Commit graph

73 commits

Author SHA1 Message Date
a31faf02ef fix(pottwal): librarian db port must not be public 2025-02-21 17:54:41 +01:00
66f2dfd484 feat(librarian): integrate into pottwal 2025-01-25 19:12:39 +01:00
605eca4c38 🚚 roles: dehydrated_cron: Use namespaced name
Removes the redundant words "ansible" and "role" from the role name
originating from the Git repo name, and uses the author's name as
namespace instead.  This makes it easier to recognize as external role.

Note: the host-wittgenstein recipe already used that new name, but we
did not set it up in requirements, yet.  (How did that ever work?)

Link: https://docs.ansible.com/ansible/latest/galaxy/user_guide.html#installing-multiple-roles-from-a-file
Fixes: f4db6fa395 ("Add Ansible setup for wittgenstein")
2024-12-28 12:16:21 +01:00
832094843a 🚚 roles: dehydrated: Use namespaced role name
In "ansible-role-dehydrated" the words "ansible" and "role" are
redundant, because implicit anyway.  What actually helps here is using a
namespaced name in the format galaxy would use, to make clear it's an
external role, and where it comes from.

Link: https://docs.ansible.com/ansible/latest/galaxy/user_guide.html#installing-multiple-roles-from-a-file
2024-12-28 12:07:20 +01:00
2108f90584 Change forwarding for SpaceAPI according to the new service 2024-11-02 23:01:13 +01:00
38fbff30b5 feat: add role to manage dyndns entry on desec.io 2024-11-02 22:31:28 +01:00
281b07a33b chore(deps): update postgres docker tag to v16.4 2024-08-27 22:27:11 +02:00
dec35c785a Mount a config directory for redmine-mysql
This mount allows to add additional configuration, such as enabling
the native password plugin for now so that we can continue using
our database.
2024-05-30 00:04:06 +02:00
532d76f7e1 chore(deps): update postgres docker tag to v16.3 2024-05-10 00:18:23 +00:00
edc9f49550 add tags to prosody-web tasks 2024-04-29 08:28:43 +02:00
6d389a3c2a fix: remove GEOLITE_LICENSE_KEY to disable geolocating requests to shlink 2024-02-22 13:52:26 +01:00
4b9870f5d5 chore(deps): update postgres docker tag to v16.2 2024-02-16 20:49:48 +01:00
14c8f98e2b feat: add shlink database container 2023-11-30 22:19:51 +00:00
6db795906d feat: add ansible tags to forgejo tasks 2023-11-28 18:08:54 +00:00
0afe932aa5 Change dehydrated_cron name for git dependency specification 2023-11-17 19:53:47 +01:00
0a8f86ef36 feat: add homebox tag to ansible jobs 2023-10-24 18:14:56 +02:00
1788fd3d27 🧑‍💻 add ansible tag to uptimekuma jobs 2023-09-20 22:09:31 +02:00
0eb1de52af Merge pull request 'chore(deps): update mysql docker tag to v8' (!186) from renovate/mysql-8.x into master
Reviewed-on: Netz39_Admin/netz39-infra-ansible#186
2023-09-20 22:04:46 +02:00
66ebb7a09b 🧑‍💻 add ansible tag to redmine jobs 2023-09-20 22:04:08 +02:00
6afa218384 🧑‍💻 add ansible tag to hedgedoc jobs 2023-09-17 17:58:39 +02:00
1748f8c272 feat: persist shlink sqlite db 2023-09-07 00:10:39 +02:00
4415d8fadc remove obsolete env vars from shlink container 2023-08-28 14:15:53 +02:00
a32d033207 repair shlink env vars 2023-08-28 14:15:53 +02:00
8f68266ce2 Merge pull request 'chore(deps): update grafana/grafana docker tag to v10' (!185) from renovate/grafana-grafana-10.x into master
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/185
2023-08-28 00:08:35 +02:00
d9d4db92f3 ansible: add tags to grafana jobs 2023-08-28 00:03:51 +02:00
6995c3075b Merge pull request 'chore(deps): update shlinkio/shlink docker tag to v3' (!190) from renovate/shlinkio-shlink-3.x into master
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/190
2023-08-25 19:58:11 +02:00
0d59c72e52 add ansible tag to shlink job 2023-08-25 19:57:30 +02:00
16485fdd0e chore: add ansbile tag to renovate job 2023-08-25 19:15:19 +02:00
5bf779fb0c chore: remove deprecated parameter from reload cron handler 2023-08-25 19:11:27 +02:00
90161d24e3 fix renovate regex 2023-08-18 21:25:01 +02:00
3a6efe1f02 add handler to restart cron service after on cronjob change 2023-08-09 20:33:25 +02:00
8e1b6445cb fix: use correct cronscript location 2023-08-09 20:33:25 +02:00
f66e03e51d add renovate to cron on pottwal 2023-08-09 20:33:25 +02:00
74e0b9112d chore: cleanup docker image vars to enable renovate matching 2023-07-28 21:52:44 +02:00
95c56b7d1d fix: pottwal docker containers need additional 2023-07-26 22:07:45 +02:00
aaa09a24cd git: add ansible vault pass to gitignore 2023-07-25 23:26:23 +02:00
0972c1ce96 chore: rework/refactor pottwal vars 2023-07-25 19:59:34 +02:00
ed29dc7221 Create spaceapi.n39.eu site on pottwal 2023-07-02 16:31:38 +02:00
090fa3eb22 🔧 Pin the Grafana verion
Pin the grafana version to avoid issues with incompatibilities in
dependend tools, such as grafana-kiosk.
2023-04-12 23:35:58 +02:00
4ec9865eeb 🚚 Rename git host_port variable for gitea to forgejo 2023-04-03 13:53:55 +02:00
3b31b3427a 🚚 Rename git container to forgejo
The gitea container must be deleted manually!
2023-04-03 13:53:52 +02:00
7e515c40e2 🚚 Change git data dir from gitea to forgejo
This change includes a manual directory rename on the server
2023-04-03 13:53:48 +02:00
d345576eb5 🔧 Rename the git mgmt name to remove "gitea" 2023-03-30 11:37:25 +02:00
6cda14525d 🎨 Switch from gitea to forgejo 2023-03-30 11:37:09 +02:00
ea3aa9f6cc ⬆️ Update gitea to 1.19.0
Preparation for a switch to Forgejo
2023-03-29 16:37:47 +02:00
b978a22eba add config for homebox container
add TZ env to homebox container
2023-03-20 19:32:41 +01:00
f0a68bbaec ⬆️ Upgrade gitea to 1.18.3
Changes to the configuration have been done manually.
2023-02-20 20:54:56 +01:00
4b74ca0d0f 🔨 Move influxdb org to variable
We will need that for deploying telegraf docker metrics container soon.
2023-01-10 06:19:52 +01:00
0e0e93d880 🚑 pottwal: Change group of prosody certs dir
prosody runs as unpriviledged user inside of its docker container with
this uid/gid:

    root@676f7272aaa6:/etc/prosody# id prosody
    uid=101(prosody) gid=102(prosody) groups=102(prosody),101(ssl-cert)

The certs dir has 0750 permissions and thus the process can not access
it and finds no certs, leading to stream errors for s2s and c2s
connections.  We can not use group name, because the same group has a
different gid on the host.  Numerical is fine (even if ansible needs
this as a string, `chown` seems to know how to handle this).

References: !119
Signed-off-by: Alexander Dahl <alex@netz39.de>
2023-01-02 17:58:56 +01:00
d79566f613 🔧 pottwal: Mount prosody config read-only
The prosody process only needs to write in the certs subdirectory.
2022-12-22 11:19:33 +01:00