6 Commits

Author	SHA1	Message	Date
Kevin Veen-Birkenbach	e09f561f0b	Refactor run-once orchestration and bootstrap Mailu/Mastodon in a single deploy ... - Replace legacy utils/run_once.yml with the new helpers utils/once_flag.yml and utils/once_finalize.yml - Introduce utils/compose_up.yml to ensure docker-compose stacks are up and to flush handlers safely without coupling to run-once flags - Migrate all affected roles (desk-*, dev-*, sys-ctl-*, sys-svc-*, web-app-*, web-svc-*, util-*) to the new run-once helpers - Rework sys-svc-msmtp to auto-load Mailu once per deploy, check reachability, and reuse the running stack instead of requiring multiple playbook passes - Adjust web-app-mailu to integrate cert deployment, handler flushing, and run-once handling so Mailu is fully initialized in a single deploy - Improve Matomo, CDN, logout and CSP/health-check related roles to cooperate with the new compose_up / once_* pattern - Simplify alarm/backup/timer/service orchestration (sys-ctl-alm-*, sys-bkp-provider, sys-timer-cln-bkps, etc.) by moving run-once logic into dedicated 01_core.yml files - Update integration tests so utils/once_flag.yml and utils/once_finalize.yml are recognised as valid run-once providers, keeping the global run_once_* guarantees consistent - Align frontend injection and service dependencies so Mastodon- and Mailu-related services can be brought up coherently within a single deployment cycle rather than several iterations	2025-12-01 13:30:50 +01:00
Kevin Veen-Birkenbach	07c8e036ec	Deactivated change when because its anyhow not trackable	2025-10-15 10:27:12 +02:00
Kevin Veen-Birkenbach	05d7ddc491	svc-bkp-rmt-2-loc: migrate pull script to Python + add unit tests; lock down backup-provider ACLs ... - Replace Bash pull-specific-host.sh with Python pull-specific-host.py (argparse, identical logic) - Update role vars and runner template to call python script - Add __init__.py files for test discovery/imports - Add unittest: tests/unit/roles/svc-bkp-rmt-2-loc/files/test_pull_specific_host.py (mocks subprocess/os/time; covers success, no types, find-fail, retry-exhaustion) - Backup provider SSH wrapper: align allowed ls path (backup-docker-to-local) - Split user role tasks: 01_core (sudoers), 02_permissions_ssh (SSH keys + wrapper), 03_permissions_folders (ownership + default ACLs + depth-limited chown/chmod) - Ensure default ACLs grant rwx to 'backup' and none to group/other; keep sudo rsync working Ref: ChatGPT discussion (2025-10-14) — https://chatgpt.com/share/68ee920a-9b98-800f-8806-ddcfe0255149	2025-10-14 20:10:49 +02:00
Kevin Veen-Birkenbach	1ba50397db	Optimized performance by moving multiple similar when includes to own tasks file	2025-08-11 13:15:31 +02:00
Kevin Veen-Birkenbach	c7b25ed093	Normalized run_once_, made openresty handlers without when aviable and forced flush in run_once when blocks to avoid handlers with when conditions	2025-08-08 15:32:26 +02:00
Kevin Veen-Birkenbach	168c5c0da6	Another big round of refactoring and cleaning...	2025-07-11 17:55:26 +02:00