-
0d26a6c64a
fix(grafana): restart service after package install/upgrade
main
Clément Désiles
2026-09-29 12:27:13 +02:00
-
86ad271b23
fix(grafana): align NVMe temperature thresholds with 0-70C rating
Clément Désiles
2026-09-29 12:25:56 +02:00
-
1d37313bd6
fix(grafana): split NVMe temperature alerts from HDD tiers
Clément DésilesandClaude Opus 5.5
2026-09-25 08:59:59 +02:00
-
5efc0b0d6e
fix(nginx): make Let's Encrypt opt-in per service
Clément Désiles
2026-09-21 10:04:47 +02:00
-
61621715e0
fix(ansible): reference facts via ansible_facts to silence deprecation
Clément Désiles
2026-09-21 09:59:03 +02:00
-
a73fb2aa29
feat(arr): add prowlarr, radarr and seerr roles
Clément Désiles
2026-09-18 18:53:43 +02:00
-
6ba208a455
docs(zfs): link pool capacity metric to Grafana alerts
Clément Désiles
2026-09-18 18:35:04 +02:00
-
be73f3adfa
feat(grafana): provision disk alerts to ntfy
Clément Désiles
2026-09-18 18:32:02 +02:00
-
c127336321
feat(zfs): add capacity metrics and Grafana dashboard
Clément Désiles
2026-09-18 15:25:23 +02:00
-
501671770f
add deluge role
Clément Désiles
2026-09-18 15:24:18 +02:00
-
30480f61d5
generalize zsh role to support darwin
Clément Désiles
2026-09-18 11:32:06 +02:00
-
fd8c64aed1
add darwin support to install homebrew deps
Clément Désiles
2026-09-15 17:50:09 +02:00
-
c88e90524b
update doc
Clément Désiles
2026-09-15 17:49:33 +02:00
-
f89a919022
add darwin support
Clément Désiles
2026-09-15 17:30:20 +02:00
-
923ffa4acd
cleanup
Clément Désiles
2026-09-11 21:35:30 +02:00
-
94a1aa553a
add ansible utils to enable wol
Clément Désiles
2026-09-11 21:33:16 +02:00
-
9fc28377d7
add wg prom exporter
Clément Désiles
2026-09-11 21:32:27 +02:00
-
20cbf01040
enhance dashboarding
Clément Désiles
2026-09-11 21:32:00 +02:00
-
9440d78cd9
add exa alias
Clément Désiles
2026-09-11 14:40:51 +02:00
-
281245ee32
Merge branch 'main' of gitlab.com-perso:cdesiles/ansible-playbooks
Clément Désiles
2026-09-10 21:26:00 +02:00
-
-
ea93eb8c59
fix(sshd): make authorized_keys fallback readable by the session user
Clément Désiles
2026-09-10 21:21:06 +02:00
-
0ec6224941
feat(backup): per-job schedules, stale-lock recovery, service manifests
Clément Désiles
2026-09-10 16:47:33 +02:00
-
-
f6c4d36bbe
feat(monitoring): add backup and systemd metrics, alerts, and dashboards
Clément Désiles
2026-09-09 12:07:50 +02:00
-
8756eb1183
feat(monitoring): add smartctl, fail2ban, wireguard exporters and dashboards
Clément Désiles
2026-09-08 23:03:34 +02:00
-
c29042fe1d
feat(tooling): add nmap
Clément Désiles
2026-09-08 22:52:00 +02:00
-
56fe5304c5
feat(unbound): enable prefetch, prefetch-key, and deny-any
Clément Désiles
2026-09-08 22:49:50 +02:00
-
e4d0812a69
fix(grafana): NUT dashboard instance variable ignores stale series
Clément Désiles
2026-09-06 23:51:22 +02:00
-
65fdb4face
fix(monitoring): exporter auth and reload fixes
Clément Désiles
2026-09-06 23:47:13 +02:00
-
ed5d0c68f1
feat(unbound): add prometheus exporter, dashboard, fix socket buffer sysctl
Clément Désiles
2026-09-06 23:44:05 +02:00
-
304a3fae12
feat(monitoring): add nginx, postgres, valkey dashboards
Clément Désiles
2026-09-06 23:43:50 +02:00
-
aa78e238aa
feat(monitoring): add nginx, postgres, valkey prometheus exporters
Clément Désiles
2026-09-06 09:37:36 +02:00
-
6f1f7f88f0
fix(metabase): bind host port 3400 instead of default 3000
Clément Désiles
2026-09-05 17:24:17 +02:00
-
5218fa2714
refactor(nut): merge prometheus exporter into nut role
Clément Désiles
2026-09-05 17:24:12 +02:00
-
12b81919c3
feat(monitoring): add grafana, prometheus, node_exporter roles
Clément Désiles
2026-09-05 17:24:08 +02:00
-
b94743567f
feat(sys_autoupdate): notify on pending kernel reboot
Clément Désiles
2026-09-05 16:59:49 +02:00
-
24502f543f
fix(fail2ban): pass blocktype via banaction to override the ufw action default
Clément Désiles
2026-09-05 16:57:45 +02:00
-
6355a9aae5
fix(fail2ban): ban via ufw deny (DROP) instead of reject
Clément Désiles
2026-09-05 16:45:12 +02:00
-
40cc0efcf8
fix(fail2ban): use ProtectSystem=full so ufw can create its lock file
Clément Désiles
2026-09-05 16:28:55 +02:00
-
120615c38f
fix(fail2ban): start under ProtectSystem=strict hardening
Clément Désiles
2026-09-05 16:21:49 +02:00
-
ceca06ff2e
feat(backup): add restic backup role with encrypted incremental snapshots
Clément Désiles
2026-09-01 22:20:27 +02:00
-
8a3c323059
fix(wireguard): reload tunnel via syncconf on config change
Clément Désiles
2026-08-27 10:14:23 +02:00
-
842374616b
fix: add unzip to tooling role
Clément Désiles
2026-08-26 00:16:33 +02:00
-
fb01dfbf67
doc: minor alias to help me switch to podman
Clément Désiles
2026-08-26 00:16:09 +02:00
-
59c0b93905
fix: prevent ansible from parsing JSON when establishing an ssh connection
Clément Désiles
2026-08-26 00:15:04 +02:00
-
4c4cb16f37
fix(wireguard): allow ufw forwarding for server_mode tunnels
Clément Désiles
2026-08-25 23:47:34 +02:00
-
642a0f8ea4
fix(sshd): move login banner to zsh .zprofile
Clément Désiles
2026-08-23 23:27:15 +02:00
-
43b510e77f
fix(podman): restore newuidmap/newgidmap file caps for rootless namespaces
Clément Désiles
2026-08-23 22:03:31 +02:00
-
174a96eefc
security: always restore sudoers after makepkg, drop dead paru block
Clément Désiles
2026-08-18 21:52:49 +02:00
-
1970564c8f
refactor: drop shared-service meta dependencies from service roles
Clément Désiles
2026-07-04 00:15:50 +02:00
-
7972fe09ad
security: deploy pod manifests containing credentials with mode 0600
Clément Désiles
2026-07-04 00:06:29 +02:00
-
95a743ddeb
fix(roles): detect new image on podman pull and restart services
Clément Désiles
2026-07-04 00:06:13 +02:00
-
556fae86d9
fix(immich): detect new image on pull and restart service
Clément Désiles
2026-07-04 00:03:34 +02:00
-
f48d68da9d
doc: add readme to zsh
Clément Désiles
2026-07-03 00:11:52 +02:00
-
75d6aae668
Add UniFi Network Controller role
Clément Désiles
2026-07-03 00:09:02 +02:00
-
501f4e1f87
feat(nut): report outage duration and battery % in ntfy
Clément DésilesandClaude Opus 4.8
2026-06-29 23:50:48 +02:00
-
21f47196cf
feat(net_config): support IPForward and IPMasquerade in network config
Clément Désiles
2026-06-19 23:55:02 +02:00
-
e4ad6888b6
Introduce vault pass in the doc to push a good practice
Clément Désiles
2026-06-19 23:52:19 +02:00
-
4c57d28b4d
Add new fdroid role to host custom apks
Clément Désiles
2026-06-19 23:50:56 +02:00
-
045c0b9bec
refactor(zfs): inline dataset ownership, add absent cleanup
Clément Désiles
2026-06-19 23:46:33 +02:00
-
13b8aae769
Add support for NUT (EATON inverter)
Clément Désiles
2026-06-13 09:37:49 +02:00
-
25621a101c
Merge branch 'main' of github.com:cdesiles/ansible-playbooks
Clément Désiles
2026-06-12 22:34:24 +02:00
-
-
0726e417d2
feat: add syncthing support
Clément Désiles
2026-06-03 23:28:26 +02:00
-
2f3eebd422
feat: add metabase role
Clément Désiles
2026-06-03 10:01:00 +02:00
-
-
d976a9d701
fix: cleanup examples
Clément Désiles
2026-05-31 22:42:12 +02:00
-
e74fffd5fc
refacto: move inventory examples to a dedicated dir
Clément Désiles
2026-05-31 22:34:31 +02:00
-
30dfb9ee8b
feat(immich): support read-only external libraries
Clément Désiles
2026-05-30 23:39:17 +02:00
-
b0324cf3fe
refactor: hoist OS-specific package names to role defaults
Clément Désiles
2026-05-30 21:57:20 +02:00
-
a6ca97ca0e
feat(samba_server): new role for SMB/CIFS shares
Clément Désiles
2026-05-30 21:57:13 +02:00
-
b2a66099aa
fix(immich): prevent client SocketTimeoutException on large uploads
Clément Désiles
2026-05-30 17:18:05 +02:00
-
314fa715fd
fix(nginx): prevent cert leak on IPv6 / unknown SNI
Clément Désiles
2026-05-30 17:06:10 +02:00
-
80026fac0b
fix: pin ansible.posix >=2.2.0 to silence _text deprecation warning
Clément Désiles
2026-05-30 17:05:58 +02:00
-
c9e2ff930c
feat(net_config): safer ufw restart on NAT/forwarding changes
Clément Désiles
2026-05-29 22:24:16 +02:00
-
36d6baaecb
fix: missing task in wg
Clément Désiles
2026-05-29 21:54:25 +02:00
-
5f2c82d296
fix: use ansible_facts['getent_passwd'] to silence INJECT_FACTS_AS_VARS deprecation
Clément Désiles
2026-05-29 21:54:03 +02:00
-
dbc7ca203a
fix: minor taks name typo
Clément Désiles
2026-05-29 21:50:39 +02:00
-
a8545fc501
fix(podman): use Type=notify + service-container so systemd sees pod crashes
Clément Désiles
2026-05-29 21:49:13 +02:00
-
29d9f27052
fix: ntfy probe without curl available
Clément Désiles
2026-05-29 21:41:04 +02:00
-
b04939d3d0
fix: use ansible_facts['kernel'] to avoid deprecation warning
Clément Désiles
2026-05-29 21:35:54 +02:00
-
ff3133f8e7
feat: wireguard role allow multiple endpoints
Clément Désiles
2026-05-29 21:32:08 +02:00
-
4ae7721070
fix: secure pg + fix old way of sharing podman network
Clément Désiles
2026-05-29 21:31:07 +02:00
-
ffeff6556b
fix: restart dhcpd on nas restart
Clément Désiles
2026-05-29 21:29:14 +02:00
-
436fba0d39
Merge branch 'main' of github.com:cdesiles/ansible-playbooks
Clément Désiles
2026-05-29 21:28:41 +02:00
-
-
92deb854d2
fix: enhance tooling
Clément Désiles
2026-05-29 21:27:25 +02:00
-
05e7ee3956
fix: tls for static web
Clément Désiles
2026-05-29 21:27:00 +02:00
-
aea450dc9d
feat: nginx certbot
Clément Désiles
2026-05-29 21:26:17 +02:00
-
1d00432061
fix: podman integration
Clément Désiles
2026-05-29 21:24:58 +02:00
-
7904275754
nfs: minor tweak
Clément Désiles
2026-05-22 00:07:24 +02:00
-
305b8324db
feat: sys autoupdate
Clément Désiles
2026-05-08 23:47:21 +02:00
-
-
ea0771a5ac
fix: update wireguard example
Clément Désiles
2026-05-05 22:59:46 +02:00
-
48e87f7cb1
zsh: enhance configuration with alacritty
Clément Désiles
2026-05-05 22:58:56 +02:00
-
4ac40b9898
fix: nginx defaults override on archlinux
Clément Désiles
2026-05-05 22:56:08 +02:00
-
488be1280c
fix: dhcpd startup dependency
Clément Désiles
2026-05-05 22:54:56 +02:00
-
de165f5e1c
fix: review archlinux install details
Clément Désiles
2026-04-11 22:55:03 +02:00
-
f9397ad38c
feat: allow sshd to bind on multiple networks
Clément Désiles
2026-04-11 22:54:35 +02:00
-
ac40c23d06
feat: more base tools
Clément Désiles
2026-04-11 22:53:19 +02:00
-
6fc7879648
fix: uptime-kuma reverse proxy config
Clément Désiles
2026-04-11 22:53:06 +02:00
-
c4136ba5d2
fix: ntfy
Clément Désiles
2026-04-11 22:52:29 +02:00
-
4d60c6ea34
fix: zshrc to take p10k theme
Clément Désiles
2026-04-11 22:51:28 +02:00
-
ae33184aa0
fix: zsh role add fzf support and p10k settings tweaks
Clément Désiles
2026-04-11 22:41:10 +02:00
-
61c88045f7
feat: add more tooling
Clément Désiles
2026-03-17 23:13:02 +01:00