luke/ansible-roles/soju, branch main Ansible roles for nth.io infrastructure https://src.nth.io/luke/ansible-roles/atom?h=main 2026-08-01T14:53:44Z soju: pass passwords via stdin, restart after sojudb writes 2026-08-01T14:53:44Z Luke Hoersten luke@hoersten.org 2026-08-01T14:53:44Z urn:sha1:3bf3b8424de4ccabd0a97faa6d6a99b1ffb558f8 dash echo mangles backslash escapes, and soju authenticates against its in-memory copy so sojudb changes need a restart to take effect. soju: gate the admin password reset behind soju_reset_password 2026-07-31T19:31:51Z Luke Hoersten luke@hoersten.org 2026-07-31T19:31:51Z urn:sha1:a9a87f70f787fbc0d47d7138996e31294f172bea The unconditional change-password re-keyed the account on every run, clobbering any password changed in-band and locking out clients. relayer, soju: order services after postgresql at boot 2026-07-30T23:19:08Z Luke Hoersten luke@hoersten.org 2026-07-30T23:19:08Z urn:sha1:6f573b9d12e6fa2f6a7dbebb41ccfbbd966c82e7 relayer had Requires= without After=, which does not order startup; soju's packaged unit has no postgres ordering at all, so both raced the postgres socket at boot and stayed failed. Adds After= to the relayer unit and a systemd drop-in for soju. Add re-key support for soju and postgresql 2026-04-06T01:15:02Z Luke Hoersten luke@hoersten.org 2026-04-06T01:15:02Z urn:sha1:0b402a7a0a773dfa40e5549235941cd1217617d3 - soju: add change-password task so admin password updates on every playbook run via sojudb change-password - postgresql: remove superuser password task — postgres uses peer auth (Unix socket), no password needed or desired Removed sojuctl ansible commands. configure via client. 2026-03-29T01:09:33Z Luke Hoersten luke@hoersten.org 2026-03-29T01:09:33Z urn:sha1:55e55db9154e80aec134eef17d9d883d0213d4c4 Added soju role. 2026-03-28T18:42:08Z Luke Hoersten luke@hoersten.org 2026-03-28T18:42:08Z urn:sha1:45da5bca82200af63b0ee16479b267eb209386f3