mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-12-02 15:39:57 +00:00
Kevin Veen-Birkenbach
e09f561f0b
- Replace legacy utils/run_once.yml with the new helpers utils/once_flag.yml and utils/once_finalize.yml - Introduce utils/compose_up.yml to ensure docker-compose stacks are up and to flush handlers safely without coupling to run-once flags - Migrate all affected roles (desk-*, dev-*, sys-ctl-*, sys-svc-*, web-app-*, web-svc-*, util-*) to the new run-once helpers - Rework sys-svc-msmtp to auto-load Mailu once per deploy, check reachability, and reuse the running stack instead of requiring multiple playbook passes - Adjust web-app-mailu to integrate cert deployment, handler flushing, and run-once handling so Mailu is fully initialized in a single deploy - Improve Matomo, CDN, logout and CSP/health-check related roles to cooperate with the new compose_up / once_* pattern - Simplify alarm/backup/timer/service orchestration (sys-ctl-alm-*, sys-bkp-provider, sys-timer-cln-bkps, etc.) by moving run-once logic into dedicated 01_core.yml files - Update integration tests so utils/once_flag.yml and utils/once_finalize.yml are recognised as valid run-once providers, keeping the global run_once_* guarantees consistent - Align frontend injection and service dependencies so Mastodon- and Mailu-related services can be brought up coherently within a single deployment cycle rather than several iterations
sys-svc-dns
Bootstrap and maintain DNS prerequisites for your web stack on Cloudflare.
This role validates credentials and (by default) ensures:
- A (and optional AAAA) records on the apex (
@) for all base SLD domains - Wildcard A/AAAA records (
*.parent) for parent hosts viasys-dns-wildcards - (Optional) CAA records for Let’s Encrypt (kept as a commented block you can re-enable)
Runs once per play and is safe to include in stacks that roll out many domains.
What it does
- Validate
CLOUDFLARE_API_TOKENis present (early fail if missing). - Ensure apex A/AAAA exist for every base SLD in
SYS_SVC_DNS_BASE_DOMAINS:- Writes
@ A→networks.internet.ip4 - Writes
@ AAAA→networks.internet.ip6(only if global and present)
- Writes
- (Optional) CAA records for all base SLDs (commented in the tasks; enable if you want CAA managed here).
- Ensure wildcard parent DNS exists (
*.parentderived from children):- Delegates to
sys-dns-wildcards - Creates
A(andAAAAif enabled) wildcard records on the Cloudflare zone, optionally proxied.
- Delegates to
Parent hosts example:
c.wiki.example.com→ parentwiki.example.com(plusexample.comapex)