-09 17:09:15 +02:00
f5d1c6deee
z9-router(host): add firewall rule staubis to club assistant
2026-08-07 23:50:57 +02:00
8f3cd75a46
Merge branch 'main' into renovate/docker.io-pretalx-standalone-2026.x
2026-08-07 23:47:09 +02:00
cf18c8e633
Merge branch 'main' into renovate/docker.io-pretix-standalone-2026.x
2026-08-07 23:44:45 +02:00
