ansible-playbooks

Author SHA1 Message Date

Author	SHA1	Message	Date
Clément Désiles	7972fe09ad	security: deploy pod manifests containing credentials with mode 0600 gitea.yaml, immich.yaml, and metabase.yaml embed database passwords in env vars; per repo policy, rendered files containing secrets must not be world-readable.	2026-07-04 00:06:29 +02:00
Clément Désiles	95a743ddeb	fix(roles): detect new image on podman pull and restart services Same bug as immich (`556fae8`): 'Writing manifest' goes to stderr, so changed_when never matched and the restart handlers never fired after image upgrades. Compare local image IDs before/after pull instead, and notify the restart handler only on a genuinely new image. Applies to fdroid, gitea, metabase, ntfy, unifi, uptime-kuma.	2026-07-04 00:06:13 +02:00
Clément Désiles	2f3eebd422	feat: add metabase role	2026-06-03 10:01:00 +02:00

Clément Désiles

7972fe09ad

security: deploy pod manifests containing credentials with mode 0600

gitea.yaml, immich.yaml, and metabase.yaml embed database passwords in
env vars; per repo policy, rendered files containing secrets must not
be world-readable.

2026-07-04 00:06:29 +02:00

Clément Désiles

95a743ddeb

fix(roles): detect new image on podman pull and restart services

Same bug as immich (556fae8): 'Writing manifest' goes to stderr, so
changed_when never matched and the restart handlers never fired after
image upgrades. Compare local image IDs before/after pull instead, and
notify the restart handler only on a genuinely new image.

Applies to fdroid, gitea, metabase, ntfy, unifi, uptime-kuma.

2026-07-04 00:06:13 +02:00

Clément Désiles 2f3eebd422 feat: add metabase role 2026-06-03 10:01:00 +02:00

3 Commits