57db3bf0ca
🐳 Add telegraf container for Docker metrics in influxdb
...
All our hosts running docker can put their metrics into our influxdb
now.
Note: not all docker hosts do this (yet), because the influxdb is
currently only reachable from within the local space internal network in
our rooms.
Link: https://docs.ansible.com/ansible/latest/inventory_guide/intro_patterns.html
Link: https://galaxy.ansible.com/lespocky/telegraf_docker_in_docker
References: #760
2023-01-10 06:26:14 +01:00
4b74ca0d0f
🔨 Move influxdb org to variable
...
We will need that for deploying telegraf docker metrics container soon.
2023-01-10 06:19:52 +01:00
755f655551
Merge pull request ' 🔧 Clarify naming of ssh jump host groups' ( !136 ) from alex/netz39-infra-ansible:reorganize_groups into master
...
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/136
Reviewed-by: dkdent <dkdent@netz39.de>
Reviewed-by: Stefan Haun <tux@netz39.de>
2023-01-10 06:19:19 +01:00
1c2cea1dda
🔧 Clarify naming of ssh jump host groups
...
The key difference between these groups is not that one needs a jump
host and the other does not, but that all hosts of one group run on
machines located in the Netz39 rooms in Magdeburg, while the other group
contains only hosts hosted anywhere in the public internet. We'll need
this distinction for more things than SSH in the future, e.g. PR !132 .
(This is also better, because technically there could be a third group
requiring a jump host which is not ssh.n39.eu … 😉 )
Acked-by: Stefan Haun <tux@netz39.de>
Acked-by: David Kilias <dkdent@netz39.de>
2023-01-10 06:15:52 +01:00
2a4630e3b5
Merge pull request ' ✨ Install jq on platon' ( !135 ) from platon-jq into master
...
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/135
Reviewed-by: Alexander Dahl <alex@netz39.de>
2023-01-09 16:19:59 +01:00
24c8409edc
✨ Install jq on platon
...
This is needed for an improved space status check, see
https://github.com/netz39/rollladensteuerung/pull/25
2023-01-09 15:49:17 +01:00
3f8ddf1e26
Merge pull request 'Change login name for Max2' ( !134 ) from MG-95/netz39-infra-ansible:master into master
...
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/134
Reviewed-by: Stefan Haun <tux@netz39.de>
2023-01-09 10:21:39 +01:00
25deedd05f
Change login name for Max2
2023-01-09 00:01:10 +01:00
b8603573ce
Merge pull request 'Renew SSH key for mg95' ( !133 ) from MG-95/netz39-infra-ansible:master into master
...
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/133
Reviewed-by: dkdent <dkdent@netz39.de>
Reviewed-by: Alexander Dahl <alex@netz39.de>
2023-01-08 21:46:32 +01:00
b2698aa975
Renew SSH key for mg95
2023-01-08 19:49:50 +01:00
4f549c3e7b
Merge pull request ' 🚑 pottwal: Change group of prosody certs dir' ( !131 ) from alex/netz39-infra-ansible:prosody-fixup into master
...
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/131
Reviewed-by: Stefan Haun <tux@netz39.de>
2023-01-02 20:26:48 +01:00
0e0e93d880
🚑 pottwal: Change group of prosody certs dir
...
prosody runs as unpriviledged user inside of its docker container with
this uid/gid:
root@676f7272aaa6:/etc/prosody# id prosody
uid=101(prosody) gid=102(prosody) groups=102(prosody),101(ssl-cert)
The certs dir has 0750 permissions and thus the process can not access
it and finds no certs, leading to stream errors for s2s and c2s
connections. We can not use group name, because the same group has a
different gid on the host. Numerical is fine (even if ansible needs
this as a string, `chown` seems to know how to handle this).
References: !119
Signed-off-by: Alexander Dahl <alex@netz39.de>
2023-01-02 17:58:56 +01:00
fca99114a4
Merge pull request 'prosody: update configuration' ( !119 ) from alex/netz39-infra-ansible:prosody-config into master
...
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/119
Reviewed-by: dkdent <dkdent@netz39.de>
Reviewed-by: Stefan Haun <tux@netz39.de>
2023-01-02 16:31:08 +01:00
2c85ab8039
Merge pull request ' 📝 mailmap: Expand alias to real name' ( !130 ) from mailmap into master
...
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/130
2022-12-31 11:53:30 +01:00
1e1a95a87c
📝 mailmap: Expand alias to real name
...
with consent according to
https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/129/files#issuecomment-3445
2022-12-31 10:43:16 +01:00
d79566f613
🔧 pottwal: Mount prosody config read-only
...
The prosody process only needs to write in the certs subdirectory.
2022-12-22 11:19:33 +01:00
88e14f7ca6
👌 pottwal: Move prosody config to /etc
...
Configuration is not data.
Suggested-by: Stefan Haun <tux@netz39.de>
2022-12-22 11:19:33 +01:00
1de850826f
👌 pottwal: Add handler for prosody restart
...
The XMPP server should be restarted after the config has changed.
Suggested-by: Stefan Haun <tux@netz39.de>
2022-12-22 11:19:33 +01:00
55204a1b21
🔧 prosody: Remove legacy TLS options
...
Connections to server failed after Let's Encrypt certificate renew.
2022-12-22 11:19:33 +01:00
bd8500bf3a
🔧 prosody: Rework configuration for prosody v0.11
...
The previous configuration was copied over from helium.n39.eu for
prosody v0.9 and did only work more or less by accident. The new
configuration was done based on the upstream example configuration.
Some modules we used for 0.9 were replaced, some are not necessary
anymore, some modules are new for 0.11. The list was reviewed carefully
on a test host, and proved to work for several months there.
The VirtualHost 'localhost' is kept, but moved from a separate
configuration file to the main configuration, because it's only one line
and it's part of the example config anyways.
2022-12-22 11:19:33 +01:00
2c0d00bc28
🔧 prosody: Use ansible variable in main config template
2022-12-22 11:19:33 +01:00
fa811dd787
👌 prosody: Use plain file instead of template
...
No need to run the template engine, if no replacements are done.
Suggested-by: David Kilias <dkdent@netz39.de>
2022-12-22 11:19:33 +01:00
923dfb49df
🍱 prosody: Import existing configuration files
...
No changes reported by ansible to what's currently deployed.
2022-12-22 11:19:16 +01:00
055ea84b0d
Merge pull request 'docker: Improve deployment' ( !128 ) from alex/netz39-infra-ansible:docker into master
...
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/128
Reviewed-by: Stefan Haun <tux@netz39.de>
2022-12-22 11:05:38 +01:00
ae7b65cc5f
🔧 Move docker_setup role application to group playbook
...
To install docker on a host you have to put it into that group in
inventory now, instead of adding the role to each host playbook. Idea
is to extend the group docker_host playbook by more docker related
things as for example metrics and monitoring.
2022-12-21 19:00:22 +01:00
083bab14e8
🔧 inventory: Introduce new group 'docker_host'
...
Hosts which have Docker installed and where containers can run.
Might make it easier to deploy a unified setup on each of them.
2022-12-21 18:54:51 +01:00
ab08f1daa1
🎨 inventory: Sort entries
...
Makes it easier to compare different groups against each other.
2022-12-21 18:54:51 +01:00
bbfa805b02
Merge pull request ' 🔧 mailmap: Update with new mail addresses' ( !129 ) from mailmap into master
...
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/129
Reviewed-by: dkdent <dkdent@netz39.de>
2022-12-21 10:21:31 +01:00
96d52a5692
🔧 mailmap: Update with new mail addresses
...
Since introduction some commits with wrong mail addresses or names
happened. Diff:
--- shortlog-before 2022-12-21 06:45:53.106645799 +0100
+++ shortlog-after 2022-12-21 06:46:03.478187832 +0100
@@ -1,7 +1,5 @@
- 48 Alexander Dahl <alex@netz39.de>
- 6 Alexander Dahl <post@lespocky.de>
+ 54 Alexander Dahl <alex@netz39.de>
115 David Kilias <dkdent@netz39.de>
- 1 MG-5 <mg-95@t-online.de>
- 2 MG-95 <mg-95@t-online.de>
+ 3 MG-95 <mg-95@t-online.de>
4 Maximilian Deubel <maximilian.deubel@gmail.com>
381 Stefan Haun <tux@netz39.de>
2022-12-21 06:47:51 +01:00
07a3f19406
Merge pull request ' 🐛 Fix origin for unattended-upgrades' ( !125 ) from ua-origin into master
...
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/125
Reviewed-by: dkdent <dkdent@netz39.de>
Reviewed-by: Alexander Dahl <alex@netz39.de>
2022-11-29 17:28:51 +01:00
76072ff274
🐛 Fix origin for unattended-upgrades
...
Set origin to all, this would do the same as a manual `apt safe-upgrade`.
2022-11-24 16:03:02 +01:00
5c8c62caa5
Merge pull request ' ⬆️ static-web-server: Bump and change update strategy' ( !127 ) from alex/netz39-infra-ansible:pottwal-sws into master
...
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/127
Reviewed-by: Stefan Haun <tux@netz39.de>
2022-11-23 17:39:04 +01:00
844325f81d
⬆️ static-web-server: Bump and change update strategy
...
With the new release we change to docker image tags without patch level.
Project promises to adhere to semantic versioning, so patch level bumps
should contain compatible bugfixes only.
Link: https://github.com/static-web-server/static-web-server/blob/master/CHANGELOG.md
Link: https://github.com/static-web-server/static-web-server/releases/tag/v2.14.0
2022-11-23 15:41:41 +01:00
199c98659a
Merge pull request ' 🐛 Fix missing grafana container settings' ( !126 ) from fix-grafana-container into master
...
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/126
Reviewed-by: dkdent <dkdent@netz39.de>
Reviewed-by: Alexander Dahl <alex@netz39.de>
2022-11-23 10:49:23 +01:00
28efc2bd4b
🐛 Fix missing grafana container settings
...
especially restarting the container, e.g. after a Docker update
2022-11-22 21:32:07 +01:00
2a2cf2d4ce
Merge pull request ' 🐢 Show some appreciation' ( !122 ) from gnu-tp into master
...
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/122
Reviewed-by: dkdent <dkdent@netz39.de>
Reviewed-by: Alexander Dahl <alex@netz39.de>
2022-11-22 19:56:49 +01:00
04c68cd410
🐢 Show some appreciation
...
See http://www.gnuterrypratchett.com/
2022-11-22 18:49:39 +01:00
c6cae71cd3
Merge pull request ' 🔊 Improve logging for DD24 ddns cron job' ( !124 ) from silent-dd24-cron into master
...
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/124
Reviewed-by: Alexander Dahl <alex@netz39.de>
Reviewed-by: dkdent <dkdent@netz39.de>
2022-11-22 18:41:25 +01:00
059b8a0bea
👌 Expand arguments for readability
2022-11-22 18:35:22 +01:00
03dbd132eb
🔊 Send DD24 cron errors to syslog
2022-11-22 18:34:54 +01:00
29ead08db8
🔇 Disable curl transfer logs for DD24 call
2022-11-22 18:34:25 +01:00
fc57052e79
Merge pull request ' 🚑 Get wiringpi package from local repository' ( !123 ) from wiringpi into master
...
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/123
Reviewed-by: dkdent <dkdent@netz39.de>
Reviewed-by: Alexander Dahl <alex@netz39.de>
2022-11-22 18:32:24 +01:00
4f94574d2a
🔨 Copy wiringpi-latest.deb from local repository
2022-11-22 14:44:30 +01:00
b685d08ccd
🍱 Add wiringpi-latest.deb to files
...
The download location is not available anymore so we store the file here for now.
2022-11-22 10:54:31 +01:00
208a7f49fc
Merge pull request ' 🚑 Pin Dokuwiki container to specific digest' ( !121 ) from pin-dokuwiki into master
...
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/121
Reviewed-by: dkdent <dkdent@netz39.de>
2022-11-18 17:52:52 +01:00
8855f7cc10
🚑 Pin Dokuwiki container to specific digest
...
There seem to be compatibility issues with container updates within the
same tag. These updates happen every time we run Ansible and are usually
desired, as they can fix security issues (esp. in the base image).
However, if the update cannot be trusted to run without manual intervention,
we have to pin the version and check for updates manually.
2022-11-18 17:12:13 +01:00
ed7106dfcc
Merge pull request ' ⬆️ Update FFMD-DNS to 2022111601' ( !120 ) from update-dns-2022111601 into master
...
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/120
Reviewed-by: Alexander Dahl <alex@netz39.de>
Reviewed-by: dkdent <dkdent@netz39.de>
2022-11-18 16:04:55 +01:00
a677be3607
⬆️ Update FFMD-DNS to 2022111601
2022-11-18 12:25:10 +01:00
871038d84c
Merge pull request 'yamllint: Fix some warnings' ( !118 ) from alex/netz39-infra-ansible:yamllint into master
...
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/118
Reviewed-by: Stefan Haun <tux@netz39.de>
2022-11-18 10:38:07 +01:00
97c5a75b6d
🚨 Fix "missing document start" warnings
...
yamllint warned:
host_vars/hobbes.n39.eu/vars.yml
1:1 warning missing document start "---" (document-start)
host_vars/krypton.n39.eu/vars.yml
1:1 warning missing document start "---" (document-start)
host_vars/localhost/vars.yml
1:1 warning missing document start "---" (document-start)
host_vars/platon.n39.eu/vars.yml
1:1 warning missing document start "---" (document-start)
host_vars/pottwal.n39.eu/vars.yml
1:1 warning missing document start "---" (document-start)
host_vars/radon.n39.eu/vars.yml
1:1 warning missing document start "---" (document-start)
host_vars/tau.netz39.de/vars.yml
1:1 warning missing document start "---" (document-start)
host_vars/unicorn.n39.eu/vars.yml
1:1 warning missing document start "---" (document-start)
2022-11-18 09:02:35 +01:00
