Author	SHA1	Message	Date
bitwhisker	22ace3c537	z9-router(host): fix file permissions	2026-08-07 23:13:44 +02:00
bitwhisker	51b2cac907	z9-router(host): remove netwan, vlan55 untagged, add and fix DNS, fix formatting	2026-08-07 22:56:07 +02:00
bitwhisker	fa91690485	z9(pve01): change thinkcccore0 to pve01	2026-08-07 22:55:33 +02:00
bitwhisker	9e92a3c390	z9(group): remove all z9 references as subdomain	2026-08-07 22:55:33 +02:00
bitwhisker	1a0ac38861	unbound(role): use existing deploy_systemd_resolved_config role and some reordering	2026-08-07 22:55:32 +02:00
bitwhisker	8351c28cd0	z9-router(host): add ansible pull	2026-08-07 22:55:31 +02:00
bitwhisker	1dff022146	z9-router(host): rename rt1 to z9-router	2026-08-07 22:55:31 +02:00
bitwhisker	010b8d1224	rt1(z9 host) unbound(role) kea_dhcp(role): create unbound and kea_dhcp role for rt1 ... - create unbound role - create kea_dhcp role - configure unbound and keadhcp on rt1(z9 host)	2026-08-07 22:55:31 +02:00
bitwhisker	aeaa80d2c4	rt1(z9 host): create host and configure networkd and nftables	2026-08-07 22:55:31 +02:00
Stefan Bethke	f749ed436c	Use fixed port range to allow for better fw rules	2026-08-02 17:25:30 +02:00
Stefan Bethke	0377db2812	Use correct hostname for yate	2026-08-02 17:24:58 +02:00
lilly	de8daaf56c	add dooris role for setup of dooris interaction on the node itself	2026-07-29 14:16:04 +02:00
June	7d7cf455eb	forgejo_runner(role): create role for setting up Forgejo Runner install	2026-07-03 03:42:18 +02:00
Stefan Bethke	3e0fdb6074	Configure transmission	2026-06-28 17:02:05 +02:00
Stefan Bethke	fa598c72fc	Add opensourcetorrents	2026-06-01 21:15:31 +02:00
Stefan Bethke	0842a51ae0	Merge branch 'main' of git.hamburg.ccc.de:CCCHH/ansible-infra	2026-05-24 00:12:52 +02:00
Stefan Bethke	603d3fb6f4	Update machine SMTP mail sending config	2026-05-24 00:12:50 +02:00
June	4574dbf4ba	secrets(role): introduce secrets role for storing secrets ... Allows storage of secrets to then be referenced in other places. The motivation was storing WireGuard secrets for systemd-networkd.	2026-05-23 22:40:17 +02:00
June	0c83fcc2b2	sops: darios key expired, so remove for now	2026-05-20 04:09:28 +02:00
bitwhisker	ec4dd36178	dooris(host): move to dns-01-acme-dns	2026-04-19 23:48:11 +02:00
June	26fbbc9035	sops: use fis new key	2026-04-19 00:36:37 +02:00
bitwhisker	abcd622757	light(host): move to dns-01-acme-dns	2026-04-11 04:34:24 +02:00
June	21f51ea2d7	z9(hosts): setup ansible-pull for all z9 hosts	2026-03-30 21:55:44 +02:00
June	c246a6815c	ansible-lint: fix issues	2026-03-06 21:27:51 +01:00
lilly	4f3caaf5ed	add bitwhisker to sops	2026-03-05 20:18:53 +01:00
June	711f2f1c64	certbot(role): don't use certbot__version_spec anymore as its not used	2026-03-01 20:08:49 +01:00
Stefan Bethke	e823c46a2d	stb updated key	2026-02-18 09:51:25 +01:00
Stefan Bethke	5f31392a27	Remove authoritative-dns as its not needed anymore	2026-02-11 10:38:04 +01:00
chris	6a92aa68c1	light: fix tls cert expiring and not renewing	2026-01-25 22:36:30 +01:00
chris	5693989c38	add alloy to the z9 hosts and some cleanup	2026-01-25 21:44:49 +01:00
June	51bbdd42a2	dooris(host): make certbot work	2026-01-13 16:55:22 +01:00
June	cffe5c2b16	dooris: use hostname instead of IP	2025-11-06 18:25:29 +01:00
June	ae60d6fea6	docker_compose(role): use community.docker.docker_compose_v2 module ... Use the community.docker.docker_compose_v2 module as it supports proper changed handling out of the box, making the roles code more straightforward and work. Also just do a docker compose restart instead of having the custom docker compose reload script. https://docs.ansible.com/ansible/latest/collections/community/docker/docker_compose_v2_module.html	2025-11-02 23:13:20 +01:00
June	18dda95c46	remove max expired key	2025-10-13 22:12:31 +02:00
June	f943e95e2e	fix ansible_lint issues ... Use prefix for role variables, have an ending newline at the end of files and use changed_when for command. Also exclude *.sops.yaml files from ansible-lint.	2025-10-13 17:43:00 +02:00
June	434ddfc955	ansible_pull(role): introduce ansible_pull role ... Introduce ansible_pull role for setting up automatic ansible_pull runs. Also add accompanying host group and playbook play.	2025-10-13 16:56:18 +02:00
Stefan Bethke	592afdced9	add waybackproxy	2025-09-06 11:39:05 +02:00
Stefan Bethke	9c50708b4e	Add second DECT	2025-08-02 09:43:18 +02:00
Stefan Bethke	cbb4beceb6	Add Werkstatt phone	2025-08-02 09:41:48 +02:00
c6ristian	72489be8bd	updatekeys for junes new key	2025-07-20 20:29:22 +02:00
Stefan Bethke	e628dcbce2	Legacy-Yate mit eigenem Eintrag	2025-07-11 19:37:05 +02:00
Stefan Bethke	ef4b45925c	Move lines over to yate ... Basic functionality should be working for incoming calls: * Fux Intercom to 1337 * Fonial to the Hamburg number * EPVPN Still to do: clean up internal extensions and more extensive testing	2025-07-06 19:07:27 +02:00
Stefan Bethke	2edb3443d6	Kick yate when config file changes ... closes #29	2025-07-06 17:32:23 +02:00
Stefan Bethke	4e651bca25	Fix password fro FB account	2025-07-05 11:10:05 +02:00
Stefan Bethke	2a322f9c85	Add production secrets ... Also use the correct file name for the SOPS secrets	2025-07-05 11:05:26 +02:00
Stefan Bethke	eefcbe0c43	Add yate	2025-07-04 20:51:14 +02:00
Stefan Bethke	7526d1c6a1	Add dooris (2.0)	2025-05-29 17:42:59 +02:00
June	6b80f5b52a	fix accidentally added personalized ansible_user by removing it	2025-02-23 23:51:58 +01:00
June	fd13e5341b	add thinkcccore0 to inventory and enable VM template gen. setup on it	2025-02-23 23:23:51 +01:00
June	61cd5053d0	flatten inventories making them simpler ... Remove the child groups as we weren't using their functionality anyway. Also remove the debian_11/12 host groups as they're not in use.	2025-02-16 00:36:10 +01:00