v0.0.113
🐛 Bug Fix
- wip update servers playbook to fedora #8 (@chrisjsimpson)
- #16 cron rotate wireguard vpn user config every 2 hrs #17 (@chrisjsimpson)
- #16 remove uneeded inputs.PSONO_SECRET_ID from workflow rotate-wireguard-vpn-user-configs.yml #17 (@chrisjsimpson)
- #16 update WIREGUARD_VPN_PSONO_SECRET_IDS group_vars/all #17 (@chrisjsimpson)
- wip Fix #16 continually bootstrap vpn users #17 (@chrisjsimpson)
- #14 update manual readme steps #15 (@chrisjsimpson)
- #14 ensure ansible-galaxy collection install --requirements-file ./src/vpn/requirements.yml #15 (@chrisjsimpson)
- Ref #14 use checkout v4 #15 (@chrisjsimpson)
- wip Fix #14 automatically rebuild vpn servers #15 (@chrisjsimpson)
- wip #14 deploy-vpn-server.yml improve #15 (@chrisjsimpson)
- #14 added localhost.yml group_vars #15 (@chrisjsimpson)
- wip #14 create/rebuild vpn server #15 (@chrisjsimpson)
- wip #14 naming vpn_clients -> vpn_servers #15 (@chrisjsimpson)
- rename/mv folder vpn-client -> src/vpn #15 (@chrisjsimpson)
⚠️ Pushed to main
- Update release.yml bump ipxe iso artifact action to v4 (@chrisjsimpson)
- #20 build & publish zfs netbook image every 2 hrs build-alpine-netboot-image-zfs.yml (@chrisjsimpson)
- #13 apk install zfs in servers play (@chrisjsimpson)
- wip #13 pin to alpine v3.20 rather than edge (@chrisjsimpson)
- build-alpine-netboot-image-zfs.yml can pass branch name (@chrisjsimpson)
- #20 bump webfactory/ssh-agent@v0.9.0 (@chrisjsimpson)
- #20 bump actions to v4 for build-alpine-netboot-image-zfs.yml (@chrisjsimpson)
- #20 correct path scp netboot image to boot server (@chrisjsimpson)
- #20 stick to naming alpine-zfsnetboot.tar.gz (@chrisjsimpson)
- #20 exact path in workflow to publish alpine-zfsnetboot-patched-init.tar.gz (@chrisjsimpson)
- Ref #20 use settings.py properly (@chrisjsimpson)
- #20 update comments patch-alpine-netboot-image-with-zfs.sh (@chrisjsimpson)
- #20 tidy up init netboot patching tar between runs (@chrisjsimpson)
- WIP Fix #18 As operator I can continually boostrap physical server (@chrisjsimpson)
- #13 DEFAULT_HTTP_REQ_TIMEOUT to 20 (@chrisjsimpson)
- #13 wip add bootstap-server.sh helper script (@chrisjsimpson)
- Ref #13 template minimal /etc/network/interfaces during bootstrap (interfaces are already configured with global ips at this point) (@chrisjsimpson)
- downgrade zfs flags (@chrisjsimpson)
- ensure ZPOOL_VDEV_NAME_PATH set within chroot environment (@chrisjsimpson)
- Ref #13 more reliable udev disk identify & ensure packages present (@chrisjsimpson)
- wip fedora (@chrisjsimpson)
- correct shebang to ash shell for wipe-all-disks (@chrisjsimpson)
- #13 ensure zfs package installed during play (@chrisjsimpson)
- #13 more reliable udev disk identify & ensure packages present (@chrisjsimpson)
- added .gitignore (@chrisjsimpson)
- add get-first-disk-id.sh create-tank-zpool.sh (@chrisjsimpson)
- Ref #13 ensure python present on target (alpine) during bootstrap (@chrisjsimpson)
- update requirements.txt (@chrisjsimpson)
- update servers play description (@chrisjsimpson)
- added create-tank-zpool.sh (@chrisjsimpson)
- added install-fedora-root-on-zfs.sh (@chrisjsimpson)
- wip update servers playbook to fedora (@chrisjsimpson)
- added wipe-all-disks.sh (@chrisjsimpson)
- wip #20 (@chrisjsimpson)
- Update README.md add Build netboot image bade to readme (@chrisjsimpson)
- refactor app.py & introduce justKeepRedeploying, HOST_HEALTHCHECK_POLL_IP, PollPingHostOSOnline (@chrisjsimpson)
- Update deploy-vpn-server.yml redeploy every 2->3 hours (@chrisjsimpson)
- Update deploy-vpn-server.yml concurrency 1 prevent concurrent runs #14 #16 (@chrisjsimpson)
- #16 after rebuilding VPN, always rotate & publish user wireguard vpn entries #14 (@chrisjsimpson)
- Update README.md add deploy VPN server status badge (@chrisjsimpson)
- #14 deploy VPN server every 2 hrs deploy-vpn-server.yml (@chrisjsimpson)
- #14 correct ansible-playbook --extra_vars -> --extra-vars (@chrisjsimpson)
- #14 ansibleise Add-vpn-user (@chrisjsimpson)
- #14 add-vpn-user force collections-path (@chrisjsimpson)
- #14 generate-user-vpn-config pip3 install -r src/vpn/requirements.txt (@chrisjsimpson)
- #14 only tmate if Update deploy-vpn-server.yml fails (@chrisjsimpson)
- #14 Update deploy-vpn-server.yml job name build -> deploy-vpn-server (@chrisjsimpson)
- #14 move tmate to last Update deploy-vpn-server.yml (@chrisjsimpson)
- Ref #14 update server_bootstrap_private_ssh_key (@chrisjsimpson)
- #14 bump runner to ubuntu-24.04 Update deploy-vpn-server.yml (@chrisjsimpson)
- #14 Update deploy-vpn-server.yml debug (@chrisjsimpson)
- #14 ensure mode 600 for ansible_ssh_private_key_file (@chrisjsimpson)
- Ref #14 ensure ~/ssh dir exists on local/runner host (@chrisjsimpson)
- Ref #14 added missing templates/ssh/ssh_private_key_server_bootstrap.j2 (@chrisjsimpson)
- #14 don't gather facts on vpn_servers before keys places & put ansible_ssh_private_key_file in all group_vars (@chrisjsimpson)
- #14 correct delegate from 127.0.01 -> localhost (@chrisjsimpson)
- #14 place ssh_private_key_server_bootstrap and server_bootstrap_public_ssh_key in localhost groupvars (@chrisjsimpson)
- #14 template early Template ssh_private_key_server_bootstrap (@chrisjsimpson)
- #14 delegate correctly Template ssh_private_key_server_bootstrap to the runner (@chrisjsimpson)
- Ref #14 disable host_key_checking during boostrap (@chrisjsimpson)
- #14 Template ssh_private_key_server_bootstrap (@chrisjsimpson)
- #14 give _vault_hetzner_cloud_token vault secret via cli (@chrisjsimpson)
- Revert "Ref #14 fix workflow deploy-vpn-server.yml dynamic inventory inventory-vpn-servers-hcloud.yml not needed at that stage (its references via playbook imported later)" (@chrisjsimpson)
- Ref #14 fix workflow deploy-vpn-server.yml dynamic inventory inventory-vpn-servers-hcloud.yml not needed at that stage (its references via playbook imported later) (@chrisjsimpson)
- #14 debug tmate always (@chrisjsimpson)
- Ref #14 force install of hcloud ansible collection (@chrisjsimpson)
- #14 remove uneeded vpn_servers from inventory.ini since dynamic inventory (@chrisjsimpson)
- #14 add missing pip install -r (@chrisjsimpson)
- #14 reinstate use of trap to rm ansible TMPFILE@Q (@chrisjsimpson)
- remove clunky use of add-mask feature (@chrisjsimpson)
- #14 debug ansible vault (@chrisjsimpson)
- Ref #14 masking inputs (@chrisjsimpson)
- Ref #14 masking inputs.ansible_vault_password (@chrisjsimpson)
- Ref #14 remove dead code PSONO_SECRET_ID (@chrisjsimpson)