Commit Graph
14682 Commits
Author SHA1 Message Date
kevinveenbirkenbach 452bf0e41b fix(wordpress): set OIDC issuer and JWKS endpoint 2026-02-22 11:13:03 +01:00
kevinveenbirkenbach 91d4e65296 fix(msmtp): use explicit string checks in when conditions 2026-02-22 10:40:43 +01:00
kevinveenbirkenbach 226491f9a1 Fix Fedora build when versioned python pip package is unavailable 2026-02-22 10:21:26 +01:00
kevinveenbirkenbach e8d3e8091e Solved tests 2026-02-22 03:36:40 +01:00
kevinveenbirkenbach 99443d2a64 Make sys-svc-mail-msmtp work across default distros 2026-02-22 03:20:20 +01:00
kevinveenbirkenbach 1dc350e9f9 Use command_path lookup for pip-installed CLI binaries 2026-02-22 02:27:40 +01:00
kevinveenbirkenbach 84f18080a5 Removed plugin. Is now integrated directly into Nextcloud without external apps 2026-02-22 02:00:59 +01:00
kevinveenbirkenbach dd9829cf0a refactor(sys-pip-install): split core run-once tasks 2026-02-22 01:39:41 +01:00
kevinveenbirkenbach 575474f5bb Refactor Python bootstrap to single installer SPOT 2026-02-22 01:20:23 +01:00
kevinveenbirkenbach d9cf57811d Fix command availability check for CentOS without which 2026-02-22 00:31:42 +01:00
kevinveenbirkenbach ff74bfc222 Fix docker readiness and make SSH restart handler distro-safe 2026-02-22 00:25:35 +01:00
kevinveenbirkenbach 384e590388 added linebreak 2026-02-21 23:46:17 +01:00
kevinveenbirkenbach 9766f8e8b3 feat(dev-python): install Python 3.11+ by default
- add cross-distro dev-python installer script and wire it into role + Dockerfile
- regenerate dockerignore from gitignore on make build and ignore logs/
- harden sys-pip-install break-system-packages support probe
- raise project requires-python to >=3.11
2026-02-21 23:45:41 +01:00
kevinveenbirkenbach b95a231a37 refactor(webserver): remove explicit fs owner/group handling 2026-02-21 21:41:14 +01:00
kevinveenbirkenbach 434dc84ce6 sys-pip-install: make break-system-packages flag conditional 2026-02-21 20:25:22 +01:00
kevinveenbirkenbach d33418176b fix(user-backup): ensure backup home exists before ssh wrapper deploy 2026-02-21 19:45:17 +01:00
kevinveenbirkenbach fb53e8b039 Fix automtu prerequisites by ensuring ping package is installed 2026-02-21 19:02:13 +01:00
kevinveenbirkenbach 8d3e995f28 fix(sys-svc-container): check PID 1 via /proc instead of ps 2026-02-21 17:59:12 +01:00
kevinveenbirkenbach 9cb38c0daa fix(sys-svc-container): install iproute package before automtu 2026-02-21 17:20:53 +01:00
kevinveenbirkenbach ec30948546 fix(deploy): use bash -lc for commands with pipefail 2026-02-21 16:05:42 +01:00
kevinveenbirkenbach 584d2629c9 test(integration): forbid sh -lc commands using pipefail 2026-02-21 16:00:05 +01:00
kevinveenbirkenbach fb9bdaedb3 fix(nextcloud): harden LDAP config id handling and centralize prefix 2026-02-21 15:35:39 +01:00
kevinveenbirkenbach fdbc0f8d07 Implemented correct package loading 2026-02-21 11:36:57 +01:00
kevinveenbirkenbach 23d06e21d6 Add CentOS OpenSSH client package mapping 2026-02-20 20:51:17 +01:00
kevinveenbirkenbach 608c03d3c8 Fix distro-specific CI image and pip package selection 2026-02-20 20:08:33 +01:00
kevinveenbirkenbach 656fced43c fix(ci): resolve docker apt key conflict and enforce per-distro stack 2026-02-20 19:12:52 +01:00
kevinveenbirkenbach 8504893953 Fix GNOME package mapping fallback for RedHat-family distros 2026-02-20 17:55:18 +01:00
kevinveenbirkenbach 932e97b1c9 Whitelisted ansible variables 2026-02-20 17:15:45 +01:00
kevinveenbirkenbach 0757144b60 refactor(sys-svc-container): split distro-specific docker setup tasks 2026-02-20 16:31:21 +01:00
kevinveenbirkenbach 58eebec80f fix(sys-svc-container): avoid buildx package file conflict on debian 2026-02-20 14:01:45 +01:00
kevinveenbirkenbach 8e8a28e9d6 fix(sys-cleanup): keep apt lists for later package installs 2026-02-20 13:26:08 +01:00
kevinveenbirkenbach 0710c41f91 fix(ci): run mirror resolver with venv python in container 2026-02-20 11:25:46 +01:00
kevinveenbirkenbach 307f92ff16 Merge branch 'master' into feature/store 2026-02-20 10:50:51 +01:00
kevinveenbirkenbach 68e299b80a Replaced arch by debian 2026-02-20 10:00:32 +01:00
kevinveenbirkenbach aeb7646b4b fix(onlyoffice): avoid restart during backup run
Mark onlyoffice as backup.no_stop_required so baudolo includes it in --images-no-stop-required. This prevents post-backup unhealthy state and 502 errors observed after backup-triggered restart.
2026-02-20 10:00:32 +01:00
kevinveenbirkenbach 692f47fda4 Changed default distro to debian 2026-02-20 10:00:31 +01:00
kevinveenbirkenbach 75856fc99d Release version 4.1.0 2026-02-20 10:00:31 +01:00
kevinveenbirkenbach ce644b0d63 Replaced arch by debian 2026-02-20 09:09:37 +01:00
kevinveenbirkenbach 2cae7d7310 fix(onlyoffice): avoid restart during backup run
Mark onlyoffice as backup.no_stop_required so baudolo includes it in --images-no-stop-required. This prevents post-backup unhealthy state and 502 errors observed after backup-triggered restart.
2026-02-19 21:07:18 +01:00
kevinveenbirkenbach 5bb3afbad9 Changed default distro to debian 2026-02-19 20:56:51 +01:00
kevinveenbirkenbach f7318feae5 feat(web-app-dashboard): switch dashboard deployment to ghcr.io/kevinveenbirkenbach/port-ui:1.0.0
- stop pulling/building from the port-ui repository
- run dashboard via fixed image tag
- mount generated config.yaml into /app/config.yaml (read-only)
2026-02-19 16:05:26 +01:00
kevinveenbirkenbach 1fb252fc7d refactor(inventories,roles): migrate util-* to bundle inventories and unify AUR handling
Migrates large parts of the legacy util-* role structure to inventory-driven
bundles and standardizes AUR installation via central system roles.

- Adds `web-svc-legal`, `web-svc-asset`, and `web-app-dashboard` to all server bundles.
- Removes `util-srv-corporate-identity` entirely.
- Introduces new workstation bundle inventories:
  `admin`, `admin-network`, `browser`, `design`, `dev-*`, `game-*`, `office`.
- Uses bundle variables `SYS_PACKAGES` and `SYS_AUR_PACKAGES` as the primary
  installation mechanism.
- Removes/replaces obsolete util-desk/util-dev roles where fully covered.
- Renames dev roles:
  `util-desk-dev-core` -> `dev-core`,
  `util-desk-dev-python` -> `dev-python`,
  `util-desk-dev-arduino` -> `dev-arduino`.
- Adds missing `application_id` vars for renamed roles.
- Removes the entire `util` section from `roles/categories.yml`.
- Replaces direct `kewlfft.aur.aur` calls in desktop/driver roles with
  a centralized wrapper role.
- Introduces new role `sys-aur-install` as AUR installation wrapper.
- Migrates `dev-yay` to `sys-aur` and adds `SYS_AUR_PACKAGES: []` default.
- Extends constructor stage:
  auto-load `sys-package` when `SYS_PACKAGES` is set,
  and `sys-aur` + `sys-aur-install` when `SYS_AUR_PACKAGES` is set.
- Cleans up stage loading:
  removes util-srv from `02_server.yml`,
  reduces workstation loading to `desk-roles.yml` + `drv-non-free`.
- Updates integration/unit tests for the new invokable and include behavior.
- Integration test now accepts static `include_tasks` references.
- Fixes recursion risk between `sys-aur` and `sys-aur-install` by setting
  `run_once_sys_aur` at the beginning of `sys-aur/tasks/01_core.yml`.

BREAKING CHANGE:
- `util-*` categories and bundle paths are no longer part of stage loading.
- Multiple `util-desk-*`, `util-dev-*`, and `util-srv-*` roles were removed.
- Deployment groups must be migrated to the new bundle/role naming.
2026-02-19 14:10:59 +01:00
kevinveenbirkenbach 0aef93f4c9 feat(sys-package): add inventory-driven system package role 2026-02-19 10:16:37 +01:00
kevinveenbirkenbach 827eba8beb Merge branch 'feature/store' of github.com:kevinveenbirkenbach/infinito-nexus into feature/store 2026-02-18 13:53:41 +01:00
kevinveenbirkenbach db121678db feat(openldap): add per-user password_update policy 2026-02-18 13:53:15 +01:00
kevinveenbirkenbach 0c13327e7a Release version 4.1.0 v4.1.0 2026-02-17 23:29:35 +01:00
kevinveenbirkenbach 89d2d16c89 Merge branch 'master' into feature/store 2026-02-17 21:23:07 +01:00
kevinveenbirkenbach bc75cd79d7 web-svc-simpleicons: parameterize Node image and host file paths
- Add image/version config for simpleicons service
- Use config-driven SIMPLEICONS_IMAGE and SIMPLEICONS_VERSION in Dockerfile
- Replace legacy simpleicons_host_* vars with SIMPLEICONS_HOST_* constants
- Introduce entity_name derived from application_id

https://chatgpt.com/share/e/6994cde7-18c0-8013-a17f-34d2d7c4ead4
2026-02-17 21:21:53 +01:00
kevinveenbirkenbach dc05daea17 fix(unit_name): resolve templated vars and version lookup fallback 2026-02-17 16:56:29 +01:00
kevinveenbirkenbach fd1c0254a5 refactor(sys-service, unit_name): switch to SOFTWARE_DOMAIN and add version-based unit pruning
- Change unit_name lookup plugin to use SOFTWARE_DOMAIN instead of SOFTWARE_NAME
  for versioned systemd unit generation
- Update unit tests to reflect SOFTWARE_DOMAIN requirement
- Introduce sys-service prune phase to remove old-version services and timers:
  - stop and disable outdated units
  - delete old unit files
  - trigger daemon-reload when necessary
- Reorder sys-service core flow: prune → lockdown → reset
- Rename and reindex task files for clearer execution order
- Update internal includes accordingly

https://chatgpt.com/share/e/69945873-c4b4-8013-98e3-eb7f7a879853
2026-02-17 13:00:38 +01:00