b6c9fa666d
This commit captures the infrastructure state immediately following the "Post-Tyranny Tech" workshop on January 23rd, 2026. Infrastructure Status: - 13 client servers deployed (white, valk, zwaan, specht, das, uil, vos, haas, wolf, ree, mees, mus, mol, kikker) - Services: Authentik SSO, Nextcloud, Collabora Office, Traefik - Private network architecture with edge NAT gateway - OIDC integration between Authentik and Nextcloud - Automated recovery flows and invitation system - Container update monitoring with Diun - Uptime monitoring with Uptime Kuma Changes include: - Multiple new client host configurations - Network architecture improvements (private IPs + NAT) - DNS management automation - Container update notifications - Email configuration via Mailgun - SSH key generation for all clients - Encrypted secrets for all deployments - Health check and diagnostic scripts Known Issues to Address: - Nextcloud version pinned to v30 (should use 'latest' or v32) - Zitadel references in templates (migrated to Authentik but templates not updated) - Traefik dynamic config has obsolete static routes 🤖 Generated with Claude Code (https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
53 lines
2.4 KiB
YAML
53 lines
2.4 KiB
YAML
---
|
|
# Configure email for a single server
|
|
- hosts: all
|
|
gather_facts: yes
|
|
tasks:
|
|
- name: Load client secrets
|
|
community.sops.load_vars:
|
|
file: "{{ playbook_dir }}/../../secrets/clients/{{ inventory_hostname }}.sops.yaml"
|
|
name: client_secrets
|
|
age_keyfile: "{{ lookup('env', 'SOPS_AGE_KEY_FILE') }}"
|
|
no_log: true
|
|
|
|
- name: Load shared secrets
|
|
community.sops.load_vars:
|
|
file: "{{ playbook_dir }}/../../secrets/shared.sops.yaml"
|
|
name: shared_secrets
|
|
age_keyfile: "{{ lookup('env', 'SOPS_AGE_KEY_FILE') }}"
|
|
no_log: true
|
|
|
|
- name: Merge secrets
|
|
set_fact:
|
|
client_secrets: "{{ client_secrets | combine(shared_secrets) }}"
|
|
no_log: true
|
|
|
|
- name: Include mailgun role
|
|
include_role:
|
|
name: mailgun
|
|
|
|
- name: Configure Nextcloud email if credentials available
|
|
shell: |
|
|
docker exec -u www-data nextcloud php occ config:system:set mail_smtpmode --value="smtp"
|
|
docker exec -u www-data nextcloud php occ config:system:set mail_smtpsecure --value="tls"
|
|
docker exec -u www-data nextcloud php occ config:system:set mail_smtphost --value="smtp.eu.mailgun.org"
|
|
docker exec -u www-data nextcloud php occ config:system:set mail_smtpport --value="587"
|
|
docker exec -u www-data nextcloud php occ config:system:set mail_smtpauth --value="1"
|
|
docker exec -u www-data nextcloud php occ config:system:set mail_smtpname --value="{{ mailgun_smtp_user }}"
|
|
docker exec -u www-data nextcloud php occ config:system:set mail_smtppassword --value="{{ mailgun_smtp_password }}"
|
|
docker exec -u www-data nextcloud php occ config:system:set mail_from_address --value="{{ inventory_hostname }}"
|
|
docker exec -u www-data nextcloud php occ config:system:set mail_domain --value="mg.vrije.cloud"
|
|
when: mailgun_smtp_user is defined
|
|
no_log: true
|
|
register: email_config
|
|
|
|
- name: Display email configuration status
|
|
debug:
|
|
msg: |
|
|
========================================
|
|
Email Configuration
|
|
========================================
|
|
Status: {{ 'Configured' if email_config.changed | default(false) else 'Skipped (credentials not available)' }}
|
|
SMTP: smtp.eu.mailgun.org:587 (TLS)
|
|
From: {{ inventory_hostname }}@mg.vrije.cloud
|
|
========================================
|