luke/ansible-roles/pleroma/otp/tasks, branch main Ansible roles for nth.io infrastructure https://src.nth.io/luke/ansible-roles/atom?h=main 2026-04-26T01:04:39+00:00 Only run pleroma migrate on version change or first install 2026-04-26T01:04:39+00:00 Luke Hoersten luke@hoersten.org 2026-04-26T01:04:39+00:00 urn:sha1:ad2215ee82a87f11c23a7b50c7cc09de9bb7c802 Build all roles from source with versioned artifacts 2026-04-26T00:54:49+00:00 Luke Hoersten luke@hoersten.org 2026-04-26T00:54:49+00:00 urn:sha1:6a8cb5f10557733f1521035d57a191b12832d634 - Add pleroma/build role to compile from source (OTP binaries no longer published) - Install Elixir 1.18.3 manually on Ubuntu Noble (ships 1.14, needs 1.15+) - Standardize all build roles to produce versioned .tar.gz artifacts - Add version defaults to all server roles (bin, dendrite, nostr/relayer) - Switch server roles from get_url to unarchive for .tar.gz installs - Add build_srv_dir variable to all build roles - Deploy pleroma styles.json so custom FE themes appear in picker - Fix pleroma OTP install: version check, root ownership, auto-cleanup old releases - Fix pleroma config: log level :warn -> :warning, remove availableStyles - Add wait_for grafana readiness before dashboard install - Set minecraft ops changed_when: false Harden role security: file permissions, service binding, no_log, strict defaults 2026-04-06T02:19:55+00:00 Luke Hoersten luke@hoersten.org 2026-04-06T02:19:55+00:00 urn:sha1:06b69bd8def0aae07d3fb565d19193be1a8dfe20 - Add no_log: true to tasks that handle passwords/secrets - Tighten config file permissions (0644 -> 0600/0640 where appropriate) - Bind pleroma to 127.0.0.1 instead of 0.0.0.0 - Tighten ergo unix socket mode 0777 -> 0770 - Remove weak defaults; roles now fail explicitly if required vars not set Added soju role. 2026-03-28T18:42:08+00:00 Luke Hoersten luke@hoersten.org 2026-03-28T18:42:08+00:00 urn:sha1:45da5bca82200af63b0ee16479b267eb209386f3 Lots of updates and fixes for Ubuntu 24.04 Noble. 2024-10-07T20:25:37+00:00 Luke Hoersten luke@hoersten.org 2024-10-07T20:25:37+00:00 urn:sha1:27739609362360b2bf533f5a59106ce52c8d4b9f Cleaned up always-changed status tasks. 2024-07-29T17:41:57+00:00 Luke Hoersten luke@hoersten.org 2024-07-29T17:41:57+00:00 urn:sha1:874be10f6646a66cd0e994963b2746ad48f5b73e Tons of updates to fix migration to new server. 2024-02-05T02:27:19+00:00 Luke Hoersten luke@hoersten.org 2024-02-05T02:27:19+00:00 urn:sha1:04edbf561c44e28753cbbaa3870b23b220cc644c Changed pleroma logging to "warn" status. 2022-09-05T16:14:16+00:00 Luke Hoersten luke@hoersten.org 2022-09-05T16:14:16+00:00 urn:sha1:d39e7c2142f5920a4e4b135eb92a1e44a863dd6d Fixed typo 2021-07-25T03:12:04+00:00 Luke Hoersten luke@hoersten.org 2021-07-25T03:12:04+00:00 urn:sha1:33e25728398a9ccdd446197b1eb12e66c40a890e More fixes. 2021-07-24T23:15:24+00:00 Luke Hoersten luke@hoersten.org 2021-07-24T23:15:24+00:00 urn:sha1:db88719c9dad036143867533ad136a35e0fc9c1f