JensWH/netz39-infra-ansible
1
0
Fork 0
forked from Netz39_Admin/netz39-infra-ansible
Code Pull requests Activity
601 commits 10 branches 0 tags 1.5 MiB
Commit graph

601 commits

This branch
This branch
All branches
Author SHA1 Message Date
Stefan Haun
6cda14525d 🎨 Switch from gitea to forgejo 2023-03-30 11:37:09 +02:00
Stefan Haun
357d41d76f Merge pull request '⬆️ Update gitea to 1.19.0' (!141) from gitea-1.19.0 into master 
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/141
Reviewed-by: dkdent <dkdent@netz39.de>
Reviewed-by: Alexander Dahl <alex@netz39.de>
 2023-03-30 01:17:00 +02:00
Stefan Haun
ea3aa9f6cc ⬆️ Update gitea to 1.19.0 
Preparation for a switch to Forgejo
 2023-03-29 16:37:47 +02:00
Stefan Haun
195aa3f265 Merge pull request '🩹 fix homebox port' (!140) from fix-homebox-port into master 
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/140
 2023-03-22 21:53:04 +01:00
David Kilias
fdbf0aaff2 :bandaid: fix homebox port 2023-03-22 21:29:20 +01:00
dkdent
c591199988 Merge pull request 'add config for homebox container' (!137) from feat/homebox into master 
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/137
Reviewed-by: Stefan Haun <tux@netz39.de>
 2023-03-22 21:05:31 +01:00
dkdent
8c637f0a1f add entry on holmium to enable https ac cess to inventory.n39.eu 2023-03-20 19:32:41 +01:00
David Kilias
b978a22eba add config for homebox container 
add TZ env to homebox container
 2023-03-20 19:32:41 +01:00
Stefan Haun
737dcf50bd Merge pull request '⬆️ Update cleanuri-webui to 0.2.0' (!139) from cleanuri-webui-0.2.0 into master 
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/139
Reviewed-by: dkdent <dkdent@netz39.de>
 2023-02-24 19:11:16 +01:00
Stefan Haun
13a5285f89 ⬆️ Update cleanuri-webui to 0.2.0 
https://github.com/penguineer/cleanURI-webui/releases/tag/v0.2.0
 2023-02-24 16:39:28 +01:00
dkdent
c54b47bb5f Merge pull request '⬆️ Upgrade gitea to 1.18.3' (!138) from gitea-upgrade into master 
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/138
 2023-02-20 21:10:58 +01:00
Stefan Haun
f0a68bbaec ⬆️ Upgrade gitea to 1.18.3 
Changes to the configuration have been done manually.
 2023-02-20 20:54:56 +01:00
Alexander Dahl
054a268331 Merge pull request 'telegraf' (!132) from alex/netz39-infra-ansible:telegraf into master 
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/132
Reviewed-by: dkdent <dkdent@netz39.de>
Reviewed-by: Stefan Haun <tux@netz39.de>
 2023-01-12 06:25:28 +01:00
Alexander Dahl
f4c4a42edc 🔧 Fix influxdb org 
Unsure why this differs from the previous value, but this is the
organization name actually used by the running database.  Output from
the container:

    2023-01-11T19:22:41Z E! [outputs.influxdb_v2] Failed to write metric to system_metrics (will be dropped: 404 Not Found): not found: organization name "Netz39" not found
 2023-01-11 20:49:47 +01:00
Alexander Dahl
366ef720af ⬆️ Bump role version to v0.2.1 
Execution of the playbook failed like this before:

    TASK [lespocky.telegraf_docker_in_docker : Copy telegraf docker_input_agent conf] ************************************************************************************************
    fatal: [unicorn.n39.eu]: FAILED! => changed=false
      checksum: 3230d394872351730e265778639936912c9f1030
      msg: Destination directory /etc/telegraf does not exist
    fatal: [krypton.n39.eu]: FAILED! => changed=false
      checksum: 3230d394872351730e265778639936912c9f1030
      msg: Destination directory /etc/telegraf does not exist
    fatal: [radon.n39.eu]: FAILED! => changed=false
      checksum: 3230d394872351730e265778639936912c9f1030
      msg: Destination directory /etc/telegraf does not exist
    fatal: [pottwal.n39.eu]: FAILED! => changed=false
      checksum: 3230d394872351730e265778639936912c9f1030
      msg: Destination directory /etc/telegraf does not exist

That was a bug in the role, which was fixed with release v0.2.1.

Link: https://github.com/LeSpocky/ansible-role-telegraf-docker-in-docker/issues/15
 2023-01-11 18:26:33 +01:00
Alexander Dahl
57db3bf0ca 🐳 Add telegraf container for Docker metrics in influxdb 
All our hosts running docker can put their metrics into our influxdb
now.

Note: not all docker hosts do this (yet), because the influxdb is
currently only reachable from within the local space internal network in
our rooms.

Link: https://docs.ansible.com/ansible/latest/inventory_guide/intro_patterns.html
Link: https://galaxy.ansible.com/lespocky/telegraf_docker_in_docker
References: #760
 2023-01-10 06:26:14 +01:00
Alexander Dahl
4b74ca0d0f 🔨 Move influxdb org to variable 
We will need that for deploying telegraf docker metrics container soon.
 2023-01-10 06:19:52 +01:00
Alexander Dahl
755f655551 Merge pull request '🔧 Clarify naming of ssh jump host groups' (!136) from alex/netz39-infra-ansible:reorganize_groups into master 
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/136
Reviewed-by: dkdent <dkdent@netz39.de>
Reviewed-by: Stefan Haun <tux@netz39.de>
 2023-01-10 06:19:19 +01:00
Alexander Dahl
1c2cea1dda 🔧 Clarify naming of ssh jump host groups 
The key difference between these groups is not that one needs a jump
host and the other does not, but that all hosts of one group run on
machines located in the Netz39 rooms in Magdeburg, while the other group
contains only hosts hosted anywhere in the public internet.  We'll need
this distinction for more things than SSH in the future, e.g. PR !132.

(This is also better, because technically there could be a third group
requiring a jump host which is not ssh.n39.eu … 😉 )

Acked-by: Stefan Haun <tux@netz39.de>
Acked-by: David Kilias <dkdent@netz39.de>
 2023-01-10 06:15:52 +01:00
Alexander Dahl
2a4630e3b5 Merge pull request '✨ Install jq on platon' (!135) from platon-jq into master 
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/135
Reviewed-by: Alexander Dahl <alex@netz39.de>
 2023-01-09 16:19:59 +01:00
Stefan Haun
24c8409edc ✨ Install jq on platon 
This is needed for an improved space status check, see
https://github.com/netz39/rollladensteuerung/pull/25
 2023-01-09 15:49:17 +01:00
Stefan Haun
3f8ddf1e26 Merge pull request 'Change login name for Max2' (!134) from MG-95/netz39-infra-ansible:master into master 
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/134
Reviewed-by: Stefan Haun <tux@netz39.de>
 2023-01-09 10:21:39 +01:00
MG-5
25deedd05f Change login name for Max2 2023-01-09 00:01:10 +01:00
Stefan Haun
b8603573ce Merge pull request 'Renew SSH key for mg95' (!133) from MG-95/netz39-infra-ansible:master into master 
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/133
Reviewed-by: dkdent <dkdent@netz39.de>
Reviewed-by: Alexander Dahl <alex@netz39.de>
 2023-01-08 21:46:32 +01:00
MG-5
b2698aa975 Renew SSH key for mg95 2023-01-08 19:49:50 +01:00
Stefan Haun
4f549c3e7b Merge pull request '🚑 pottwal: Change group of prosody certs dir' (!131) from alex/netz39-infra-ansible:prosody-fixup into master 
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/131
Reviewed-by: Stefan Haun <tux@netz39.de>
 2023-01-02 20:26:48 +01:00
Alexander Dahl
0e0e93d880 🚑 pottwal: Change group of prosody certs dir 
prosody runs as unpriviledged user inside of its docker container with
this uid/gid:

    root@676f7272aaa6:/etc/prosody# id prosody
    uid=101(prosody) gid=102(prosody) groups=102(prosody),101(ssl-cert)

The certs dir has 0750 permissions and thus the process can not access
it and finds no certs, leading to stream errors for s2s and c2s
connections.  We can not use group name, because the same group has a
different gid on the host.  Numerical is fine (even if ansible needs
this as a string, `chown` seems to know how to handle this).

References: !119
Signed-off-by: Alexander Dahl <alex@netz39.de>
 2023-01-02 17:58:56 +01:00
Stefan Haun
fca99114a4 Merge pull request 'prosody: update configuration' (!119) from alex/netz39-infra-ansible:prosody-config into master 
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/119
Reviewed-by: dkdent <dkdent@netz39.de>
Reviewed-by: Stefan Haun <tux@netz39.de>
 2023-01-02 16:31:08 +01:00
dkdent
2c85ab8039 Merge pull request '📝 mailmap: Expand alias to real name' (!130) from mailmap into master 
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/130
 2022-12-31 11:53:30 +01:00
Stefan Haun
1e1a95a87c 📝 mailmap: Expand alias to real name 
with consent according to
https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/129/files#issuecomment-3445
 2022-12-31 10:43:16 +01:00
Alexander Dahl
d79566f613 🔧 pottwal: Mount prosody config read-only 
The prosody process only needs to write in the certs subdirectory.
 2022-12-22 11:19:33 +01:00
Alexander Dahl
88e14f7ca6 👌 pottwal: Move prosody config to /etc 
Configuration is not data.

Suggested-by: Stefan Haun <tux@netz39.de>
 2022-12-22 11:19:33 +01:00
Alexander Dahl
1de850826f 👌 pottwal: Add handler for prosody restart 
The XMPP server should be restarted after the config has changed.

Suggested-by: Stefan Haun <tux@netz39.de>
 2022-12-22 11:19:33 +01:00
Alexander Dahl
55204a1b21 🔧 prosody: Remove legacy TLS options 
Connections to server failed after Let's Encrypt certificate renew.
 2022-12-22 11:19:33 +01:00
Alexander Dahl
bd8500bf3a 🔧 prosody: Rework configuration for prosody v0.11 
The previous configuration was copied over from helium.n39.eu for
prosody v0.9 and did only work more or less by accident.  The new
configuration was done based on the upstream example configuration.

Some modules we used for 0.9 were replaced, some are not necessary
anymore, some modules are new for 0.11.  The list was reviewed carefully
on a test host, and proved to work for several months there.

The VirtualHost 'localhost' is kept, but moved from a separate
configuration file to the main configuration, because it's only one line
and it's part of the example config anyways.
 2022-12-22 11:19:33 +01:00
Alexander Dahl
2c0d00bc28 🔧 prosody: Use ansible variable in main config template 2022-12-22 11:19:33 +01:00
Alexander Dahl
fa811dd787 👌 prosody: Use plain file instead of template 
No need to run the template engine, if no replacements are done.

Suggested-by: David Kilias <dkdent@netz39.de>
 2022-12-22 11:19:33 +01:00
Alexander Dahl
923dfb49df 🍱 prosody: Import existing configuration files 
No changes reported by ansible to what's currently deployed.
 2022-12-22 11:19:16 +01:00
Stefan Haun
055ea84b0d Merge pull request 'docker: Improve deployment' (!128) from alex/netz39-infra-ansible:docker into master 
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/128
Reviewed-by: Stefan Haun <tux@netz39.de>
 2022-12-22 11:05:38 +01:00
Alexander Dahl
ae7b65cc5f 🔧 Move docker_setup role application to group playbook 
To install docker on a host you have to put it into that group in
inventory now, instead of adding the role to each host playbook.  Idea
is to extend the group docker_host playbook by more docker related
things as for example metrics and monitoring.
 2022-12-21 19:00:22 +01:00
Alexander Dahl
083bab14e8 🔧 inventory: Introduce new group 'docker_host' 
Hosts which have Docker installed and where containers can run.
Might make it easier to deploy a unified setup on each of them.
 2022-12-21 18:54:51 +01:00
Alexander Dahl
ab08f1daa1 🎨 inventory: Sort entries 
Makes it easier to compare different groups against each other.
 2022-12-21 18:54:51 +01:00
Alexander Dahl
bbfa805b02 Merge pull request '🔧 mailmap: Update with new mail addresses' (!129) from mailmap into master 
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/129
Reviewed-by: dkdent <dkdent@netz39.de>
 2022-12-21 10:21:31 +01:00
Alexander Dahl
96d52a5692 🔧 mailmap: Update with new mail addresses 
Since introduction some commits with wrong mail addresses or names
happened.  Diff:

    --- shortlog-before     2022-12-21 06:45:53.106645799 +0100
    +++ shortlog-after      2022-12-21 06:46:03.478187832 +0100
    @@ -1,7 +1,5 @@
    -    48 Alexander Dahl <alex@netz39.de>
    -     6 Alexander Dahl <post@lespocky.de>
    +    54 Alexander Dahl <alex@netz39.de>
        115 David Kilias <dkdent@netz39.de>
    -     1 MG-5 <mg-95@t-online.de>
    -     2 MG-95 <mg-95@t-online.de>
    +     3 MG-95 <mg-95@t-online.de>
          4 Maximilian Deubel <maximilian.deubel@gmail.com>
        381 Stefan Haun <tux@netz39.de>
 2022-12-21 06:47:51 +01:00
Stefan Haun
07a3f19406 Merge pull request '🐛 Fix origin for unattended-upgrades' (!125) from ua-origin into master 
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/125
Reviewed-by: dkdent <dkdent@netz39.de>
Reviewed-by: Alexander Dahl <alex@netz39.de>
 2022-11-29 17:28:51 +01:00
Stefan Haun
76072ff274 🐛 Fix origin for unattended-upgrades 
Set origin to all, this would do the same as a manual `apt safe-upgrade`.
 2022-11-24 16:03:02 +01:00
Stefan Haun
5c8c62caa5 Merge pull request '⬆️ static-web-server: Bump and change update strategy' (!127) from alex/netz39-infra-ansible:pottwal-sws into master 
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/127
Reviewed-by: Stefan Haun <tux@netz39.de>
 2022-11-23 17:39:04 +01:00
Alexander Dahl
844325f81d ⬆️ static-web-server: Bump and change update strategy 
With the new release we change to docker image tags without patch level.
Project promises to adhere to semantic versioning, so patch level bumps
should contain compatible bugfixes only.

Link: https://github.com/static-web-server/static-web-server/blob/master/CHANGELOG.md
Link: https://github.com/static-web-server/static-web-server/releases/tag/v2.14.0
 2022-11-23 15:41:41 +01:00
Stefan Haun
199c98659a Merge pull request '🐛 Fix missing grafana container settings' (!126) from fix-grafana-container into master 
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/126
Reviewed-by: dkdent <dkdent@netz39.de>
Reviewed-by: Alexander Dahl <alex@netz39.de>
 2022-11-23 10:49:23 +01:00
Stefan Haun
28efc2bd4b 🐛 Fix missing grafana container settings 
especially restarting the container, e.g. after a Docker update
 2022-11-22 21:32:07 +01:00