Commit graph

1377 commits

Author SHA1 Message Date
5d1ca7ef9f 🚨 host: unicorn: Fix fqcn linter warning
fqcn[action]: Use FQCN for module actions, such `community.docker.docker_container`.
    host-unicorn.yml:14 Action `docker_container` is not FQCN.
2025-03-09 19:00:21 +01:00
e61a68de53 🚨 host: wittgenstein: Fix fqcn linter warnings
fqcn[action]: Use FQCN for module actions, such `community.docker.docker_container`.
    host-wittgenstein.yml:132 Action `docker_container` is not FQCN.

    fqcn[action]: Use FQCN for module actions, such `community.docker.docker_container`.
    host-wittgenstein.yml:151 Action `docker_container` is not FQCN.
2025-03-09 19:00:21 +01:00
23bc6d7b69 🚨 roles: Fix remaining fqcn linter warnings
fqcn[action-core]: Use FQCN for builtin module actions (service).
    roles/apache_letsencrypt/handlers/main.yml:3 Use `ansible.builtin.service` or `ansible.legacy.service` instead.

    fqcn[action-core]: Use FQCN for builtin module actions (apt).
    roles/dd24_dyndns_cron/tasks/main.yml:2 Use `ansible.builtin.apt` or `ansible.legacy.apt` instead.

    fqcn[action-core]: Use FQCN for builtin module actions (apt).
    roles/desec_dyndns_cron/tasks/main.yml:2 Use `ansible.builtin.apt` or `ansible.legacy.apt` instead.

    fqcn[action-core]: Use FQCN for builtin module actions (command).
    roles/nfs_host/handlers/main.yml:2 Use `ansible.builtin.command` or `ansible.legacy.command` instead.
2025-03-09 19:00:21 +01:00
bec6fc20b7 🚨 roles: apache: Fix fqcn linter warnings
fqcn[action-core]: Use FQCN for builtin module actions (service).
    roles/apache/handlers/main.yml:3 Use `ansible.builtin.service` or `ansible.legacy.service` instead.

    fqcn[action-core]: Use FQCN for builtin module actions (apt).
    roles/apache/tasks/main.yml:2 Use `ansible.builtin.apt` or `ansible.legacy.apt` instead.

    fqcn[action]: Use FQCN for module actions, such `community.general.apache2_module`.
    roles/apache/tasks/main.yml:8 Action `apache2_module` is not FQCN.
2025-03-09 19:00:21 +01:00
8b54b36392 🚨 roles: cleanuri: Fix fqcn linter warnings
fqcn[action]: Use FQCN for module actions, such `community.docker.docker_container`.
    roles/cleanuri/tasks/main.yml:3 Action `docker_container` is not FQCN.

    fqcn[action-core]: Use FQCN for builtin module actions (include_role).
    roles/cleanuri/tasks/main.yml:17 Use `ansible.builtin.include_role` or `ansible.legacy.include_role` instead.

    fqcn[action]: Use FQCN for module actions, such `community.docker.docker_container`.
    roles/cleanuri/tasks/main.yml:25 Action `docker_container` is not FQCN.

    fqcn[action]: Use FQCN for module actions, such `community.docker.docker_container`.
    roles/cleanuri/tasks/main.yml:44 Action `docker_container` is not FQCN.

    fqcn[action]: Use FQCN for module actions, such `community.docker.docker_container`.
    roles/cleanuri/tasks/main.yml:61 Action `docker_container` is not FQCN.

    fqcn[action-core]: Use FQCN for builtin module actions (include_role).
    roles/cleanuri/tasks/main.yml:78 Use `ansible.builtin.include_role` or `ansible.legacy.include_role` instead.
2025-03-09 18:26:03 +01:00
11e98a4d8e 🚨 roles: nginx_https_ingress: Fix fqcn linter warnings
fqcn[action-core]: Use FQCN for builtin module actions (service).
    roles/nginx_https_ingress/handlers/main.yml:3 Use `ansible.builtin.service` or `ansible.legacy.service` instead.

    fqcn[action-core]: Use FQCN for builtin module actions (apt_key).
    roles/nginx_https_ingress/tasks/main.yml:20 Use `ansible.builtin.apt_key` or `ansible.legacy.apt_key` instead.
2025-03-08 22:25:28 +01:00
eeb87d2108 🚨 roles: setup_http_site_forward: Fix fqcn linter warnings
fqcn[action-core]: Use FQCN for builtin module actions (service).
    roles/setup_http_site_forward/handlers/main.yml:2 Use `ansible.builtin.service` or `ansible.legacy.service` instead.

    fqcn[action-core]: Use FQCN for builtin module actions (template).
    roles/setup_http_site_forward/tasks/main.yml:2 Use `ansible.builtin.template` or `ansible.legacy.template` instead.

    fqcn[action-core]: Use FQCN for builtin module actions (command).
    roles/setup_http_site_forward/tasks/main.yml:8 Use `ansible.builtin.command` or `ansible.legacy.command` instead.
2025-03-08 22:17:23 +01:00
cb50012dd3 🚨 roles: setup_http_site_proxy: Fix fqcn linter warnings
fqcn[action-core]: Use FQCN for builtin module actions (service).
    roles/setup_http_site_proxy/handlers/main.yml:2 Use `ansible.builtin.service` or `ansible.legacy.service` instead.

    fqcn[action-core]: Use FQCN for builtin module actions (template).
    roles/setup_http_site_proxy/tasks/main.yml:2 Use `ansible.builtin.template` or `ansible.legacy.template` instead.

    fqcn[action-core]: Use FQCN for builtin module actions (command).
    roles/setup_http_site_proxy/tasks/main.yml:9 Use `ansible.builtin.command` or `ansible.legacy.command` instead.
2025-03-08 22:12:00 +01:00
2b0e31870d 🚨 roles: users: Fix linter warnings of type 'fqcn'
fqcn[action-core]: Use FQCN for builtin module actions (shell).
    roles/users/handlers/main.yml:2 Use `ansible.builtin.shell` or `ansible.legacy.shell` instead.

    fqcn[action-core]: Use FQCN for builtin module actions (package).
    roles/users/tasks/main.yml:2 Use `ansible.builtin.package` or `ansible.legacy.package` instead.

    fqcn[action-core]: Use FQCN for builtin module actions (lineinfile).
    roles/users/tasks/main.yml:8 Use `ansible.builtin.lineinfile` or `ansible.legacy.lineinfile` instead.

    fqcn[action-core]: Use FQCN for builtin module actions (user).
    roles/users/tasks/main.yml:16 Use `ansible.builtin.user` or `ansible.legacy.user` instead.

    fqcn[action]: Use FQCN for module actions, such `ansible.posix.authorized_key`.
    roles/users/tasks/main.yml:24 Action `authorized_key` is not FQCN.

    fqcn[action-core]: Use FQCN for builtin module actions (user).
    roles/users/tasks/main.yml:34 Use `ansible.builtin.user` or `ansible.legacy.user` instead.

    fqcn[action-core]: Use FQCN for builtin module actions (stat).
    roles/users/tasks/main.yml:42 Use `ansible.builtin.stat` or `ansible.legacy.stat` instead.

    fqcn[action-core]: Use FQCN for builtin module actions (lineinfile).
    roles/users/tasks/main.yml:47 Use `ansible.builtin.lineinfile` or `ansible.legacy.lineinfile` instead.
2025-03-08 22:04:04 +01:00
f541f8f6fe Merge pull request 'Update eclipse-mosquitto Docker tag to v2.0.21' () from renovate/eclipse-mosquitto-2.x into master
Reviewed-on: 
2025-03-07 12:05:20 +01:00
7915336812 Update eclipse-mosquitto Docker tag to v2.0.21 2025-03-06 20:18:10 +00:00
b8e4746343 Merge pull request 'Update dependency lespocky.telegraf_docker_in_docker to v0.2.2' () from renovate/lespocky.telegraf_docker_in_docker-0.x into master
Reviewed-on: 
Reviewed-by: Alexander Dahl <alex@netz39.de>
2025-03-06 17:26:49 +01:00
856253de98 Update dependency lespocky.telegraf_docker_in_docker to v0.2.2 2025-03-06 13:18:03 +00:00
de7d285ee4 Merge pull request 'Fix linter warnings of type 'name'' () from alex/netz39-infra-ansible:lint into master
Reviewed-on: 
Reviewed-by: Stefan Haun <tux@netz39.de>
2025-03-05 18:13:58 +01:00
0f9060a2b1 Merge pull request 'Limit telegraf role to supported arch and unify docker host setup' () from unify-docker-hosts into master
Reviewed-on: 
Reviewed-by: Alexander Dahl <alex@netz39.de>
2025-03-05 18:10:35 +01:00
fca9c9ea3b Add wittgenstein to docker group 2025-03-05 12:26:17 +01:00
289ff674f9 Limit telegraf role to hosts with supporting arch
Temporary fix for https://github.com/LeSpocky/ansible-role-telegraf-docker-in-docker/issues/17
2025-03-05 12:26:17 +01:00
371f6b2907 Merge pull request 'Update dependency netz39.host_docker to v0.5.0' () from renovate/netz39.host_docker-0.x into master
Reviewed-on: 
Reviewed-by: Stefan Haun <tux@netz39.de>
2025-03-05 12:05:45 +01:00
dc6943354f Adjust variable docker_image_prune to change in netz39.host_docker 0.5.0 2025-03-05 12:00:46 +01:00
32bcc7e70b Update dependency netz39.host_docker to v0.5.0 2025-03-05 10:18:01 +00:00
0d8e580338 Merge pull request 'Update mrtux/grafana-screenshot Docker tag to v0.1.3' () from renovate/mrtux-grafana-screenshot-0.x into master
Reviewed-on: 
Reviewed-by: Stefan Haun <tux@netz39.de>
2025-03-05 08:47:45 +01:00
eef2d8b4fb Update mrtux/grafana-screenshot Docker tag to v0.1.3 2025-03-05 00:18:07 +00:00
daf17468d3 Merge pull request 'Update postgres Docker tag to v16.8' () from renovate/postgres-16.x into master
Reviewed-on: 
2025-03-04 10:15:37 +01:00
761dd212a8 Update postgres Docker tag to v16.8 2025-03-04 10:10:12 +01:00
cfa3175f24 Merge pull request 'Update mysql Docker tag to v9' () from renovate/mysql-9.x into master
Reviewed-on: 
2025-03-04 10:04:29 +01:00
7553d64b80 chore(deps): update mysql docker tag to v9 2025-03-04 09:29:39 +01:00
962948e76a Merge pull request 'Update netz39/entities_validation_svc Docker tag to v1.0.4' () from renovate/netz39-entities_validation_svc-1.x into master
Reviewed-on: 
2025-03-03 14:48:19 +01:00
bbfff8f481 Update netz39/entities_validation_svc Docker tag to v1.0.4 2025-03-02 17:18:08 +00:00
43d1c94d66 Merge pull request 'Update shlinkio/shlink Docker tag to v4.4.5' () from renovate/shlinkio-shlink-4.x into master
Reviewed-on: 
2025-03-02 15:22:16 +01:00
bc43af38d9 🚨 Add names to plays to fix name[play] linter warnings
Adds basic descriptions on what those host are supposed to do.
2025-03-02 09:22:05 +01:00
e3d2e8a31b 🚨 Fix linter warning of type 'name[template]'
This warning:

    name[template]: Jinja templates should only be at the end of 'name'
    setup-ssh.yml:6 Task/Handler: Ensure {{ lookup('env', 'HOME') }}/.ssh/config.d/ dir is present

Reason for that warning is thin.  Using the actual home dir here adds
not much value, so keep it symbolic.

Link: https://ansible.readthedocs.io/projects/lint/rules/name/
2025-03-01 22:09:10 +01:00
8b2ab7753d 🚨 Fix linter warnings of type 'name[casing]'
ansible-lint reads like this:

    name[casing]: All names should start with an uppercase letter.

While at it: Some task/handler names were slightly adapted to better
match what should be done.
2025-03-01 21:21:22 +01:00
d96a2770cf Update shlinkio/shlink Docker tag to v4.4.5 2025-03-01 09:18:08 +00:00
266ba39473 Merge pull request 'Rename roles to comply with linter' () from alex/netz39-infra-ansible:lint into master
Reviewed-on: 
Reviewed-by: dkdent <dkdent@netz39.de>
2025-03-01 08:55:33 +01:00
94bdf60700 🚨 roles: setup_http_site_forward: Rename
Roles names should be lowercase with underscores only.
ansible-lint complained:

    % ansible-lint -t role-name
    WARNING  Listing 1 violation(s) that are fatal
    role-name: Role name setup-http-site-forward does not match ``^[a-z][a-z0-9_]*$`` pattern.
    roles/setup-http-site-forward:1

    Read documentation for instructions on how to ignore specific rule violations.

                 Rule Violation Summary
     count tag       profile rule associated tags
         1 role-name basic   deprecations, metadata

    Failed after min profile: 1 failure(s), 0 warning(s) on 135 files.

Fixes: 85c09ea2ae ("Add role for apache forward site")
2025-02-28 08:49:53 +01:00
7e5b723a3a 🚨 roles: nfs_host: Rename
Roles names are expected to be lower case with underscores only,
see ansible-lint warning:

    % ansible-lint -t role-name
    WARNING  Listing 1 violation(s) that are fatal
    role-name: Role name nfs-host does not match ``^[a-z][a-z0-9_]*$`` pattern.
    roles/nfs-host:1

    Read documentation for instructions on how to ignore specific rule violations.

                 Rule Violation Summary
     count tag       profile rule associated tags
         1 role-name basic   deprecations, metadata

    Failed after min profile: 1 failure(s), 0 warning(s) on 135 files.

Fixes: 2138870520 ("nfs server wird nicht im k3s laufen, labeling entfernt")
2025-02-28 08:49:18 +01:00
db7a419ced Merge pull request 'Update kiosk Grafana URL to re-enable kiosk mode' () from grafana-kiosk-url into master
Reviewed-on: 
2025-02-27 22:00:04 +01:00
dc8e51322e Downgrade grafana-screenshot Docker image to v0.1.1 2025-02-27 21:59:36 +01:00
d065738f92 Update kiosk Grafana URL to enable kiosk mode
The kiosk setup mechanism seems to have changed in the past and now this parameter is needed in the Grafana URL.
2025-02-27 21:59:36 +01:00
17855e8849 Merge pull request '📝 mailmap: Merge some new identies' () from alex/netz39-infra-ansible:mailmap into master
Reviewed-on: 
2025-02-27 21:59:12 +01:00
53fe6b4427 📝 mailmap: Merge some new identies
Prefer private mail address over company mail address.
Prefer netz39 mail address over private mail address.

Output of `git shortlog -es` diffed:

```diff
--- before      2025-02-26 12:29:28.323774025 +0100
+++ after       2025-02-26 12:30:29.355141593 +0100
@@ -1,11 +1,8 @@
     99 Alexander Dahl <alex@netz39.de>
    284 David Kilias <dkdent@netz39.de>
-     2 Jens Winter-Hübenthal <jens.winter-huebenthal@bridgefield.de>
-     1 JensWH <jens.winter@gmail.com>
-     1 MG-95 <mg-95@gitea.n39.eu>
+     3 Jens Winter-Hübenthal <jens.winter@gmail.com>
      4 Maximilian Deubel <maximilian.deubel@gmail.com>
-     5 Maximilian Grau <mg-95@t-online.de>
+     6 Maximilian Grau <mg-95@t-online.de>
    259 Renovate Bot <accounts+renovatebot@netz39.de>
    670 Stefan Haun <tux@netz39.de>
-     1 timo <n39@therr.de>
-     1 timo <timo@netz39.de>
+     2 timo <timo@netz39.de>
```
2025-02-27 21:59:00 +01:00
7df49482c4 Merge pull request 'dyndns: Fix not executed cron jobs' () from alex/netz39-infra-ansible:cron into master
Reviewed-on: 
Reviewed-by: Stefan Haun <tux@netz39.de>
2025-02-27 18:56:45 +01:00
338dfc7410 🔊 Redirect curl output to debug log
curl only logs its own errors to stderr with the given options (--silent
--show-error).  Requests answered by the remote webserver, regardless of
HTTP status code, go to stdout.  So in case of an unsuccesful update
with some error condition we could not see that before.  Redirect those
to debug log, because it's still quite noisy otherwise.

This adds 288 log messages per day and service to the debug log,
accounting to max. 30k per day and service, and thus should not hurt.

desec log output is only the word "good" in case of success.

dd24 full output would be this, and is thus reduced to the relevant
lines merged in one line:

    [RESPONSE]
    code = 200
    description = Command completed successfully
    runtime = 0.067
    queuetime = 0
    EOF

Sample journald entry:

    Feb 27 12:48:15 pottwal dd24[519651]: code = 200,description = Command completed successfully
2025-02-27 14:06:19 +01:00
58e27dec10 🐛 Use bash as shell in cron jobs to make process substitution work
The cron jobs were executed, but dash (/bin/sh) complained, and so the
actual command was never run.  This is why our dyndns update did not
work through cron, but when executed manually in bash by an admin.

Example for such a fail when done manually in sh:

    # echo test3 > >(/usr/bin/logger -p user.debug -t dd24)
    /bin/sh: 7: Syntax error: redirection unexpected

Process substitution with `>(command)` is a feature supported by bash
and other shells, but not by POSIX shell which was supposed to used here
(set by `SHELL=…`).  Instead of building complicated redirect magic for
sh just switch to bash, which should be available on the hosts affected.

Link: https://www.shellcheck.net/wiki/SC3001
Fixes: 03dbd132eb ("🔊 Send DD24 cron errors to syslog")
Fixes: 38fbff30b5 ("feat: add role to manage dyndns entry on desec.io")
2025-02-27 14:03:18 +01:00
7074d12bae Merge pull request 'Update mrtux/grafana-screenshot Docker tag to v0.1.2' () from renovate/mrtux-grafana-screenshot-0.x into master
Reviewed-on: 
2025-02-27 12:27:46 +01:00
e4340c1aba Update mrtux/grafana-screenshot Docker tag to v0.1.2 2025-02-27 12:27:29 +01:00
8ee48afa7c Merge pull request 'Update dependency netz39.host_docker to v0.4.0' () from renovate/netz39.host_docker-0.x into master
Reviewed-on: 
2025-02-27 12:26:49 +01:00
7c3220ad2e Update dependency netz39.host_docker to v0.4.0 2025-02-27 09:18:09 +00:00
7b5317cd12 Merge pull request 'Update bitnami/rabbitmq Docker tag to v4.0.7' () from renovate/bitnami-rabbitmq-4.x into master
Reviewed-on: 
2025-02-27 09:45:25 +01:00
3239237bbc Update bitnami/rabbitmq Docker tag to v4.0.7 2025-02-27 06:18:06 +00:00