| Age | Commit message (Collapse) | Author | Files | Lines | |
|---|---|---|---|---|---|
| 12 hours | git/web: support cgit head-include for viewport metaHEADmain | Luke Hoersten | 2 | -1/+10 | |
| 2026-06-29 | certbot: scoped CF API token; gate prosody deploy hook on RENEWED_LINEAGE | Luke Hoersten | 2 | -4/+23 | |
| cred.conf.j2 now emits the single-line dns_cloudflare_api_token form (scoped Cloudflare API Token) instead of the legacy account-wide email + global API key. prosody.sh.j2 deploy hook now no-ops unless $RENEWED_LINEAGE matches the prosody vhost, so unrelated lineage renewals (haskell.social, etracapital.com) no longer report a spurious "Hook reported error code 1 / No certificate for host found". Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]> | |||||
| 2026-04-25 | Only run pleroma migrate on version change or first install | Luke Hoersten | 1 | -1/+6 | |
| 2026-04-25 | Build all roles from source with versioned artifacts | Luke Hoersten | 21 | -87/+177 | |
| - Add pleroma/build role to compile from source (OTP binaries no longer published) - Install Elixir 1.18.3 manually on Ubuntu Noble (ships 1.14, needs 1.15+) - Standardize all build roles to produce versioned .tar.gz artifacts - Add version defaults to all server roles (bin, dendrite, nostr/relayer) - Switch server roles from get_url to unarchive for .tar.gz installs - Add build_srv_dir variable to all build roles - Deploy pleroma styles.json so custom FE themes appear in picker - Fix pleroma OTP install: version check, root ownership, auto-cleanup old releases - Fix pleroma config: log level :warn -> :warning, remove availableStyles - Add wait_for grafana readiness before dashboard install - Set minecraft ops changed_when: false | |||||
| 2026-04-19 | Add cgit favicon deploy task | Luke Hoersten | 1 | -0/+5 | |
| 2026-04-19 | Make cgit source-filter path configurable, add deploy task | Luke Hoersten | 2 | -1/+7 | |
| 2026-04-18 | Remove nginx config tasks from git/web role, make owner discovery recursive | Luke Hoersten | 2 | -20/+3 | |
| 2026-04-18 | Make cgit theme configurable via variables, fix owner discovery | Luke Hoersten | 2 | -1/+45 | |
| Add cgit_css_src, cgit_header_src, cgit_footer_src, cgit_owner variables to optionally install a custom theme without hardcoding nth.io. Move scan-path after enable-git-config in cgitrc so gitweb.owner is read from repo git configs. Switch repo owner loop from find|while to glob for loop to avoid subshell issues. | |||||
| 2026-04-18 | Use checksum-based rsync for nginx root file sync | Luke Hoersten | 1 | -1/+4 | |
| 2026-04-18 | Add nginx permanent redirects for old Mercurial /file/tip/ paths to cgit /tree/ | Luke Hoersten | 1 | -0/+5 | |
| 2026-04-18 | Fix cgit duplicate repo name in URLs by setting virtual-root=/ | Luke Hoersten | 1 | -0/+1 | |
| 2026-04-18 | Rename unifi role to unifi-controller | Luke Hoersten | 4 | -5/+5 | |
| 2026-04-15 | Update all references from doorbell-viewport to unifi-protect-viewport | Luke Hoersten | 8 | -133/+133 | |
| 2026-04-15 | Rename doorbell-viewport role to unifi-protect-viewport | Luke Hoersten | 8 | -0/+0 | |
| 2026-04-15 | Replace real camera ID with placeholder in README | Luke Hoersten | 1 | -1/+1 | |
| 2026-04-14 | Minor daemon cleanup: drop inspect shim, module-level SSL ctx, rename ws_headers | Luke Hoersten | 1 | -14/+6 | |
| 2026-04-14 | Further simplify doorbell-viewport daemon | Luke Hoersten | 1 | -20/+13 | |
| - Flatten DisplayController: remove _set() middle layer - Inline on_ring() into _handle_protect_event (was a 2-line wrapper) - Collapse triggered flag in touch monitor to single boolean expression | |||||
| 2026-04-13 | Remove vcgencmd display backend, simplify DisplayController | Luke Hoersten | 5 | -127/+54 | |
| Always use sysfs backlight. vcgencmd resets DRM planes under fkms making it incompatible with the drm video output. Removes libraspberrypi-bin dependency and panel/vcgencmd dead code. | |||||
| 2026-04-13 | Remove warm prebuffer mode from doorbell-viewport | Luke Hoersten | 3 | -26/+5 | |
| Always start mpv on demand (cold start). The warm path was fragile on the RPi4 with fkms and added complexity without reliable benefit. | |||||
| 2026-04-12 | Switch doorbell-viewport to cold start, add backlight diagnostics | Luke Hoersten | 2 | -3/+4 | |
| - prebuffer_mode=cold: mpv starts on demand at ring/touch event - Add tty group to service user for DRM TTY access - Log backlight brightness changes for diagnostics - Remove --really-quiet suppression during debug (now restored) | |||||
| 2026-04-12 | Fix doorbell-viewport display and ring detection | Luke Hoersten | 2 | -3/+19 | |
| - Switch to sysfs backlight (drm backend) to avoid DRM plane reset on display power cycle caused by vcgencmd display_power - Add udev rule and sysfs permissions for rpi_backlight - Fix multi-packet WebSocket decoder (ring events were being dropped) - Fix mpv loop/cache flags (--loop=no, bounded --demuxer-max-bytes) - Remove hardware decode (caused SIGSEGV on RPi4 with fkms) | |||||
| 2026-04-12 | Fix doorbell-viewport bringup issues | Luke Hoersten | 3 | -46/+112 | |
| - Fix websockets headers kwarg via inspect (works across all versions) - Use full path /usr/bin/vcgencmd; add libraspberrypi-bin dependency - Fix UniFi Protect WS packet decoder to handle multiple concatenated packets per message (action+data in single frame) - Fetch lastUpdateId from bootstrap for WS URL - Switch fbcon disable from video=HDMI-A-1:D to fbcon=map:99 (fkms compat) - Default drm_connector to DSI-1 for fkms; drop hardcoded drm_mode - Add --no-audio and --hwdec=no to mpv; fix DRM mode-setting race on startup - Add PoE HAT fan control with configurable temp thresholds | |||||
| 2026-04-12 | Add .gitignore for Emacs backup files | Luke Hoersten | 1 | -0/+1 | |
| 2026-04-12 | Add nofail to block-device mount options | Luke Hoersten | 1 | -1/+1 | |
| Prevents emergency mode on boot if the external drive is absent. | |||||
| 2026-04-12 | Add doorbell-viewport role | Luke Hoersten | 8 | -0/+1222 | |
| RPi4 portrait touchscreen that shows a live UniFi Protect RTSP stream on doorbell ring or touch, with display fully off at idle. Supports warm prebuffer, vcgencmd/drm/panel display backends, evdev touch input, and configurable DRM device/connector/mode. | |||||
| 2026-04-05 | Add no_log to nostr relayer DB schema task | Luke Hoersten | 1 | -0/+1 | |
| 2026-04-05 | Harden role security: file permissions, service binding, no_log, strict defaults | Luke Hoersten | 11 | -8/+15 | |
| - Add no_log: true to tasks that handle passwords/secrets - Tighten config file permissions (0644 -> 0600/0640 where appropriate) - Bind pleroma to 127.0.0.1 instead of 0.0.0.0 - Tighten ergo unix socket mode 0777 -> 0770 - Remove weak defaults; roles now fail explicitly if required vars not set | |||||
| 2026-04-05 | Add re-key support for soju and postgresql | Luke Hoersten | 2 | -0/+8 | |
| - soju: add change-password task so admin password updates on every playbook run via sojudb change-password - postgresql: remove superuser password task — postgres uses peer auth (Unix socket), no password needed or desired | |||||
| 2026-04-05 | Parameterize cgitrc root-title and root-desc | Luke Hoersten | 1 | -2/+2 | |
| 2026-04-05 | Switch cgitrc to scan-path on git/public/ with remove-suffix | Luke Hoersten | 1 | -4/+1 | |
| 2026-04-05 | Add git/aws-s3-backup and git/web (cgit) roles | Luke Hoersten | 12 | -5/+174 | |
| 2026-03-28 | Removed sojuctl ansible commands. configure via client. | Luke Hoersten | 1 | -25/+0 | |
| 2026-03-28 | Added soju role. | Luke Hoersten | 11 | -4/+153 | |
| 2026-03-28 | Fixed anisble info lookup. | Luke Hoersten | 2 | -3/+3 | |
| 2026-03-27 | Fixed paper build URL and nginx logging off. | Luke Hoersten | 5 | -11/+12 | |
| 2026-03-25 | Update versions and fix nginx logging. | Luke Hoersten | 8 | -10/+15 | |
| 2026-03-23 | Changed reg for koreader to false. | Luke Hoersten | 1 | -1/+1 | |
| 2026-03-23 | More fxies | Luke Hoersten | 4 | -4/+13 | |
| 2026-03-23 | Fixed log rotation and log2ram sizing. | Luke Hoersten | 14 | -15/+81 | |
| 2026-03-23 | Added KOReader | Luke Hoersten | 3 | -8/+16 | |
| 2026-03-23 | Iniital KOReader sync role | Luke Hoersten | 4 | -1/+68 | |
| 2026-03-23 | Added missing become for transmission. | Luke Hoersten | 1 | -0/+1 | |
| 2025-09-17 | Fixed jellyfin. | Luke Hoersten | 3 | -4/+13 | |
| 2025-08-03 | Updated blockdevice mount properties. | Luke Hoersten | 1 | -0/+2 | |
| 2025-05-29 | More cert fixes. | Luke Hoersten | 3 | -14/+30 | |
| 2025-05-29 | Fixed an error with overwriting certbot certs. | Luke Hoersten | 4 | -7/+7 | |
| 2025-05-28 | Updated versions. | Luke Hoersten | 8 | -12/+12 | |
| 2025-01-03 | Version updates and fixed excessive logging on web server. | Luke Hoersten | 7 | -7/+20 | |
| 2024-10-07 | Updated java version and disabled geyser due to too old jde. | Luke Hoersten | 2 | -2/+2 | |
| 2024-10-07 | Lots of updates and fixes for Ubuntu 24.04 Noble. | Luke Hoersten | 16 | -31/+41 | |
 |
index : luke/ansible-roles | |
| Ansible roles for nth.io infrastructure | Luke Hoersten |
| summaryrefslogtreecommitdiff |