jack/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1
103 commits 1 branch 0 tags 699 KiB
Commit graph

2 commits

Author SHA1 Message Date
jack
cbab48fb03 chore: change admin email to walava@tutamail.com
All checks were successful
CI/CD / syntax-check (push) Successful in 1m5s
Details
CI/CD / deploy (push) Successful in 15m48s
Details 
Updates ACME/Let's Encrypt contact email and unattended-upgrades config.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-26 17:43:40 +07:00
jack
5befd48a50 fix: allow Docker bridge networks through UFW for runner + add unattended-upgrades
Some checks are pending
CI/CD / deploy (push) Blocked by required conditions
Details
CI/CD / syntax-check (push) Successful in 41s
Details 
firewall.yml:
- Allow 172.16.0.0/12 and 10.0.0.0/8 on ports 80/443 so act_runner
  job containers can reach git.csrx.ru (Forgejo via Traefik)
- Without this, Cloudflare-only rules broke CI/CD pipeline

unattended_upgrades.yml (new):
- Install unattended-upgrades + apt-listchanges
- Configure auto-apply of security patches only (not all updates)
- Auto-clean every 7 days, remove unused deps
- No auto-reboot (manual control over kernel reboots)

base/tasks/main.yml:
- Add unattended_upgrades.yml to task sequence

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-22 04:11:39 +07:00