kevinveenbirkenbach/computer-playbook
1
0
Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2025-12-14 13:05:25 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
57ec936d308b5e49d71f3567cac69c9459cbaf54
computer-playbook/roles
History
Kevin Veen-Birkenbach f143ce258c dev-nix: migrate to official installer with dynamic SHA256 verification, 
split non-Arch logic, add template-based nix.conf, and integrate into pkgmgr

- Replace local installer mechanism with official upstream URLs:
  https://releases.nixos.org/nix/nix-<version>/install
  and dynamically fetch associated SHA256 checksum
- Add version-based URL construction via new defaults variables
- Implement clean OS-branching:
  * Arch-based systems: install Nix via pacman
  * Non-Arch systems: download installer + verify SHA256 + run in daemon mode
- Extract non-Arch installation logic into dedicated task file
  (02_non_arch_installer.yml)
- Introduce template-based /etc/nix/nix.conf with build-users-group
  and optional experimental-features block
- Remove obsolete install.yml
- Update pkgmgr dev stack to include dev-nix and adjust update command
- Add TODO.md for future security improvements

https://chatgpt.com/share/6939bbfe-5cb0-800f-8ea8-95628dc911f5
https://chatgpt.com/share/6939bbd9-4840-800f-b9d2-b2510ea0f105
2025-12-10 19:29:04 +01:00
..
desk-bluray-player
…
desk-chromium
Refactor: Migrate deprecated Ansible facts to ansible_facts[] syntax
2025-12-02 23:09:46 +01:00
desk-copyq
Refactor: Migrate deprecated Ansible facts to ansible_facts[] syntax
2025-12-02 23:09:46 +01:00
desk-docker
…
desk-firefox
…
desk-git
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
desk-gnome
…
desk-gnome-caffeine
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
desk-gnome-extensions
…
desk-gnome-terminal
…
desk-gnucash
…
desk-jrnl
…
desk-keepassxc
…
desk-libreoffice
…
desk-micro
…
desk-neovim
…
desk-nextcloud
Refactor defaults generation, credential creation, and inventory management
2025-12-02 11:54:55 +01:00
desk-obs
…
desk-qbittorrent
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
desk-retroarch
…
desk-spotify
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
desk-ssh
Implemented shallow cloning for git
2025-12-04 23:50:24 +01:00
desk-torbrowser
…
desk-virtualbox
…
desk-zoom
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
dev-base-devel
…
dev-fakeroot
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
dev-gcc
…
dev-git
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
dev-java
…
dev-locales
…
dev-make
…
dev-nix
dev-nix: migrate to official installer with dynamic SHA256 verification,
2025-12-10 19:29:04 +01:00
dev-nodejs
…
dev-npm
…
dev-python-pip
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
dev-python-yaml
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
dev-shell
Refactor task includes and update variable handling for Ansible 2.20 migration
2025-12-03 11:02:34 +01:00
dev-yay
Implemented shallow cloning for git
2025-12-04 23:50:24 +01:00
docker-compose
Refactor webserver proxy variables and fix BigBlueButton deployment behavior
2025-12-04 18:31:09 +01:00
docker-container
Fix CI Docker-in-Docker deployment, introduce vfs storage-driver, add inner dockerd bootstrap, enable portable json-file logging when running inside a container, and update workflow triggers for multi-branch testing.
2025-12-04 02:24:10 +01:00
drv-epson-multiprinter
Changed from pacman to yay install
2025-12-03 13:27:30 +01:00
drv-intel
…
drv-lid-switch
Optimized ignoring of LID driver
2025-12-03 20:07:02 +01:00
drv-non-free
Add container-aware execution logic and CI stability fixes
2025-12-03 22:00:18 +01:00
gen-hunspell
…
pkgmgr
dev-nix: migrate to official installer with dynamic SHA256 verification,
2025-12-10 19:29:04 +01:00
pkgmgr-install
Fixed pkgmgr ssh pull bug - https://chatgpt.com/share/6939a5ae-b7a0-800f-95ff-2f4107973ca7
2025-12-10 17:55:01 +01:00
svc-ai-ollama
Optimized spacing
2025-12-04 10:33:08 +01:00
svc-bkp-loc-2-usb
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
svc-bkp-rmt-2-loc
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
svc-db-mariadb
Solved bug in MariaDB which appeared when just MariaDB got deployed
2025-12-04 20:10:04 +01:00
svc-db-memcached
…
svc-db-openldap
Refactor task includes and update variable handling for Ansible 2.20 migration
2025-12-03 11:02:34 +01:00
svc-db-postgres
Added vars wrapper for RDMBS
2025-12-04 10:58:05 +01:00
svc-db-redis
Fix CI Docker-in-Docker deployment, introduce vfs storage-driver, add inner dockerd bootstrap, enable portable json-file logging when running inside a container, and update workflow triggers for multi-branch testing.
2025-12-04 02:24:10 +01:00
svc-net-wireguard-core
Add container-aware execution logic and CI stability fixes
2025-12-03 22:00:18 +01:00
svc-net-wireguard-firewalled
…
svc-net-wireguard-plain
…
svc-opt-keyboard-color
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
svc-opt-ssd-hdd
Improve Pixelfed resource configuration and translate waiting message
2025-11-28 09:26:48 +01:00
svc-opt-swapfile
Add container-aware execution logic and CI stability fixes
2025-12-03 22:00:18 +01:00
svc-prx-openresty
Added utils/load_handlers.yml required due to update 2.18 -> 2.20
2025-12-04 11:04:00 +01:00
sys-bkp-provider
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-bkp-provider-user
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-cli
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-ctl-alm-compose
Make mail stack optional for Infinito.Nexus deployments without Mailu (e.g. Raspberry Pi / robots)
2025-12-04 21:24:53 +01:00
sys-ctl-alm-email
Make mail stack optional for Infinito.Nexus deployments without Mailu (e.g. Raspberry Pi / robots)
2025-12-04 21:24:53 +01:00
sys-ctl-alm-telegram
Optimized TELEGRAM_BOT implementation
2025-12-04 10:35:45 +01:00
sys-ctl-bkp-docker-2-loc
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-ctl-cln-anon-volumes
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-ctl-cln-bkps
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-ctl-cln-certs
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-ctl-cln-disc-space
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-ctl-cln-docker
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-ctl-cln-faild-bkps
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-ctl-hlth-btrfs
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-ctl-hlth-csp
Removed deprecated function
2025-12-04 04:15:38 +01:00
sys-ctl-hlth-disc-space
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-ctl-hlth-docker-container
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-ctl-hlth-docker-volumes
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-ctl-hlth-journalctl
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-ctl-hlth-msmtp
Make mail stack optional for Infinito.Nexus deployments without Mailu (e.g. Raspberry Pi / robots)
2025-12-04 21:24:53 +01:00
sys-ctl-hlth-webserver
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-ctl-mtn-cert-deploy
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-ctl-mtn-cert-renew
Add container-aware execution logic and CI stability fixes
2025-12-03 22:00:18 +01:00
sys-ctl-rpr-btrfs-balancer
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-ctl-rpr-docker-hard
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-ctl-rpr-docker-soft
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-daemon
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-dns-cloudflare-records
…
sys-dns-hetzner-rdns
Optimized variable conditions for ansible update 2.18 -> 2.20
2025-12-04 12:24:01 +01:00
sys-dns-wildcards
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-front-inj-all
Refactor webserver proxy variables and fix BigBlueButton deployment behavior
2025-12-04 18:31:09 +01:00
sys-front-inj-css
Optimized variable conditions for ansible update 2.18 -> 2.20
2025-12-04 12:24:01 +01:00
sys-front-inj-desktop
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-front-inj-javascript
Implemented loading of javascript.js und javascript.js.j2 files
2025-11-27 21:50:39 +01:00
sys-front-inj-logout
Improve logout patch debug and tighten detection
2025-11-29 18:53:03 +01:00
sys-front-inj-matomo
Optimized handler loading. Requirerd due to 2.18->2.20 update
2025-12-04 00:53:27 +01:00
sys-hostname
…
sys-lock
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-postfix
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-service
Optimized handler loading. Requirerd due to 2.18->2.20 update
2025-12-04 00:53:27 +01:00
sys-stk-back-stateful
General optimations
2025-12-04 04:17:24 +01:00
sys-stk-back-stateless
…
sys-stk-front-base
Restructured Handler Logic
2025-12-04 02:37:12 +01:00
sys-stk-front-proxy
Refactor webserver proxy variables and fix BigBlueButton deployment behavior
2025-12-04 18:31:09 +01:00
sys-stk-full-stateful
Restructured Handler Logic
2025-12-04 02:37:12 +01:00
sys-stk-full-stateless
…
sys-stk-semi-stateless
…
sys-sudo
…
sys-svc-cdn
Restructured Handler Logic
2025-12-04 02:37:12 +01:00
sys-svc-certbot
Added DNS_PROVIDER condition
2025-12-04 11:00:03 +01:00
sys-svc-certs
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-svc-cln-domains
Restructured Handler Logic
2025-12-04 02:37:12 +01:00
sys-svc-dns
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-svc-docker
General optimations
2025-12-04 04:17:24 +01:00
sys-svc-journalctl
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-svc-letsencrypt
Implemented SSL_ENABLED
2025-12-04 10:48:45 +01:00
sys-svc-mail
Make mail stack optional for Infinito.Nexus deployments without Mailu (e.g. Raspberry Pi / robots)
2025-12-04 21:24:53 +01:00
sys-svc-mail-msmtp
Make mail stack optional for Infinito.Nexus deployments without Mailu (e.g. Raspberry Pi / robots)
2025-12-04 21:24:53 +01:00
sys-svc-mail-smtp
Removed comment
2025-12-04 21:45:54 +01:00
sys-svc-proxy
Refactor webserver proxy variables and fix BigBlueButton deployment behavior
2025-12-04 18:31:09 +01:00
sys-svc-rdbms
Added utils/load_handlers.yml required due to update 2.18 -> 2.20
2025-12-04 11:04:00 +01:00
sys-svc-sshd
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-svc-webserver-core
Added utils/load_handlers.yml required due to update 2.18 -> 2.20
2025-12-04 11:04:00 +01:00
sys-svc-webserver-https
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-timer
Add container-aware execution logic and CI stability fixes
2025-12-03 22:00:18 +01:00
sys-timer-cln-bkps
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
sys-util-csp-cert
Implemented SSL_ENABLED
2025-12-04 10:48:45 +01:00
update-apt
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
update-compose
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
update-pacman
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
user
Implement reserved username handling for users, LDAP and Keycloak
2025-11-29 17:40:45 +01:00
user-administrator
Refactor task includes and update variable handling for Ansible 2.20 migration
2025-12-03 11:02:34 +01:00
user-root
Refactor task includes and update variable handling for Ansible 2.20 migration
2025-12-03 11:02:34 +01:00
util-desk-browser
…
util-desk-design
Refactor task includes and update variable handling for Ansible 2.20 migration
2025-12-03 11:02:34 +01:00
util-desk-dev-arduino
…
util-desk-dev-core
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
util-desk-dev-java
…
util-desk-dev-php
…
util-desk-dev-python
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
util-desk-dev-shell
…
util-desk-game-compose
…
util-desk-game-os
…
util-desk-game-windows
…
util-desk-office
…
util-dev-admin
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
util-dev-admin-network
…
util-srv-corporate-identity
…
web-app-akaunting
Optimized docker_git_repository_ variables
2025-12-03 14:23:53 +01:00
web-app-baserow
…
web-app-bigbluebutton
Solved CLI Bug in BigBlueButton
2025-12-04 21:29:21 +01:00
web-app-bluesky
Removed false :
2025-12-05 16:16:08 +01:00
web-app-bookwyrm
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
web-app-bridgy-fed
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
web-app-chess
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
web-app-confluence
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
web-app-desktop
Refactor webserver proxy variables and fix BigBlueButton deployment behavior
2025-12-04 18:31:09 +01:00
web-app-discourse
Implemented shallow cloning for git
2025-12-04 23:50:24 +01:00
web-app-elk
Cleaned up elk role - (not implemented yet, just draft)
2025-12-04 15:12:26 +01:00
web-app-espocrm
Refactor webserver proxy variables and fix BigBlueButton deployment behavior
2025-12-04 18:31:09 +01:00
web-app-flowise
Further app load optiomation due to 2.18->2.20 update
2025-12-03 23:05:35 +01:00
web-app-friendica
Refactor task includes and update variable handling for Ansible 2.20 migration
2025-12-03 11:02:34 +01:00
web-app-funkwhale
Refactor webserver proxy variables and fix BigBlueButton deployment behavior
2025-12-04 18:31:09 +01:00
web-app-fusiondirectory
…
web-app-gitea
Optimized variable conditions for ansible update 2.18 -> 2.20
2025-12-04 12:24:01 +01:00
web-app-gitlab
…
web-app-jenkins
Fix CI Docker-in-Docker deployment, introduce vfs storage-driver, add inner dockerd bootstrap, enable portable json-file logging when running inside a container, and update workflow triggers for multi-branch testing.
2025-12-04 02:24:10 +01:00
web-app-jira
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
web-app-joomla
Refactor webserver proxy variables and fix BigBlueButton deployment behavior
2025-12-04 18:31:09 +01:00
web-app-keycloak
Restructured Handler Logic
2025-12-04 02:37:12 +01:00
web-app-lam
Added matomo to roles and optimized features configuration
2025-11-27 14:46:04 +01:00
web-app-listmonk
Refactor webserver proxy variables and fix BigBlueButton deployment behavior
2025-12-04 18:31:09 +01:00
web-app-littlejs
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
web-app-magento
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
web-app-mailu
Refactor webserver proxy variables and fix BigBlueButton deployment behavior
2025-12-04 18:31:09 +01:00
web-app-mastodon
Refactor webserver proxy variables and fix BigBlueButton deployment behavior
2025-12-04 18:31:09 +01:00
web-app-matomo
Optimized ESPOCRM and Moodle volumes
2025-12-04 14:10:53 +01:00
web-app-matrix
Refactor webserver proxy variables and fix BigBlueButton deployment behavior
2025-12-04 18:31:09 +01:00
web-app-mediawiki
Added matomo to roles and optimized features configuration
2025-11-27 14:46:04 +01:00
web-app-mig
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
web-app-mini-qr
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
web-app-minio
Optimized docker_git_repository_ variables
2025-12-03 14:23:53 +01:00
web-app-mobilizon
Refactor task includes and update variable handling for Ansible 2.20 migration
2025-12-03 11:02:34 +01:00
web-app-moodle
web-app-moodle: fix Bitnami Moodle paths and OIDC plugin directory (see ChatGPT conversation: https://chatgpt.com/share/6931eed0-88a8-800f-b6be-c048bba7374e)
2025-12-04 21:28:25 +01:00
web-app-navigator
…
web-app-nextcloud
Refactor webserver proxy variables and fix BigBlueButton deployment behavior
2025-12-04 18:31:09 +01:00
web-app-oauth2-proxy
Refactor defaults generation, credential creation, and inventory management
2025-12-02 11:54:55 +01:00
web-app-openproject
Refactor webserver proxy variables and fix BigBlueButton deployment behavior
2025-12-04 18:31:09 +01:00
web-app-openwebui
Further app load optiomation due to 2.18->2.20 update
2025-12-03 23:05:35 +01:00
web-app-peertube
Refactor webserver proxy variables and fix BigBlueButton deployment behavior
2025-12-04 18:31:09 +01:00
web-app-pgadmin
Solved OAuth2 Proxy host wrong identifier bug
2025-11-27 23:50:26 +01:00
web-app-phpldapadmin
Refactor defaults generation, credential creation, and inventory management
2025-12-02 11:54:55 +01:00
web-app-phpmyadmin
Refactor defaults generation, credential creation, and inventory management
2025-12-02 11:54:55 +01:00
web-app-pixelfed
Refactor webserver proxy variables and fix BigBlueButton deployment behavior
2025-12-04 18:31:09 +01:00
web-app-postmarks
…
web-app-pretix
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
web-app-roulette-wheel
Optimized docker_git_repository_ variables
2025-12-03 14:23:53 +01:00
web-app-shopware
Refactor task includes and update variable handling for Ansible 2.20 migration
2025-12-03 11:02:34 +01:00
web-app-snipe-it
Refactor task includes and update variable handling for Ansible 2.20 migration
2025-12-03 11:02:34 +01:00
web-app-socialhome
…
web-app-sphinx
Added matomo to roles and optimized features configuration
2025-11-27 14:46:04 +01:00
web-app-suitecrm
Refactor webserver proxy variables and fix BigBlueButton deployment behavior
2025-12-04 18:31:09 +01:00
web-app-syncope
Refactor webserver proxy variables and fix BigBlueButton deployment behavior
2025-12-04 18:31:09 +01:00
web-app-taiga
Optimized docker_git_repository_ variables
2025-12-03 14:23:53 +01:00
web-app-wordpress
Make mail stack optional for Infinito.Nexus deployments without Mailu (e.g. Raspberry Pi / robots)
2025-12-04 21:24:53 +01:00
web-app-xwiki
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
web-app-yourls
Refactor webserver proxy variables and fix BigBlueButton deployment behavior
2025-12-04 18:31:09 +01:00
web-opt-rdr-domains
Removed false :
2025-12-05 16:16:08 +01:00
web-opt-rdr-www
Further app load optiomation due to 2.18->2.20 update
2025-12-03 23:05:35 +01:00
web-svc-asset
Added matomo to roles and optimized features configuration
2025-11-27 14:46:04 +01:00
web-svc-cdn
Refactor webserver proxy variables and fix BigBlueButton deployment behavior
2025-12-04 18:31:09 +01:00
web-svc-collabora
Refactor webserver proxy variables and fix BigBlueButton deployment behavior
2025-12-04 18:31:09 +01:00
web-svc-coturn
Refactor webserver proxy variables and fix BigBlueButton deployment behavior
2025-12-04 18:31:09 +01:00
web-svc-file
Add container-aware execution logic and CI stability fixes
2025-12-03 22:00:18 +01:00
web-svc-html
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
web-svc-legal
…
web-svc-libretranslate
Removed redundancies and simplified run_once flag
2025-12-03 18:12:09 +01:00
web-svc-logout
Fix CORS handling by adding 'always' to Access-Control-Allow-Origin
2025-12-05 08:14:51 +01:00
web-svc-onlyoffice
Added another default code
2025-12-05 16:16:27 +01:00
web-svc-simpleicons
Refactor webserver proxy variables and fix BigBlueButton deployment behavior
2025-12-04 18:31:09 +01:00
web-svc-xmpp
…
__init__.py
…
.gitignore
…
categories.yml
…
glosar.rst
…
index.rst
…