playbooks/device_roles_pik8s-storage.yml

@@ -41,7 +41,7 @@
       vars:
         postgresql_global_config_options:
           - option: listen_addresses
-            value: 192.168.103.1,172.23.103.1,127.0.0.1
+            value: 192.168.103.1,172.23.103.1
         postgresql_hba_entries:
           - { type: local, database: all, user: postgres, auth_method: peer }
           - { type: local, database: all, user: all, auth_method: md5 }
@@ -52,14 +52,12 @@
             # Allow hosts over zerotier
           - { type: host, database: all, user: all, address: '172.23.0.0/16', auth_method: md5 }
         postgresql_users:
-          - name: grafana
-            password: "{{ secret_grafana_local_db_pass }}"
           - name: gulagbot
             password: "{{ secret_gulagbot_local_db_pass }}"
+          - name: grafana
+            password: "{{ secret_grafana_local_db_pass }}"
           - name: firefly
             password: "{{ secret_firefly_db_pass }}"
-          - name: nagios
-            password: "{{ secret_postgresql_monitoring_password }}"
         postgresql_databases:
           - name: gulagbot
             owner: gulagbot

playbooks/tasks/web/nextcloud.yml

@@ -12,6 +12,3 @@
       - /data/nextcloud/themes:/var/www/html/themes
       - /srv/desu.ltd/nc:/var/www/html/data
   tags: [ docker, nextcloud ]
-- name: assure nextcloud cronjob
-  cron: user=root name=nextcloud minute=*/5 job="docker exec --user www-data -it nextcloud php -f /var/www/html/cron.php"
-  tags: [ docker, nextcloud, cron ]