intern/docker_esphome/templates/config/esphome_plug04.yaml

@@ -3,7 +3,7 @@
 {% include "/includes/ansible.inc.yaml" %}
 {% include "/includes/board.esp01_1m.inc.yaml" %}
 
-  comment: Halogen Lounge
+  comment: frei
 {% include "/includes/common.inc.yaml" %}
 
   on_message:

intern/docker_esphome/templates/config/esphome_plug07.yaml

@@ -19,6 +19,10 @@
       payload: "CLOSED"
       then:
         - switch.turn_off: relay
+    - topic: warpzone/door/status_once
+      payload: "OPEN"
+      then:
+        - switch.turn_on: relay
         
 substitutions:
   plug_name: {{ devicename }}

intern/docker_esphome/templates/config/esphome_plug08.yaml

@@ -3,7 +3,7 @@
 {% include "/includes/ansible.inc.yaml" %}
 {% include "/includes/board.esp01_1m.inc.yaml" %}
 
-  comment: 3D Drucker Prusanet
+  comment: WLED Vorhang
 {% include "/includes/common.inc.yaml" %}
 
   on_message:
@@ -15,10 +15,10 @@
       payload: "OFF"
       then:
         - switch.turn_off: relay
-    - topic: warpzone/door/status
-      payload: "CLOSED"
+    - topic: warpzone/door/status_once
+      payload: "OPEN"
       then:
-        - switch.turn_off: relay
+        - switch.turn_on: relay
         
 substitutions:
   plug_name: {{ devicename }}

intern/docker_esphome/templates/config/esphome_popcorn.yaml

@@ -135,7 +135,7 @@ climate:
     id: pid_heater
     name: "PID Heater Controller"
     sensor: pot_sensor
-    default_target_temperature: 240
+    default_target_temperature: 220
     heat_output: pot_heater
     control_parameters:
       kp: 0.09549

intern/docker_grafana/templates/docker-compose.yml

@@ -4,7 +4,7 @@ services:
 
   app:
 
-    image: grafana/grafana:9.4.3
+    image: grafana/grafana:9.5.6
     restart: always
     volumes:
       - "{{ basedir }}/grafana.ini:/etc/grafana/grafana.ini"

intern/docker_graylog/tasks/main.yml

----
-
-- name: "create folder struct for {{ servicename }}"
-  file: 
-    path: "{{ basedir }}" 
-    state: "directory"
-
-- name: "create folder struct for {{ servicename }}"
-  file: 
-    path: "{{ basedir }}/{{ item }}" 
-    state: "directory"
-    owner: 508
-    group: 508
-  with_items:
-    - "data"
-    - "logs"
-
-- name: "create config files for {{ servicename }}"
-  template: 
-    src: "{{ item }}"
-    dest: "{{ basedir }}/{{ item }}"
-  with_items:
-    - docker-compose.yml 
-
-- name: "start {{ servicename }} docker"
-  docker_compose:
-    project_src: "{{ basedir }}"
-    state: present
-

intern/docker_graylog/templates/docker-compose.yml

-version: "3"
-
-services:
-  mongodb:
-    image: "mongo:6.0.4"
-    restart: "always"
-
-  opensearch:
-    image: "opensearchproject/opensearch:2.6.0"
-    environment:
-      - "TZ=Europe/Berlin"
-      - "OPENSEARCH_JAVA_OPTS=-Xms1g -Xmx1g"
-      - "bootstrap.memory_lock=true"
-      - "discovery.type=single-node"
-      - "action.auto_create_index=false"
-      - "plugins.security.ssl.http.enabled=false"
-      - "plugins.security.disabled=true"
-    restart: "always"
-
-  graylog:
-    hostname: "server"
-    image: "graylog/graylog:5.0.5"
-    entrypoint: "/usr/bin/tini -- wait-for-it opensearch:9200 --  /docker-entrypoint.sh"
-    environment:
-      TZ: "Europe/Berlin"
-      GRAYLOG_NODE_ID_FILE: "/usr/share/graylog/data/config/node-id"
-      GRAYLOG_PASSWORD_SECRET: "warpzonewarpzone"
-      GRAYLOG_ROOT_PASSWORD_SHA2: "26230bc6e5e044e6e3cef7c76a2800fdf2d3952ef03e85c83491b99eef149c40"
-      GRAYLOG_HTTP_BIND_ADDRESS: "0.0.0.0:9000"
-      GRAYLOG_HTTP_EXTERNAL_URI: "http://graylog.warpzone.lan/"
-      GRAYLOG_ELASTICSEARCH_HOSTS: "http://opensearch:9200"
-      GRAYLOG_MONGODB_URI: "mongodb://mongodb:27017/graylog"
-    ports:
-      - "514:5140/udp"   # Syslog
-      - "514:5140/tcp"   # Syslog
-    restart: "always"
-    labels:
-      - traefik.enable=true
-      - traefik.http.routers.{{ servicename }}.rule=Host(`{{ domain }}`)
-      - traefik.http.routers.{{ servicename }}.entrypoints=websecure
-      - traefik.http.services.{{ servicename }}.loadbalancer.server.port=9000
-    networks:
-      - web
-      - default
-
-networks:
-  web:
-    external: true

intern/docker_homeassistant/tasks/main.yml

 ---
 
-- include: ../functions/get_secret.yml
+- include_tasks: ../functions/get_secret.yml
   with_items:
    - { path: "{{ basedir }}/warpai_status_update_key",     length: -1 }
    - { path: "{{ basedir }}/homeassistant_admin_password", length: 12 }

intern/docker_homeassistant/templates/docker-compose.yml

@@ -26,7 +26,7 @@ services:
   
   influxdb:
 
-    image: influxdb:2.6.1
+    image: influxdb:2.7.1
     restart: always
     ports:
       - "{{ int_ip4 }}:{{ influxdb_port }}:8086"

intern/docker_homematic/tasks/main.yml

----
-
-- include: ../functions/get_secret.yml
-  with_items:
-   - { path: "{{ basedir }}/influxdb_password",            length: 12 }
-   - { path: "{{ basedir }}/influxdb_token",               length: 32 }
-
-
-- name: "create folder struct for {{ basedir }}"
-  file: 
-    path: "{{ item }}"
-    state: "directory"
-  with_items:
-    - "{{ basedir }}"
-
-
-- name: "copy config files for {{ basedir }}"
-  template:
-    src: "{{ item }}"
-    dest: "{{ basedir }}/{{ item }}"
-  with_items:
-    - docker-compose.yml
-    - telegraf.conf
-  register: config_files
-
-
-- name: "stop {{ servicename }} docker"
-  docker_compose:
-    project_src: "{{ basedir }}"
-    state: absent
-  when: config_files.changed 
-
-
-- name: "start {{ servicename }} docker"
-  docker_compose:
-    project_src: "{{ basedir }}"
-    state: present

intern/docker_homematic/templates/docker-compose.yml

-
-version: "3"
-
-services:
-  
-  app:
-
-    image: sfudeus/homematic_exporter:2023-05-21
-    restart: always
-    command: "--ccu_host {{ homematic.ccu2_host }} --ccu_port 2001 --port {{ homematic_metrics_port }}"
-    ports:
-      - "{{ int_ip4 }}:{{ homematic_metrics_port }}:{{ homematic_metrics_port }}"
-    networks:
-      - default
-
-  
-  influxdb:
-
-    image: influxdb:2.6.1
-    restart: always
-    ports:
-      - "{{ int_ip4 }}:{{ influxdb_port }}:8086"
-    volumes:
-      - "{{ basedir }}/influxdb:/var/lib/influxdb2"
-    environment:
-      DOCKER_INFLUXDB_INIT_MODE: setup
-      DOCKER_INFLUXDB_INIT_USERNAME: homematic
-      DOCKER_INFLUXDB_INIT_PASSWORD: {{ influxdb_password }}
-      DOCKER_INFLUXDB_INIT_ORG: homematic
-      DOCKER_INFLUXDB_INIT_BUCKET: homematic
-      DOCKER_INFLUXDB_INIT_ADMIN_TOKEN: {{ influxdb_token }}
-    networks:
-      - default
-
-
-  telegraf:
-
-    image: telegraf:1.25.3
-    restart: always
-    depends_on: 
-      - app
-      - influxdb
-    volumes:
-      - "{{ basedir }}/telegraf.conf:/etc/telegraf/telegraf.conf:ro"

intern/docker_homematic/templates/telegraf.conf

-# Telegraf Configuration
-#
-# Telegraf is entirely plugin driven. All metrics are gathered from the
-# declared inputs, and sent to the declared outputs.
-#
-# Plugins must be declared in here to be active.
-# To deactivate a plugin, comment out the name and any variables.
-#
-# Use 'telegraf -config telegraf.conf -test' to see what metrics a config
-# file would generate.
-#
-# Environment variables can be used anywhere in this config file, simply surround
-# them with ${}. For strings the variable must be within quotes (ie, "${STR_VAR}"),
-# for numbers and booleans they should be plain (ie, ${INT_VAR}, ${BOOL_VAR})
-
-
-# Global tags can be specified here in key="value" format.
-[global_tags]
-  # dc = "us-east-1" # will tag all metrics with dc=us-east-1
-  # rack = "1a"
-  ## Environment variables can be used as tags, and throughout the config file
-  # user = "$USER"
-
-# Configuration for telegraf agent
-[agent]
-  ## Default data collection interval for all inputs
-  interval = "5s"
-  ## Rounds collection interval to 'interval'
-  ## ie, if interval="10s" then always collect on :00, :10, :20, etc.
-  round_interval = true
-
-  ## Telegraf will send metrics to outputs in batches of at most
-  ## metric_batch_size metrics.
-  ## This controls the size of writes that Telegraf sends to output plugins.
-  metric_batch_size = 100
-
-  ## Maximum number of unwritten metrics per output.  Increasing this value
-  ## allows for longer periods of output downtime without dropping metrics at the
-  ## cost of higher maximum memory usage.
-  metric_buffer_limit = 10000
-
-  ## Collection jitter is used to jitter the collection by a random amount.
-  ## Each plugin will sleep for a random time within jitter before collecting.
-  ## This can be used to avoid many plugins querying things like sysfs at the
-  ## same time, which can have a measurable effect on the system.
-  collection_jitter = "0s"
-
-  ## Default flushing interval for all outputs. Maximum flush_interval will be
-  ## flush_interval + flush_jitter
-  flush_interval = "10s"
-  ## Jitter the flush interval by a random amount. This is primarily to avoid
-  ## large write spikes for users running a large number of telegraf instances.
-  ## ie, a jitter of 5s and interval 10s means flushes will happen every 10-15s
-  flush_jitter = "0s"
-
-  ## By default or when set to "0s", precision will be set to the same
-  ## timestamp order as the collection interval, with the maximum being 1s.
-  ##   ie, when interval = "10s", precision will be "1s"
-  ##       when interval = "250ms", precision will be "1ms"
-  ## Precision will NOT be used for service inputs. It is up to each individual
-  ## service input to set the timestamp at the appropriate precision.
-  ## Valid time units are "ns", "us" (or "µs"), "ms", "s".
-  precision = ""
-
-  ## Log at debug level.
-  # debug = false
-  ## Log only error level messages.
-  # quiet = false
-
-  ## Log target controls the destination for logs and can be one of "file",
-  ## "stderr" or, on Windows, "eventlog".  When set to "file", the output file
-  ## is determined by the "logfile" setting.
-  # logtarget = "file"
-
-  ## Name of the file to be logged to when using the "file" logtarget.  If set to
-  ## the empty string then logs are written to stderr.
-  # logfile = ""
-
-  ## The logfile will be rotated after the time interval specified.  When set
-  ## to 0 no time based rotation is performed.  Logs are rotated only when
-  ## written to, if there is no log activity rotation may be delayed.
-  # logfile_rotation_interval = "0d"
-
-  ## The logfile will be rotated when it becomes larger than the specified
-  ## size.  When set to 0 no size based rotation is performed.
-  # logfile_rotation_max_size = "0MB"
-
-  ## Maximum number of rotated archives to keep, any older logs are deleted.
-  ## If set to -1, no archives are removed.
-  # logfile_rotation_max_archives = 5
-
-  ## Pick a timezone to use when logging or type 'local' for local time.
-  ## Example: America/Chicago
-  # log_with_timezone = ""
-
-  ## Override default hostname, if empty use os.Hostname()
-  hostname = ""
-  ## If set to true, do no set the "host" tag in the telegraf agent.
-  omit_hostname = false
-
-###############################################################################
-#                            OUTPUT PLUGINS                                   #
-###############################################################################
-
-# Configuration for sending metrics to InfluxDB 2.0
-[[outputs.influxdb_v2]]
-  ## The URLs of the InfluxDB cluster nodes.
-  ##
-  ## Multiple URLs can be specified for a single cluster, only ONE of the
-  ## urls will be written to each interval.
-  ##   ex: urls = ["https://us-west-2-1.aws.cloud2.influxdata.com"]
-  urls = ["http://influxdb:8086"]
-
-  ## Token for authentication.
-  token = "{{ influxdb_token }}"
-
-  ## Organization is the name of the organization you wish to write to.
-  organization = "homematic"
-
-  ## Destination bucket to write into.
-  bucket = "homematic"
-
-  ## The value of this tag will be used to determine the bucket.  If this
-  ## tag is not set the 'bucket' option is used as the default.
-  # bucket_tag = ""
-
-  ## If true, the bucket tag will not be added to the metric.
-  # exclude_bucket_tag = false
-
-  ## Timeout for HTTP messages.
-  # timeout = "5s"
-
-  ## Additional HTTP headers
-  # http_headers = {"X-Special-Header" = "Special-Value"}
-
-  ## HTTP Proxy override, if unset values the standard proxy environment
-  ## variables are consulted to determine which proxy, if any, should be used.
-  # http_proxy = "http://corporate.proxy:3128"
-
-  ## HTTP User-Agent
-  # user_agent = "telegraf"
-
-  ## Content-Encoding for write request body, can be set to "gzip" to
-  ## compress body or "identity" to apply no encoding.
-  # content_encoding = "gzip"
-
-  ## Enable or disable uint support for writing uints influxdb 2.0.
-  # influx_uint_support = false
-
-  ## Optional TLS Config for use on HTTP connections.
-  # tls_ca = "/etc/telegraf/ca.pem"
-  # tls_cert = "/etc/telegraf/cert.pem"
-  # tls_key = "/etc/telegraf/key.pem"
-  ## Use TLS but skip chain & host verification
-  # insecure_skip_verify = false
-
-
-###############################################################################
-#                            INPUT PLUGINS                                    #
-###############################################################################
-
-# Read metrics from one or many prometheus clients
-[[inputs.prometheus]]
-  ## An array of urls to scrape metrics from.
-  urls = ["http://app:{{ homematic_metrics_port }}/metrics"]
-
-  ## Metric version controls the mapping from Prometheus metrics into Telegraf metrics.
-  ## See "Metric Format Configuration" in plugins/inputs/prometheus/README.md for details.
-  ## Valid options: 1, 2
-  # metric_version = 1
-
-  ## Url tag name (tag containing scrapped url. optional, default is "url")
-  # url_tag = "url"
-
-  ## Whether the timestamp of the scraped metrics will be ignored.
-  ## If set to true, the gather time will be used.
-  # ignore_timestamp = false
-

intern/docker_mqtt/tasks/main.yml

 ---
-- include: ../functions/get_secret.yml
+- include_tasks: ../functions/get_secret.yml
   with_items:
    - { path: "{{ basedir }}/influxdb_password", length: 12 }
    - { path: "{{ basedir }}/influxdb_token", length: 24 }

intern/docker_nodered/templates/docker-compose.yml

@@ -9,7 +9,7 @@ version: "3"
 services:
 
   app:
-    image: nodered/node-red:2.2.3
+    image: nodered/node-red:3.0.2
     restart: always
     volumes:
       - "{{ basedir }}/data:/data"

remote/docker_homeassistant/tasks/main.yml

 ---
 
-- include: ../functions/get_secret.yml
+- include_tasks: ../functions/get_secret.yml
   with_items:
    - { path: "{{ basedir }}/homeassistant_admin_password", length: 12 }
    - { path: "{{ basedir }}/influxdb_password",            length: 12 }

remote/docker_homeassistant/templates/docker-compose.yml

@@ -24,7 +24,7 @@ services:
   
   influxdb:
 
-    image: influxdb:2.6.0
+    image: influxdb:2.7.1
     restart: always
     ports:
       - "{{ int_ip4 }}:{{ influxdb_port }}:8086"

remote/docker_prometheus/templates/docker-compose.yml

@@ -5,7 +5,7 @@ services:
 
   app:
 
-    image: prom/prometheus:v2.42.0
+    image: prom/prometheus:v2.45.0
     restart: always
     ports:
       - 9090:9090

site.yml

@@ -95,13 +95,6 @@
         homematic_callback_port: 8060,
         influxdb_port: 38086       
       }
-    - { 
-        role: intern/docker_homematic, tags: homematic, 
-        servicename: homematic, 
-        basedir: /srv/homematic,
-        homematic_metrics_port: 8010,
-        influxdb_port: 48086       
-      }
     - { 
         role: intern/docker_mqtt, tags: mqtt, 
         servicename: mqtt,
@@ -126,12 +119,6 @@
         omada_port_https: 8043,
         omada_portal_https: 8843
       }
-    - {
-        role: intern/docker_graylog, tags: graylog,
-        servicename: graylog,
-        basedir: /srv/graylog,
-        domain: "graylog.warpzone.lan"
-      }
     - { 
         role: intern/docker_tasmoadmin, tags: tasmoadmin, 
         servicename: tasmoadmin,
@@ -154,6 +141,7 @@
     - { role: common/kvm-guest, tags: kvm-guest }
     - { role: common/openvpn, tags: openvpn }
     - { role: common/prometheus-node, tags: prometheus-node }
+    - { role: common/wireguard, tags: wireguard }
     - { 
         role: common/docker_dockerstats, tags: dockerstats, 
         servicename: dockerstats, 

verwaltung/docker_gitea/tasks/main.yml

 ---
 # Get secrets 
-- include: ../functions/get_secret.yml
+- include_tasks: ../functions/get_secret.yml
   with_items:
     - { path: /srv/gitea/mysql_root_pw, length: 24 }
     - { path: /srv/gitea/mysql_user_pw, length: 12 }