Commit Graph

44 Commits

Author SHA1 Message Date
427ff8aa1d life-church: add thinkcenter-rustdesk (thinkcenter-only, error-checked) 2026-09-03 14:42:31 +00:00
3454a2777d life-church: add thinkcenter-helvum (thinkcenter-only, error-checked) 2026-09-03 14:42:31 +00:00
3c6e5e1048 life-church: add thinkcenter-reaper media playbook (thinkcenter-only, error-checked) 2026-09-03 14:13:20 +00:00
539bb0be50 life-church: add thinkcenter-kdenlive media playbook (thinkcenter-only, error-checked) 2026-09-03 14:13:19 +00:00
4d0346b970 life-church: add thinkcenter-obs media playbook (thinkcenter-only, error-checked) 2026-09-03 14:13:19 +00:00
369298bc80 thinkcenter-firmware: add apt retry/until hardening 2026-09-03 13:40:09 +00:00
8c024b402a thinkcenter-xrdp: add apt retry/until hardening 2026-09-03 13:40:08 +00:00
eb1a6bc818 thinkcenter-flatpak: add apt retry/until hardening 2026-09-03 13:40:08 +00:00
4d10be47ff thinkcenter-update: add apt retry/until hardening 2026-09-03 13:40:07 +00:00
6fa9505f5a thinkcenter-audio: harden — linger-first + wait runtime dir + rescue fallback for user units, apt retries, user/uid asserts 2026-09-03 13:37:59 +00:00
aca4801744 life-church: add thinkcenter-firmware (fwupd LVFS upgrade + guarded reboot) 2026-09-03 13:22:40 +00:00
314e002cc3 requirements: pin collection versions (avoids ansible-galaxy KeyError:results on unpinned resolve) 2026-09-03 13:18:06 +00:00
bbaf1cb184 thinkcenter-xrdp: use modern polkit rules.d JS rule (localauthority path gone on polkit 124) 2026-09-03 13:09:20 +00:00
dbef6bc979 life-church: add thinkcenter-xrdp (install/enable/verify xrdp + ssl-cert fix + Cinnamon session) 2026-09-03 12:55:22 +00:00
0139c376b5 life-church: add thinkcenter-audio (unified PipeWire/JACK/ALSA/Pulse + qpwgraph) 2026-09-03 12:45:18 +00:00
0f8cd0f223 requirements: add community.general (flatpak modules) 2026-09-03 12:17:24 +00:00
45e23be8c6 life-church: add playbooks/thinkcenter-flatpak.yml (thinkcenter-only) 2026-09-03 12:17:24 +00:00
bc5bc7366d life-church: add playbooks/thinkcenter-update.yml (thinkcenter-only) 2026-09-03 12:17:24 +00:00
6f346b8812 life-church: add lc-hosts inventory + lc-precheck playbook (facts + read-only pre-checks) 2026-09-03 12:06:30 +00:00
8610649a3a life-church: add lc-hosts inventory + lc-precheck playbook (facts + read-only pre-checks) 2026-09-03 12:06:30 +00:00
f2310d72db life-church: scaffold playbooks/test-connection.yml (Semaphore project 2) 2026-09-03 11:40:51 +00:00
33bbdc5fe2 life-church: scaffold inventory/hosts.yml (Semaphore project 2) 2026-09-03 11:40:50 +00:00
75a693e4ad life-church: scaffold README.md (Semaphore project 2) 2026-09-03 11:40:50 +00:00
6df0813628 backup-homarr: rootless rclone install + delete older R2 versions 2026-08-29 11:34:54 +00:00
734935708a Add backup-homarr.yml — weekly snapshot to Cloudflare R2 2026-08-29 11:24:38 +00:00
8fb2824158 Add update-homarr.yml — lightweight routine updater (pull+recreate, preserves compose) 2026-08-29 10:50:57 +00:00
97bd02b548 Add reference web-app prod deploy playbook (version arg + rollback) 2026-08-27 20:47:57 +00:00
Sam
261b374605 bootstrap: fix [5b] docker-group add — use stat check (old when: silently skipped) 2026-08-26 15:37:05 -04:00
Sam
ab113d4174 deploy-homarr: rootless — drop become, reset_connection for docker group, all creds from Infisical 2026-08-26 15:33:21 -04:00
Sam
cabb9c1db8 deploy-homarr: connect as ansible user via Infisical deploy key (not root) 2026-08-26 15:15:30 -04:00
Sam
1bde81a995 bootstrap: add ansible user to docker group when docker present 2026-08-26 15:08:34 -04:00
Sam
03cbaaef3a bootstrap: connect as root via deploy SSH key (racknerd uses PermitRootLogin without-password) 2026-08-26 14:53:19 -04:00
Sam
26cce822c0 bootstrap: drop fragile pre-reachability task (inventory_file undefined in Semaphore); Play2 tests reachability naturally 2026-08-26 14:47:54 -04:00
Sam
ed661af1db bootstrap: set hostname racknerd1, ansible-key safety check, harden root login (prohibit-password), /var/log/bootstrap log+sha256 2026-08-26 14:28:27 -04:00
Sam
bdd915dcfd test-connection v4: clean vars lookup, suppress deprecation noise 2026-08-26 12:21:17 -04:00
Sam
081700abee test-connection v3: resolve creds via set_fact (no undefined-var abort) 2026-08-26 12:16:01 -04:00
Sam
261edceb8c test-connection: accept Infisical creds via env OR ansible var + add diagnostic 2026-08-26 12:13:39 -04:00
Sam
831d6c0a17 Fix ansible.cfg: use builtin default callback + result_format=yaml (community.general.yaml removed) 2026-08-26 12:08:25 -04:00
Sam
c993f5eaf1 Add test-connection.yml diagnostic (repo file list + Infisical auth check) 2026-08-26 12:02:52 -04:00
Sam
4e76fe0362 Add TEST.md to verify Semaphore repo pull 2026-08-26 12:01:21 -04:00
Sam
36215b6c51 Add Infisical precheck (fail-fast) to bootstrap + homarr; add ansible.posix + infisical.vault reqs 2026-08-26 10:42:29 -04:00
Sam
998e0cbad5 Add bootstrap playbook + Homarr deploy (ansible user, Infisical secrets) 2026-08-26 10:29:44 -04:00
Sam
4c337f6d08 Scaffold Ansible deployment structure + Homarr playbook 2026-08-26 08:55:32 -04:00
3ac4720dd1 Initial commit 2026-08-26 12:48:03 +00:00