Ryan Blundon

rblundon pushed to main at rblundon/homelab

2026-05-29 23:08:46 -05:00

b6a4ad6816 fix(semaphore): set ANSIBLE_ROLES_PATH in default env

rblundon pushed to main at rblundon/homelab

2026-05-29 22:57:04 -05:00

bbaaf655fa fix(semaphore): become_key=None (wed has passwordless sudo)

rblundon pushed to main at rblundon/homelab

2026-05-29 22:51:13 -05:00

7228dc6e11 feat(semaphore): wed-ssh as the canonical Semaphore SSH key

rblundon pushed to main at rblundon/homelab

2026-05-29 22:47:16 -05:00

8953702608 fix(semaphore/configure): build POST bodies via Jinja dict literals

rblundon pushed to main at rblundon/homelab

2026-05-29 22:45:19 -05:00

0be33cb8db fix(semaphore/configure): use ['keys'] subscript not .keys attribute

rblundon pushed to main at rblundon/homelab

2026-05-29 22:44:51 -05:00

0f0b5db29b debug: temporarily disable no_log on key creation to see API error

rblundon pushed to main at rblundon/homelab

2026-05-29 22:44:18 -05:00

009f244739 feat(semaphore): add config-as-code via Semaphore REST API

rblundon pushed to main at rblundon/homelab

2026-05-29 22:37:37 -05:00

2f87039f17 vault: add jarvis SSH key, gitea deploy key, and Semaphore API token

rblundon pushed to main at rblundon/homelab

2026-05-29 21:53:51 -05:00

72fa38e928 fix(semaphore): force container restart when Quadlet template changes

rblundon pushed to main at rblundon/homelab

2026-05-29 21:52:36 -05:00

9e68802090 fix(semaphore): make host-agnostic by omitting SEMAPHORE_WEB_ROOT

rblundon pushed to main at rblundon/homelab

2026-05-29 21:38:47 -05:00

d05cfcf317 fix(semaphore): provide SEMAPHORE_ADMIN_* env vars for non-interactive first boot

rblundon pushed to main at rblundon/homelab

2026-05-29 21:34:25 -05:00

80f810fb0c feat(semaphore): rewrite role with rootful Podman Quadlet + PostgreSQL

rblundon pushed to main at rblundon/homelab

2026-05-29 20:56:41 -05:00

9153324795 fix(linux-baseline): correct MOTD padding math

rblundon pushed to main at rblundon/homelab

2026-05-29 20:40:06 -05:00

91b5817e5f feat(ansible): add linux-baseline role and day0_linux_baseline playbook

rblundon pushed to main at rblundon/homelab

2026-05-28 22:06:52 -05:00

1dfa7889ab chore(playbooks): switch day0_baseline.yml to new day0-baseline role

rblundon pushed to main at rblundon/homelab

2026-05-28 21:54:37 -05:00

08d7da0c35 feat(baseline): add clean day0 baseline role (time, packages, hardening)

rblundon pushed to main at rblundon/homelab

2026-05-28 21:24:17 -05:00

9ebeb42023 fix(semaphore): add SEMAPHORE_DB_SSLMODE=disable for postgres connection

rblundon pushed to main at rblundon/homelab

2026-05-28 15:22:49 -05:00

075f34b1fb fix(semaphore): make network creation task more reliable

rblundon pushed to main at rblundon/homelab

2026-05-28 15:20:12 -05:00

210c89c2c7 fix(semaphore): make network creation more robust and earlier in legacy block

rblundon pushed to main at rblundon/homelab

2026-05-28 15:17:57 -05:00

b93a6e50ab feat(semaphore): add optional aggressive storage cleanup for legacy mode