kestra

Author: ildoc

ansible/inventory/host_vars/db.yml

@@ -33,6 +33,12 @@ db:
         lc_collate: en_US.UTF-8
         lc_ctype: en_US.UTF-8
 
+      - name: kestra_db
+        owner: kestra_user
+        encoding: UTF8
+        lc_collate: en_US.UTF-8
+        lc_ctype: en_US.UTF-8
+
     users:
       # Utenti applicativi con accesso completo al loro database
       - name: invidious_user
@@ -67,3 +73,11 @@ db:
         table_privs: ALL
         sequence_privs: ALL
 
+      - name: kestra_user
+        password: "{{ lookup('community.hashi_vault.hashi_vault', 'cross/data/apps/kestra:postgres_password') }}"
+        databases:
+          - kestra_db
+        privileges: ALL
+        table_privs: ALL
+        sequence_privs: ALL
+

ansible/inventory/host_vars/pihole.yml

@@ -14,6 +14,7 @@ pihole:
     - { ip: 192.168.0.124, domain: "web" }
     - { ip: 192.168.0.133, domain: "homeassistant" }
     - { ip: 192.168.0.183, domain: "ubuntu" }
+    - { ip: 192.168.0.111, domain: "invidious" }
 
     - { ip: 192.168.0.30, domain: "db" }
     - { ip: 192.168.0.40, domain: "redis" }
@@ -32,6 +33,7 @@ pihole:
     - { ip: 192.168.0.81, domain: "bazarr.local.ildoc.it"}
     - { ip: 192.168.0.81, domain: "flaresolverr.local.ildoc.it"}
     - { ip: 192.168.0.81, domain: "grafana.local.ildoc.it"}
+    - { ip: 192.168.0.81, domain: "kestra.local.ildoc.it"}
     - { ip: 192.168.0.81, domain: "n8n.local.ildoc.it"}
     - { ip: 192.168.0.81, domain: "nut.local.ildoc.it"}
     - { ip: 192.168.0.81, domain: "prometheus.local.ildoc.it"}

ansible/roles/gitlab/templates/gitlab.rb.j2

@@ -222,9 +222,6 @@ mattermost['enable'] = false
 # Prometheus monitoring - disabilitato per risparmiare ~400-500MB RAM
 prometheus_monitoring['enable'] = false
 
-# NOTA: Grafana è stato rimosso da GitLab 16.3 - non configurare più
-# grafana['enable'] = false  # ❌ ERRORE - questa configurazione non esiste più!
-
 # Alertmanager - disabilitato
 alertmanager['enable'] = false
 

ansible/roles/invidious/templates/docker-compose.yml.j2

@@ -3,7 +3,7 @@ services:
 
   invidious:
     # renovate: datasource=docker depName=quay.io/invidious/invidious versioning=loose
-    image: quay.io/invidious/invidious:2025.09.30-710b3f2
+    image: quay.io/invidious/invidious:2025.10.17-5cfe294
     restart: unless-stopped
     ports:
       - "3000:3000"
@@ -46,7 +46,7 @@ services:
 
   companion:
     # renovate: datasource=docker depName=quay.io/invidious/invidious-companion versioning=loose
-    image: quay.io/invidious/invidious-companion:master-cf06610
+    image: quay.io/invidious/invidious-companion:master-572f219
     environment:
       SERVER_SECRET_KEY: {{ invidious.companion_key }}
     restart: unless-stopped