labitat-ansible/roles/sky, branch new_prefixes

sky: vars: add hafnium as a sudo user

2023-07-26T19:45:25+00:00

sky: homepage: set up the frontpage of labitat.dk

2023-01-27T10:19:24+00:00

esmil:
- use timer to update the homepage
- git clone/update and install gems as the homepage user

sky: certbot: configure certbot

2023-01-27T00:25:24+00:00

esmil:
- don't install cron job, just use the packaged timer
- install deploy hook to reload nginx when certificates are updated

sky: add role for new labitat.dk server

2023-01-27T00:25:24+00:00

nginx: add common role for nginx

2023-01-26T23:32:09+00:00

esmil:
- disable access log and log errors to syslog (journal really)
  use journalctl -u nginx to see the errors
- hoist some configuration values into ansible variables
- add tags and use a handler to reload nginx on configuration changes
- make nginx do its DNS queries against our local resolved
  this enables nginx to use DNSSEC and DoT
- don't start nginx before the network is up. if it can't do
  dns lookups ssl_stapling will be ignored