Commit graph

116 commits

Author SHA1 Message Date
2dfe9f9b92
feat(shepherd): Add auto update shepherd role
Deprecates diun as it provides a simpler implementation for docker
swarm. Mark any containers you want auto updated with
`shepherd.autoupdate=true` and the rest with
`shepherd.autoupdate=false`. Everything untagged will not be watched (by
default), though this can be changed by setting the ansible default
variable `shepherd_filter_services: `.
2025-03-15 22:29:53 +01:00
bc9104c3e8
chore(landingpage): Fix container image url 2025-03-15 22:29:52 +01:00
3418f85ffd
chore(landingpage): Switch to ghcr hosted docker image 2025-03-15 22:29:52 +01:00
ea077958ce fix(forgejo): Update to correct woodpecker versions 2025-02-16 21:45:14 +01:00
7543170f75
chore(restic): By default run check every Sunday night
And check a larger subset of the data with 15%.
2025-02-03 21:36:18 +01:00
90e45cacda
chore(restic): Do not require caddy id for the role 2025-02-03 21:35:44 +01:00
a4ccdb9884
fix(restic): Fix docker stack environment variables 2025-02-03 21:35:25 +01:00
0d7e99763f
feat(nextcloud): Add caddy server HSTS preload, webfinger 2025-02-03 21:34:58 +01:00
1a3fd9160e
fix(restic): Add role to site deployment 2025-02-03 18:59:58 +01:00
557f20d7b4
feat(shaarli): Add backups
Add restic backup functionality for shaarli data.
2025-02-03 18:58:12 +01:00
af4cfc5a4b
fix(nextcloud): Default to backups enabled
Backups should be enabled by default if available.
2025-02-03 18:57:52 +01:00
135aadf3a0
feat(restic): Add restic backup maintenance stack
Sets up regular backup maintenance for a restic (S3) backend, and
enables global variables for other roles to use for their individual
backup. Example found in nextcloud role.
2025-02-03 18:45:33 +01:00
eaeeb4ed6c
feat(nextcloud): Add simple restic backup 2025-01-28 16:50:33 +01:00
36ff0fb5fa
feat(nextcloud): Add imaginary container for thumbnails 2025-01-28 15:55:52 +01:00
7e1381913c
chore(nextcloud): Update to Nextcloud 30 2025-01-28 15:55:28 +01:00
fa9bac81af
feat(nextcloud): Add adjustable php memory/upload limits
Can be adjusted through nextcloud default settings.
2025-01-05 20:48:25 +01:00
84dcf7d128
feat(forgejo): Allow setting S3 checksum algorithm as variable
Can take either `default` (for MinIO, garage, AWS) or `md5` (Cloudflare,
Backblaze).
2024-09-28 10:30:58 +02:00
a6b8e6ffcd
chore(forgejo): Update to forgejo 8 2024-09-27 10:43:17 +02:00
46b6b9a8a4
chore(forgejo): Fix mailer tls protocol configuration
Update configuration for mailer to use new 'PROTOCOL' configuration
option instead of old 'IS_TLS_ENABLED'.
2024-09-27 10:05:33 +02:00
409f50a5ef
feat(forgejo): Allow enabling git lfs 2024-09-27 09:42:47 +02:00
0658971dbb
chore(forgejo): Update mailer settings for new configuration
Split 'SMTP_HOST' variable into 'SMTP_ADDR' and 'SMTP_PORT' to follow
updated configuration style.
2024-09-27 09:42:27 +02:00
174ad5a5fb
feat(forgejo): Add s3 configuration options
Sets s3 storage for all available subsystems, more information here:
https://forgejo.org/docs/latest/admin/storage/

Does *not* set repositories to be hosted on s3 since forgejo does not
support it.
2024-09-27 08:36:41 +02:00
29ccedf146
fix(forgejo): Fix default landing page configuration
Was missing underscore to be set correctly.
2024-09-27 08:35:13 +02:00
801d4b751b
Update Nextcloud major version to 29 2024-06-27 18:23:35 +02:00
be875edea9
Only update docker when run explicitly
Docker should only be updated when run explicitly as it currently
requires a re-run of the complete playbook afterwards (does not work for
single-tag deployments e.g.) since it will recreate caddy container and
lose all reverse proxy information.
2024-06-27 18:23:15 +02:00
e8447a6289
Add diun role 2024-06-25 12:20:46 +02:00
b6f7934c5f
Add gitea as potential woodpecker agent target
In addition to the connected forgejo instance, we can now also target a
remote gitea instance for woodpecker agents, should we want to.
2024-06-24 22:02:39 +02:00
86dd20fbf0
Remove some services from default deployment
Services I have not used or not used for a long time will now not be
deployed by default (but could still be specifically targeted through
tags).
2024-06-24 20:51:40 +02:00
b3f201ed7d
Pin exact caddy version
Stay on the exact version unless it is specifically told to upgrade.
This is a first-step workaround for the (non-)idempodency issue of the
caddy container's json config injection.
2024-06-24 20:50:58 +02:00
c498b3ced8
Apply prettier formatting 2024-06-24 20:36:55 +02:00
6b4c4ccde4
Update dependencies to enable easy single-tag deployments
Previously every deployment (even just for a single tag, such as
`ansible-playbook site.yml --tags landingpage`) would have the caddy
deployment in its dependency.

That meant in effect whenever there was an updated caddy image, the role
would update it and we would lose all previous caddy configuration -
which in turn would necessitate a complete redeploymnet of all steps.
This is now not the case anymore.
2024-06-24 20:24:04 +02:00
3171aa5ead
Make zerossl usage depend on having an api key 2024-06-24 18:56:37 +02:00
9ec5b6dec6
Switch site playbook to use forgejo 2024-06-24 18:30:34 +02:00
648f49a847
Move from gitea to forgejo
Moved all variables over; moved git passthrough script to new location
and naming scheme; moved settings and mentions of gitea name; switched
ci woodpecker instance to use forgejo instead of gitea.
2024-06-24 18:17:01 +02:00
b6e30811dc
Fix shaarli version and image source
Shaarli images moved a while ago and received a different tag naming scheme.
So we changed to the new repository and renamed the version from latest
to release.
2024-04-11 13:08:06 +02:00
b3d84b6075
Set Nextcloud php upload limit to 2GB 2024-04-11 13:07:22 +02:00
38b32a66e5
Reduce gitea healthy-await delay
We waited for 60 seconds previously which is exactly when the
supplied ssh key would disappear in my setup. So instead we
wait for slightly shorter (55 seconds) to ease this for me.
2024-04-11 13:07:10 +02:00
7fb14b07a8
Remove nextcloud db readiness check
We instead just wait for the db to be up with the usual docker
wait commands. A little more brittle but the old method ceased
to work.
2024-04-11 13:06:10 +02:00
ff49856107
Pint Nextcloud to current stable version 2024-04-11 13:05:15 +02:00
948ca7517a
Always update docker requirements to latest versions 2024-04-11 13:05:01 +02:00
d3f65a07fb
Fix wget healthchecks to not use localhost
For a reason, current wget versions error out when using localhost instead
of 127.0.0.1 as the healthcheck for docker services. Probably has something
to do with dns resolution - either on docker or wget end, but have not
looked to deep into it.
2024-04-11 13:04:28 +02:00
bc7796710a
Pin Nextcloud version to current stable release 2023-12-08 22:50:01 +01:00
26cceccfd9
Update Nextcloud internal Caddyfile
Add suggested security improvements and static file
caching.
2023-12-08 22:49:43 +01:00
388a1d8cfc
Separate caddy container id grabbing into own role
Since other roles often rely on this not an actual new caddy server
installation we should probably have it as its own little role.
2023-12-08 20:35:51 +01:00
a52cab2f61
Refactor wallabag stack name and repo variables
Brought in line with other stack naming schemes.
2023-12-08 20:34:41 +01:00
9cf43d0d5d
Fix new stat module checksum option
In the module get_md5 has been replaced by get_checksum.
2023-12-08 20:34:07 +01:00
d4dbeb4eb4
Improve gitea stability on first launch
When launching many containers gitea admin waiting still sometimes gets stuck.
This should provide a bandaid for now. Also improve the container detection.
2023-12-08 20:31:15 +01:00
2d01350fa5
Switch to new landingpage and remove old blog
New landingpage includes the blog itself to better
integrate with the main page. Also runs on astro
not on hugo which I am a little more familiar with.
2023-12-08 20:28:44 +01:00
7d8408f9f8
Change become arguments to boolean
Changed all 'become: ' values from 'yes' to 'true' to satisfy the schema
(and also make the lsp shut up).
2022-12-18 16:02:32 +01:00
385cb3859c
Remove whoami from default site playbook
whoami should be used as a test and debugging container and should not
be necessary or used for production deployment.
2022-12-18 15:53:26 +01:00