Simon Bärlocher
12f25f5aeb
docs(talk,coturn): add meta/argument_specs.yml
...
* coturn: 31 typed options including the 3 cert modes (acme/file/
selfsigned), the RFC2136 acme.sh sidecar config and challenge alias
subschema. coturn_static_auth_secret marked required.
* talk: 34 typed options covering the signaling/janus/nats triplet,
TURN integration, MCU (janus) tuning, trusted-proxy CIDRs and the
extra_hosts pin. talk_backend_secret, talk_turn_secret,
talk_session_hashkey and talk_session_blockkey marked required.
Both specs load cleanly through ansible-core's ArgumentSpecValidator,
have 100% defaults/spec coverage, and match the convention introduced
for the other roles in this collection.
2026-05-26 15:03:23 +02:00
Simon Bärlocher
51919829e3
fix(talk,coturn): correct vars file header (was 'httpbin')
...
Both new roles had 'vars file for httpbin' as the header comment in
vars/main.yml — copy-paste artefact from the httpbin role template.
Files are otherwise empty. Reviewer flagged both inline (PR review
comments 229 and 230).
2026-05-26 15:03:04 +02:00
27255a4bfa
feat(talk/turn/signaling/hpb): add role for Talk with backend services
2026-05-22 01:10:56 +02:00
61193e26f4
refactor(homarr): extract layout packing to filter plugin
2026-05-19 11:19:29 +02:00
bbbd1c8940
fix: (Homarr) removed small mistakenly added entry in defaults
2026-05-18 10:47:06 +00:00
2aa1df8614
chore(homarr): added readme and removed test env contents
2026-05-13 15:37:13 +02:00
308bf50122
chore(homarr): remove digitalboard-specific defaults
2026-05-13 15:37:12 +02:00
c1c1a84591
feat(homarr): make apps list configurable with auto-layout
2026-05-13 15:37:12 +02:00
d4eaa5f12c
refactor(homarr): extract seed SQL into template
2026-05-13 15:37:12 +02:00
3c35b8782e
fix: reomved remnants of removed env / fixed encription key validatiion
2026-05-13 15:37:11 +02:00
f4084ba078
refactor(homarr): drop service_name var and rename db_dir to db
...
- homarr_service_name removed, replaced with fixed "homarr" string
- homarr_db_dir renamed to homarr_db (variable points to a file, not a dir)
2026-05-13 15:37:11 +02:00
123769a4f4
feat(homarr): use handler for restart, validate encryption key
2026-05-13 15:37:11 +02:00
bdb1b03a18
refactor(homarr): align vars with homarr_ prefix, EN-only strings
2026-05-13 15:37:11 +02:00
c060d6136a
fix(homarr): salt column, bcrypt newline, transaction safety
2026-05-13 15:37:10 +02:00
23ea8dafc9
Chore: add admin user and seed staging
...
added creation of the admin user, the basic homeboard and all basic setup tasks.
Todo: Cleanup
2026-05-13 13:30:34 +00:00
5608daadaa
chore: base config and deployment for role homarr
2026-05-13 13:30:34 +00:00
1fcb433aae
chore: add new boilerplate role for homarr
2026-05-13 13:30:34 +00:00
967ffb0c2d
fix: leading space in extra networks
...
Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
2026-04-10 14:34:15 +02:00
c27b4d9488
feat: add blueprints for authentik ldap outpost and render values directly instead of using env vars
...
Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
2026-04-10 14:33:52 +02:00
d25f1c5304
chore: add authentik outpost deployment
...
Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
2026-04-10 11:27:07 +02:00
dbcccc090b
feat: ability to set extra networks for opencloud
...
needed for ldap outpost
Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
2026-04-10 11:19:10 +02:00
e2fae25592
feat: make nextcloud_notify_push_image configurable
...
Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
2026-04-10 11:18:28 +02:00
468ed34550
feat: ability to set extra networks for nextcloud
...
needed for ldap outpost
Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
2026-04-10 11:17:42 +02:00
77484f1944
chore: add new empty role skeleton for authentik_outpost_ldap
...
Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
2026-04-02 11:51:58 +02:00
aa8baad630
feat: opencloud group provisioning via oidc
...
Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
2026-03-13 16:43:02 +01:00
6f4cc2bdb3
feat: nextcloud ability to get groups from ldap backend
...
Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
2026-03-13 15:37:33 +01:00
d517f77b6c
feat: add file_lock and notify_push configuration to nextcloud role
...
Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
2026-03-13 15:22:09 +01:00
910986b808
feat: add drawio instance for nextcloud and opencloud
...
Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
2026-03-13 14:37:02 +01:00
f3f2b6d5b7
feat: add empty role skeleton for drawio role
...
Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
2026-03-13 13:44:53 +01:00
db21030a64
feat: add ldap backend to opencloud
...
Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
2026-03-13 11:43:11 +01:00
12864a13b0
feat: add 389ds ldap backend to keycloak
...
Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
2026-03-13 10:58:40 +01:00
59d0174905
feat: add ldap provisioning to nextcloud
...
Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
2026-03-13 10:46:49 +01:00
700cafed0e
feat: add basic ds389 docker setup and configuration
...
Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
2026-03-06 17:54:07 +01:00
dae32362ed
chore: add empty boilerplate role for 389ds
...
Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
2026-03-06 17:47:50 +01:00
244e378d9d
fix: use correct file ownership for nextcloud volumes
...
Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
2026-03-06 17:18:01 +01:00
6be4a50f8f
chore: ensure we can use the same collabora instance for multiple cloud instances
...
Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
2026-03-06 17:00:33 +01:00
d3d7bb9ba5
chore: add central collabora service
...
instead of providing one for owncloud and nextcloud separately
Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
2026-03-05 17:09:06 +01:00
064b939d06
chore: add empty role boilerplate for collabora
...
Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
2026-03-05 16:34:50 +01:00
fe85cc0f86
feat: add s3 storage provisioning for opencloud
...
Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
2026-03-05 16:24:12 +01:00
2dc9097707
feat: add oidc provisioning for opencloud
...
Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
2026-03-05 15:36:12 +01:00
59cd27a031
feat: add basic opencloud deployment
...
Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
2026-02-27 14:59:45 +01:00
6fad15e7ed
chore: add empty boilerplate role for opencloud
...
Signed-off-by: Bert-Jan Fikse <bert-jan@whatwedo.ch>
2026-02-27 13:44:43 +01:00
b5a6573beb
feat: add nextcloud oidc provisioning
2026-02-27 11:23:07 +01:00
3fcaebe1a8
feat: add keycloak provisioning tasks
2026-02-27 11:22:08 +01:00
13eb79803f
chore(traefik): prefix all traefi vars with traefik_
2026-01-22 17:29:56 +01:00
d0ae0a4df9
chore(traefik): clearer naming for aggregated services
2026-01-22 17:17:27 +01:00
8e49b09fd6
feat(traefik): allow exposure of dashboard via domain
2026-01-22 14:01:39 +01:00
bce1daf5a6
feat: add provisioning of apps to nextcloud role
2026-01-16 15:53:36 +01:00
ea8178fcf0
feat: add ability to add extra_hosts to nextcloud docker-compose
2026-01-15 17:29:29 +01:00
d3bf520bf0
fix: remove dep to base role from traefik role
2026-01-15 17:20:50 +01:00
