commit working state

Too many changes to split them up. This commit contains roughly two months worth of work.

This commit introduces the first aggregate and rewrites the ticket system to follow DDD patterns.
It adds Spartan NG as the new component library. TanStack Query to replace GraphQL. Oh and Prisma is
almost over as well.

infrastructure/docker-cluster/ansible/01-infra-playbook.yml

@@ -0,0 +1,34 @@
+---
+- name: Nodes initialisieren und härten
+  hosts: all
+  become: true
+
+  roles:
+    - role: common
+      tags: common
+    - role: ssh_hardening
+      tags: ssh
+    - role: ufw_firewall
+      tags: firewall
+    - role: fail2ban
+      tags: fail2ban
+  handlers:
+    - name: restart sshd
+      ansible.builtin.service:
+        name: ssh
+        state: restarted
+    - name: restart fail2ban
+      ansible.builtin.service:
+        name: fail2ban
+        state: restarted
+- name: Setup Ceph Cluster and CephFS
+  hosts: all
+  become: true
+  roles:
+    - role: ceph_setup
+
+- name: Docker Swarm initialisieren
+  hosts: all
+  become: true
+  roles:
+    - role: docker_swarm

infrastructure/docker-cluster/ansible/02-plattform-playbook.yml

@@ -0,0 +1,13 @@
+- name: Infrastruktur Dienste bereitstellen
+  hosts: all
+  gather_facts: true
+  roles:
+    # - traefik
+    # - portainer
+    # - hyperdx
+    - kestra
+    # - authentik
+    # # - dockge
+    # - signoz
+    # - signoz-infra
+    # - leantime

infrastructure/docker-cluster/ansible/ceph.client.admin.keyring

@@ -0,0 +1,6 @@
+[client.admin]
+	key = AQDfUDBpnhHKNBAAwIRER17JF8flD9GSeNtFlg==
+	caps mds = "allow *"
+	caps mgr = "allow *"
+	caps mon = "allow *"
+	caps osd = "allow *"

infrastructure/docker-cluster/ansible/ceph.conf

@@ -0,0 +1,4 @@
+# minimal ceph.conf for f103f9ee-d058-11f0-aee8-920006d45637
+[global]
+	fsid = f103f9ee-d058-11f0-aee8-920006d45637
+	mon_host = [v2:10.0.1.2:3300/0,v1:10.0.1.2:6789/0]

infrastructure/docker-cluster/ansible/playbook.yml

@@ -45,4 +45,4 @@
     # - signoz-infra
     # - leantime
     - kestra
-    - hyperdx
+    # - hyperdx

infrastructure/docker-cluster/ansible/roles/hyperdx/tasks/main.yml

@@ -28,6 +28,18 @@
   run_once: true
   delegate_to: "{{ groups['managers'][0] }}"
 
+- name: HYPERDX | shared-observability Netzwerk erstellen
+  community.docker.docker_network:
+    name: shared-observability
+    driver: overlay
+    state: present
+    attachable: yes
+    ipam_config:
+      - subnet: '172.16.201.0/24'
+        gateway: '172.16.201.1'
+  run_once: true
+  delegate_to: "{{ groups['managers'][0] }}"
+
 - name: HYPERDX | Generate Compose file
   ansible.builtin.template:
     src: docker-compose.yml.j2