luke/ansible-roles/nostr/relayer, branch main Ansible roles for nth.io infrastructure https://src.nth.io/luke/ansible-roles/atom?h=main 2026-04-26T00:54:49+00:00 Build all roles from source with versioned artifacts 2026-04-26T00:54:49+00:00 Luke Hoersten luke@hoersten.org 2026-04-26T00:54:49+00:00 urn:sha1:6a8cb5f10557733f1521035d57a191b12832d634 - Add pleroma/build role to compile from source (OTP binaries no longer published) - Install Elixir 1.18.3 manually on Ubuntu Noble (ships 1.14, needs 1.15+) - Standardize all build roles to produce versioned .tar.gz artifacts - Add version defaults to all server roles (bin, dendrite, nostr/relayer) - Switch server roles from get_url to unarchive for .tar.gz installs - Add build_srv_dir variable to all build roles - Deploy pleroma styles.json so custom FE themes appear in picker - Fix pleroma OTP install: version check, root ownership, auto-cleanup old releases - Fix pleroma config: log level :warn -> :warning, remove availableStyles - Add wait_for grafana readiness before dashboard install - Set minecraft ops changed_when: false Add no_log to nostr relayer DB schema task 2026-04-06T02:24:22+00:00 Luke Hoersten luke@hoersten.org 2026-04-06T02:24:22+00:00 urn:sha1:121f23c67f10a0ea3e8bff476f46fdec13112696 Harden role security: file permissions, service binding, no_log, strict defaults 2026-04-06T02:19:55+00:00 Luke Hoersten luke@hoersten.org 2026-04-06T02:19:55+00:00 urn:sha1:06b69bd8def0aae07d3fb565d19193be1a8dfe20 - Add no_log: true to tasks that handle passwords/secrets - Tighten config file permissions (0644 -> 0600/0640 where appropriate) - Bind pleroma to 127.0.0.1 instead of 0.0.0.0 - Tighten ergo unix socket mode 0777 -> 0770 - Remove weak defaults; roles now fail explicitly if required vars not set Cleaned up always-changed status tasks. 2024-07-29T17:41:57+00:00 Luke Hoersten luke@hoersten.org 2024-07-29T17:41:57+00:00 urn:sha1:874be10f6646a66cd0e994963b2746ad48f5b73e Tons of updates to fix migration to new server. 2024-02-05T02:27:19+00:00 Luke Hoersten luke@hoersten.org 2024-02-05T02:27:19+00:00 urn:sha1:04edbf561c44e28753cbbaa3870b23b220cc644c Split out nostr install and build roles. 2023-07-22T20:50:36+00:00 Luke Hoersten luke@hoersten.org 2023-07-22T20:50:36+00:00 urn:sha1:58d6bb46618d2cfef3a2f381e46b5eba193d7270