Commit graph

66 commits

Author SHA1 Message Date
dec35c785a Mount a config directory for redmine-mysql
This mount allows to add additional configuration, such as enabling
the native password plugin for now so that we can continue using
our database.
2024-05-30 00:04:06 +02:00
532d76f7e1 chore(deps): update postgres docker tag to v16.3 2024-05-10 00:18:23 +00:00
edc9f49550 add tags to prosody-web tasks 2024-04-29 08:28:43 +02:00
6d389a3c2a fix: remove GEOLITE_LICENSE_KEY to disable geolocating requests to shlink 2024-02-22 13:52:26 +01:00
4b9870f5d5 chore(deps): update postgres docker tag to v16.2 2024-02-16 20:49:48 +01:00
14c8f98e2b feat: add shlink database container 2023-11-30 22:19:51 +00:00
6db795906d feat: add ansible tags to forgejo tasks 2023-11-28 18:08:54 +00:00
0afe932aa5 Change dehydrated_cron name for git dependency specification 2023-11-17 19:53:47 +01:00
0a8f86ef36 feat: add homebox tag to ansible jobs 2023-10-24 18:14:56 +02:00
1788fd3d27 🧑‍💻 add ansible tag to uptimekuma jobs 2023-09-20 22:09:31 +02:00
0eb1de52af Merge pull request 'chore(deps): update mysql docker tag to v8' (!186) from renovate/mysql-8.x into master
Reviewed-on: Netz39_Admin/netz39-infra-ansible#186
2023-09-20 22:04:46 +02:00
66ebb7a09b 🧑‍💻 add ansible tag to redmine jobs 2023-09-20 22:04:08 +02:00
6afa218384 🧑‍💻 add ansible tag to hedgedoc jobs 2023-09-17 17:58:39 +02:00
1748f8c272 feat: persist shlink sqlite db 2023-09-07 00:10:39 +02:00
4415d8fadc remove obsolete env vars from shlink container 2023-08-28 14:15:53 +02:00
a32d033207 repair shlink env vars 2023-08-28 14:15:53 +02:00
8f68266ce2 Merge pull request 'chore(deps): update grafana/grafana docker tag to v10' (!185) from renovate/grafana-grafana-10.x into master
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/185
2023-08-28 00:08:35 +02:00
d9d4db92f3 ansible: add tags to grafana jobs 2023-08-28 00:03:51 +02:00
6995c3075b Merge pull request 'chore(deps): update shlinkio/shlink docker tag to v3' (!190) from renovate/shlinkio-shlink-3.x into master
Reviewed-on: https://gitea.n39.eu/Netz39_Admin/netz39-infra-ansible/pulls/190
2023-08-25 19:58:11 +02:00
0d59c72e52 add ansible tag to shlink job 2023-08-25 19:57:30 +02:00
16485fdd0e chore: add ansbile tag to renovate job 2023-08-25 19:15:19 +02:00
5bf779fb0c chore: remove deprecated parameter from reload cron handler 2023-08-25 19:11:27 +02:00
90161d24e3 fix renovate regex 2023-08-18 21:25:01 +02:00
3a6efe1f02 add handler to restart cron service after on cronjob change 2023-08-09 20:33:25 +02:00
8e1b6445cb fix: use correct cronscript location 2023-08-09 20:33:25 +02:00
f66e03e51d add renovate to cron on pottwal 2023-08-09 20:33:25 +02:00
74e0b9112d chore: cleanup docker image vars to enable renovate matching 2023-07-28 21:52:44 +02:00
95c56b7d1d fix: pottwal docker containers need additional 2023-07-26 22:07:45 +02:00
aaa09a24cd git: add ansible vault pass to gitignore 2023-07-25 23:26:23 +02:00
0972c1ce96 chore: rework/refactor pottwal vars 2023-07-25 19:59:34 +02:00
ed29dc7221 Create spaceapi.n39.eu site on pottwal 2023-07-02 16:31:38 +02:00
090fa3eb22 🔧 Pin the Grafana verion
Pin the grafana version to avoid issues with incompatibilities in
dependend tools, such as grafana-kiosk.
2023-04-12 23:35:58 +02:00
4ec9865eeb 🚚 Rename git host_port variable for gitea to forgejo 2023-04-03 13:53:55 +02:00
3b31b3427a 🚚 Rename git container to forgejo
The gitea container must be deleted manually!
2023-04-03 13:53:52 +02:00
7e515c40e2 🚚 Change git data dir from gitea to forgejo
This change includes a manual directory rename on the server
2023-04-03 13:53:48 +02:00
d345576eb5 🔧 Rename the git mgmt name to remove "gitea" 2023-03-30 11:37:25 +02:00
6cda14525d 🎨 Switch from gitea to forgejo 2023-03-30 11:37:09 +02:00
ea3aa9f6cc ⬆️ Update gitea to 1.19.0
Preparation for a switch to Forgejo
2023-03-29 16:37:47 +02:00
b978a22eba add config for homebox container
add TZ env to homebox container
2023-03-20 19:32:41 +01:00
f0a68bbaec ⬆️ Upgrade gitea to 1.18.3
Changes to the configuration have been done manually.
2023-02-20 20:54:56 +01:00
4b74ca0d0f 🔨 Move influxdb org to variable
We will need that for deploying telegraf docker metrics container soon.
2023-01-10 06:19:52 +01:00
0e0e93d880 🚑 pottwal: Change group of prosody certs dir
prosody runs as unpriviledged user inside of its docker container with
this uid/gid:

    root@676f7272aaa6:/etc/prosody# id prosody
    uid=101(prosody) gid=102(prosody) groups=102(prosody),101(ssl-cert)

The certs dir has 0750 permissions and thus the process can not access
it and finds no certs, leading to stream errors for s2s and c2s
connections.  We can not use group name, because the same group has a
different gid on the host.  Numerical is fine (even if ansible needs
this as a string, `chown` seems to know how to handle this).

References: !119
Signed-off-by: Alexander Dahl <alex@netz39.de>
2023-01-02 17:58:56 +01:00
d79566f613 🔧 pottwal: Mount prosody config read-only
The prosody process only needs to write in the certs subdirectory.
2022-12-22 11:19:33 +01:00
88e14f7ca6 👌 pottwal: Move prosody config to /etc
Configuration is not data.

Suggested-by: Stefan Haun <tux@netz39.de>
2022-12-22 11:19:33 +01:00
1de850826f 👌 pottwal: Add handler for prosody restart
The XMPP server should be restarted after the config has changed.

Suggested-by: Stefan Haun <tux@netz39.de>
2022-12-22 11:19:33 +01:00
bd8500bf3a 🔧 prosody: Rework configuration for prosody v0.11
The previous configuration was copied over from helium.n39.eu for
prosody v0.9 and did only work more or less by accident.  The new
configuration was done based on the upstream example configuration.

Some modules we used for 0.9 were replaced, some are not necessary
anymore, some modules are new for 0.11.  The list was reviewed carefully
on a test host, and proved to work for several months there.

The VirtualHost 'localhost' is kept, but moved from a separate
configuration file to the main configuration, because it's only one line
and it's part of the example config anyways.
2022-12-22 11:19:33 +01:00
fa811dd787 👌 prosody: Use plain file instead of template
No need to run the template engine, if no replacements are done.

Suggested-by: David Kilias <dkdent@netz39.de>
2022-12-22 11:19:33 +01:00
923dfb49df 🍱 prosody: Import existing configuration files
No changes reported by ansible to what's currently deployed.
2022-12-22 11:19:16 +01:00
ae7b65cc5f 🔧 Move docker_setup role application to group playbook
To install docker on a host you have to put it into that group in
inventory now, instead of adding the role to each host playbook.  Idea
is to extend the group docker_host playbook by more docker related
things as for example metrics and monitoring.
2022-12-21 19:00:22 +01:00
844325f81d ⬆️ static-web-server: Bump and change update strategy
With the new release we change to docker image tags without patch level.
Project promises to adhere to semantic versioning, so patch level bumps
should contain compatible bugfixes only.

Link: https://github.com/static-web-server/static-web-server/blob/master/CHANGELOG.md
Link: https://github.com/static-web-server/static-web-server/releases/tag/v2.14.0
2022-11-23 15:41:41 +01:00