Hermes Agent service account
3f1c3a40cf
feat(semaphore): add idempotent initial admin user creation
...
- New variables for admin user (password from vault)
- Task checks if user exists before creating
- Uses podman exec + semaphore CLI
2026-05-27 21:56:36 -05:00
Hermes Agent service account
0116ec4cc3
fix(dns): improve hostname extraction in add_service_route.yml
...
- Use explicit Jinja2 loop for more reliable parsing of Host() rules
- Handles multi-host router definitions correctly
2026-05-27 21:39:51 -05:00
Hermes Agent service account
f962d0a6d7
feat(dns): rewrite add_service_route.yml to support multi-host Traefik configs
...
- Parse Host() rules from router definitions
- Supports multiple hostnames per service file (e.g. semaphore + imagineering)
- More robust and future-proof
2026-05-27 21:31:41 -05:00
Hermes Agent service account
b05f9fad09
fix(semaphore): add :U volume flag for proper rootless UID mapping
...
Prevents permission issues with BoltDB data directory in rootless Podman
2026-05-27 21:17:40 -05:00
Hermes Agent service account
8650995926
fix(semaphore): adjust BoltDB Path in config.json to parent directory
...
Prevents 'database.boltdb/database.boltdb' path issue in v2.18.x
2026-05-27 21:09:12 -05:00
Hermes Agent service account
e5469d2cb8
fix(semaphore): use semaphore_user for directory ownership + add config.json for BoltDB
...
- Replace hardcoded UID 1000 with {{ semaphore_user }} / {{ semaphore_group }}
- Add config.json creation task for non-interactive BoltDB startup
- Prevents interactive setup wizard and permission errors on v2.18.x
2026-05-27 21:07:30 -05:00
Hermes Agent service account
702698ddcd
fix(semaphore): always regenerate systemd unit and use DB_DIALECT
...
- Switch podman_container env to SEMAPHORE_DB_DIALECT
- Remove creates: guard on podman generate systemd task
- Add changed_when so unit is always updated on role run
2026-05-27 20:56:47 -05:00
Hermes Agent service account
d233d582d4
fix(semaphore): use SEMAPHORE_DB_DIALECT instead of legacy DB_TYPE
...
- Updated container quadlet template to use modern SEMAPHORE_DB_DIALECT variable
- Updated env.j2 template for consistency with current SemaphoreUI expectations
- Resolves BoltDB not being honoured on v2.18.x
2026-05-27 20:48:41 -05:00
Hermes Agent service account
3839fac162
fix: run directory ownership task with become: true
2026-05-26 23:04:23 -05:00
Hermes Agent service account
b01dac85da
fix: set correct ownership (1000:1000) on semaphore data directories
2026-05-26 23:02:04 -05:00
Hermes Agent service account
37a49824d0
fix: run podman generate systemd as root
2026-05-26 22:57:53 -05:00
Hermes Agent service account
0127016ab2
fix: run Semaphore container as root inside container
2026-05-26 22:57:10 -05:00
Hermes Agent service account
e0b6fcb24a
fix: use 'latest' as default Semaphore image tag
2026-05-26 22:55:12 -05:00
Hermes Agent service account
e7d9a8fec5
fix: use containers.podman collection instead of community.general
2026-05-26 22:53:57 -05:00
Hermes Agent service account
1a9addc537
feat: use community.general collection + requirements.yml for semaphore
2026-05-26 22:51:59 -05:00
Hermes Agent service account
401f25b1c4
fix: use raw podman commands (no external collections required)
2026-05-26 22:50:55 -05:00
Hermes Agent service account
ece522074e
fix: switch semaphore role to podman_container + generate systemd (more reliable)
2026-05-26 22:50:18 -05:00
Hermes Agent service account
c30c0074f1
fix: separate daemon-reload from service start in semaphore role
2026-05-26 22:49:38 -05:00
Hermes Agent service account
fa51dc2c4d
fix: correct Quadlet service startup in semaphore role
2026-05-26 22:48:55 -05:00
Hermes Agent service account
c1810fde8a
fix: replace semaphore role with new Podman + Quadlet version
2026-05-26 22:46:46 -05:00
a781ef8b14
update inventory
2026-05-26 22:44:48 -05:00
Hermes Agent service account
92b2a9d609
refactor: consolidate all roles into ansible/roles/ and update ansible.cfg
...
- Move all roles from playbooks/roles/ to roles/
- Update roles_path in ansible.cfg
- Add cast user to common role
- Create standalone podman role
- Add semaphore role with Podman + Quadlet support
2026-05-26 22:22:08 -05:00
24869f47ee
deply hermes VM
2026-05-26 11:48:23 -05:00
be8e50d590
deploy hermes
2026-05-25 20:21:24 -05:00
f4c60d7560
add grafana dashboards
2026-05-19 21:12:54 -05:00
a7f77514d6
additional monitoring scrapes
2026-05-18 22:28:14 -05:00
9f3ac95d8d
gitea and authentik
2026-05-16 16:22:14 -05:00
84523d0054
configure prometheus for ubiquiti and proxmox cluster
2026-05-08 00:25:55 -05:00
f8c6b327f9
Deploy gites
2026-05-07 22:07:53 -05:00
79662aa545
Deployed prometheus/grafana
2026-04-26 23:00:37 -05:00
69b91a2e1d
Move nextcloud external access to traefik.
2026-04-18 21:51:28 -05:00
9961fe1ed4
deploy nextcloud
2026-04-18 00:36:40 -05:00
4db6f0b06f
added test playbook
2026-03-22 23:47:47 -05:00
307413f3f2
Ansible deployed via boilerplates and playbooks
2026-03-22 18:15:55 -05:00
836ef66cf0
fix dash
2026-03-21 19:48:17 -05:00
4cbaebc98b
rename playbook
2026-03-21 19:46:59 -05:00
c1d85b7f89
Remove NetBox Traefik config - deferred until Compose rebuild
2026-03-21 19:10:10 -05:00
c087f32355
redeploy authentic policies as code.
2026-03-21 14:00:37 -05:00
9ad585681f
fix ssh handler
2026-03-19 16:53:45 -05:00
40ab77f061
update test file
2026-03-19 16:44:59 -05:00
1d0adb7689
step enrollment
2026-03-19 16:29:09 -05:00
df0d81ec4d
fix directory permissions
2026-03-14 22:32:40 -05:00
ea7d079f27
update step playbook
2026-03-14 22:30:18 -05:00
5022fc90ab
update ansible inventory
2026-03-14 22:27:20 -05:00
42ea1e2d03
deploy step
2026-03-14 22:15:28 -05:00
b85b237129
rename turnstile to guest-relations
2026-03-14 21:08:35 -05:00
6f14d48d5e
oidc again
2026-03-10 20:34:00 -05:00
fa9fd9c65f
fix oidc
2026-03-10 20:30:07 -05:00
86cf979453
debugging
2026-03-10 20:28:06 -05:00
cc0fd647ab
update ansible user for proxmox
2026-03-10 20:21:53 -05:00
