b6c9fa666d
This commit captures the infrastructure state immediately following the "Post-Tyranny Tech" workshop on January 23rd, 2026. Infrastructure Status: - 13 client servers deployed (white, valk, zwaan, specht, das, uil, vos, haas, wolf, ree, mees, mus, mol, kikker) - Services: Authentik SSO, Nextcloud, Collabora Office, Traefik - Private network architecture with edge NAT gateway - OIDC integration between Authentik and Nextcloud - Automated recovery flows and invitation system - Container update monitoring with Diun - Uptime monitoring with Uptime Kuma Changes include: - Multiple new client host configurations - Network architecture improvements (private IPs + NAT) - DNS management automation - Container update notifications - Email configuration via Mailgun - SSH key generation for all clients - Encrypted secrets for all deployments - Health check and diagnostic scripts Known Issues to Address: - Nextcloud version pinned to v30 (should use 'latest' or v32) - Zitadel references in templates (migrated to Authentik but templates not updated) - Traefik dynamic config has obsolete static routes 🤖 Generated with Claude Code (https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
31 lines
801 B
YAML
31 lines
801 B
YAML
---
|
|
# Docker deployment tasks for Nextcloud
|
|
|
|
- name: Create Nextcloud directory
|
|
file:
|
|
path: /opt/nextcloud
|
|
state: directory
|
|
mode: '0755'
|
|
|
|
- name: Deploy Nextcloud Docker Compose file
|
|
template:
|
|
src: docker-compose.nextcloud.yml.j2
|
|
dest: /opt/nextcloud/docker-compose.yml
|
|
mode: '0600'
|
|
notify: Restart Nextcloud
|
|
|
|
- name: Start Nextcloud services
|
|
community.docker.docker_compose_v2:
|
|
project_src: /opt/nextcloud
|
|
state: present
|
|
register: nextcloud_deploy
|
|
|
|
- name: Wait for Nextcloud container to be ready
|
|
shell: docker exec nextcloud sh -c 'until curl -f http://localhost:80 >/dev/null 2>&1; do sleep 2; done'
|
|
args:
|
|
executable: /bin/bash
|
|
register: nextcloud_ready
|
|
changed_when: false
|
|
failed_when: false
|
|
timeout: 300
|
|
when: nextcloud_deploy.changed
|