171 commits

Author	SHA1	Message	Date
June	747e5b2d4c	zammad(host): change to .env configuration ... Align the compose.yaml to upstreams v11.2.0 version. This is a first step to hopefully then just use the upstreams version directly and not vendor it.	2025-10-24 22:15:48 +02:00
June	94e1920388	setup ansible-pull for all Chaosknoten hosts ... Additionally setup ansible-pull for: ccchoir, tickets, keycloak, lists, mumble, pad, public-reverse-proxy, zammad, ntfy	2025-10-20 21:25:56 +02:00
c6ristian	f3902b43b1	update keycloak and nextcloud	2025-10-20 21:11:28 +02:00
June	2aa55770d9	renovate(host): update keys adding renovate for group_vars/all.sops.yaml	2025-10-17 16:05:04 +02:00
June	cad2f036e5	renovate(host): replace non-working GitHub token with working one ... Replace the token with one created from a new CCCHH GitHub service account.	2025-10-17 01:18:17 +02:00
June	e76c66d74c	renovate(host): set up Renovate using role and exisiting config ... Set up Renovate using role and existing config from current Forgejo/GitHub Actions-based deployment.	2025-10-16 17:52:30 +02:00
June	a32998d8da	renovate(host): initialize renovate host	2025-10-16 17:44:23 +02:00
June	8388657d33	renovate(role): introduce first basic Renovate role ... Sets up Renovate using Docker and systemd service and timer to run regularly. Also add accompanying host group and playbook play.	2025-10-16 17:42:13 +02:00
June	f646cc0bf2	fix creation rules for eh22-wiki, sunders and wiki hosts ... Also update the keys of the secret files accordingly. This should then fix ansible-pull on these hosts.	2025-10-15 10:45:54 +02:00
June	1d6d1094bc	setup ansible-pull for 7 more hosts ... Setup for: cloud, eh22-wiki, grafana, onlyoffice, pretalx, sunders and wiki.	2025-10-15 01:59:29 +02:00
June	eadae7a09b	ansible_pull(role): add failure notifications	2025-10-14 22:20:27 +02:00
June	17fd71f079	define common msmtp configuration for chaosknoten inventory hosts ... Define common configuration as it is the same for all hosts.	2025-10-14 01:45:44 +02:00
June	afceb886dc	msmtp(role): introduce msmtp role ... Introduce msmtp role for setting up msmtp for mail sending. Also add accompanying host group and playbook play.	2025-10-14 01:40:46 +02:00
June	18dda95c46	remove max expired key	2025-10-13 22:12:31 +02:00
June	f943e95e2e	fix ansible_lint issues ... Use prefix for role variables, have an ending newline at the end of files and use changed_when for command. Also exclude *.sops.yaml files from ansible-lint.	2025-10-13 17:43:00 +02:00
June	9b8e14f3c4	remove duplicate ansible_pull_hosts inventory group entry	2025-10-13 17:37:13 +02:00
June	bd281713f1	netbox(host): setup ansible_pull for host	2025-10-13 16:59:42 +02:00
June	648489ed09	define common ansible_pull configuration for chaosknoten inventory hosts ... Define common configuration as it should be the same for all hosts, just the ansible_pull__age_private_key needs to be set per host then.	2025-10-13 16:58:30 +02:00
June	434ddfc955	ansible_pull(role): introduce ansible_pull role ... Introduce ansible_pull role for setting up automatic ansible_pull runs. Also add accompanying host group and playbook play.	2025-10-13 16:56:18 +02:00
June	dec68ab994	sunders(host): initialize sunders host	2025-10-11 20:52:26 +02:00
c6ristian	1355d4d834	grafana: make alerts better for fux	2025-09-09 19:30:53 +02:00
Stefan Bethke	592afdced9	add waybackproxy	2025-09-06 11:39:05 +02:00
Stefan Bethke	9c50708b4e	Add second DECT	2025-08-02 09:43:18 +02:00
Stefan Bethke	cbb4beceb6	Add Werkstatt phone	2025-08-02 09:41:48 +02:00
c6ristian	72489be8bd	updatekeys for junes new key	2025-07-20 20:29:22 +02:00
Stefan Bethke	e628dcbce2	Legacy-Yate mit eigenem Eintrag	2025-07-11 19:37:05 +02:00
Stefan Bethke	ef4b45925c	Move lines over to yate ... Basic functionality should be working for incoming calls: * Fux Intercom to 1337 * Fonial to the Hamburg number * EPVPN Still to do: clean up internal extensions and more extensive testing	2025-07-06 19:07:27 +02:00
Stefan Bethke	2edb3443d6	Kick yate when config file changes ... closes #29	2025-07-06 17:32:23 +02:00
Stefan Bethke	4e651bca25	Fix password fro FB account	2025-07-05 11:10:05 +02:00
Stefan Bethke	2a322f9c85	Add production secrets ... Also use the correct file name for the SOPS secrets	2025-07-05 11:05:26 +02:00
Stefan Bethke	eefcbe0c43	Add yate	2025-07-04 20:51:14 +02:00
c6ristian	5863b2f9e3	ntfy: iOS instant notifications	2025-06-30 21:11:48 +02:00
c6ristian	a49b8b6d13	cloud: bump nextcloud version to 31	2025-06-29 20:54:32 +02:00
c6ristian	2cb9dc6dae	grafana dinge versuchen	2025-06-12 19:20:03 +02:00
c6ristian	0a50ee470a	grafana: add email alerts, and fix some rules	2025-06-10 21:22:53 +02:00
c6ristian	75bf485eac	Alloy: enable collector systemd	2025-06-03 01:11:39 +02:00
c6ristian	3a9673b113	ntfy alerts	2025-06-02 22:42:37 +02:00
c6ristian	0248b64670	update ntfy user uread and uwrite in sops	2025-06-02 18:36:35 +02:00
c6ristian	c620f0f86b	ntfy: alloy	2025-06-02 00:47:55 +02:00
c6ristian	6824bf5e4f	ntfy	2025-06-02 00:29:08 +02:00
Stefan Bethke	7526d1c6a1	Add dooris (2.0)	2025-05-29 17:42:59 +02:00
c6ristian	8ff457b01e	Update Postgres to 15.13	2025-05-20 20:24:29 +02:00
June	7f1afef50d	move secrets from sops lookup plugin to sops vars plugin ... This makes secret configuration and usage a good bit cleaner.	2025-05-04 16:50:15 +02:00
June	bbe4cc131a	eh22-netbox: remove eh22-netbox as its being decommissioned	2025-05-03 23:40:03 +02:00
June	60b2093a02	netbox(host): move secrets to SOPS	2025-05-03 23:08:41 +02:00
June	97b8386878	grafana(host): move secrets to SOPS	2025-05-03 22:18:26 +02:00
June	8de07c2688	cloud(host): move secrets to SOPS	2025-05-03 21:30:06 +02:00
c6ristian	01c006ec22	grafana fix nginx ip allow list	2025-05-02 01:08:55 +02:00
c6ristian	0c9e3ccb87	fix switchup in prometheus.relabel	2025-04-30 15:07:26 +02:00
c6ristian	e183f1a2c3	prometheus remote write with alloy using it	2025-04-30 01:11:17 +02:00