📈: upgrade mail to debian 13

♻️: debian 13 by default
📈: upgrade web3 to debian 13
2025-12-05 10:52:59 +01:00 · 2025-12-05 08:44:48 +01:00 · 2025-12-04 16:58:13 +01:00 · 2025-12-04 15:51:20 +01:00 · 2025-12-04 14:24:14 +01:00 · 2025-12-03 10:50:35 +01:00
6 changed files with 54 additions and 59 deletions
--- a/.terraform.lock.hcl
+++ b/.terraform.lock.hcl
@@ -2,41 +2,42 @@
 # Manual edits may be lost in future updates.

 provider "registry.opentofu.org/bpg/proxmox" {
-  version     = "0.76.0"
-  constraints = "0.76.0"
+  version     = "0.86.0"
+  constraints = "0.86.0"
  hashes = [
-    "h1:Sa63rzQCfMwGAm7oJ4Fn25xX0/tU50V0T2HpOZQJhwg=",
-    "zh:0fd9529786f688855103a945d70d6ae212281ab08651266bb40a5e9945c4e4d3",
-    "zh:1babbffb85e406c4eeb0821c140f0eb4b580f01a14471a5c9344b9cab9888bc4",
-    "zh:2a052111b42c9adcef471edb5c72268801a2560e25ec75398958854c7cfb1445",
-    "zh:369fe361179f29aadf6c4ccef99329baf7c5ce81ebebab411b361ed4e156bb7a",
-    "zh:4168d53d2d9312ffbbb9f2d2c73a198aca90e77741ade744cc7667ce94bbf00b",
-    "zh:506ae6f2bc49f7762bf54b05a51ac6efb4c22cd696ee5063fe329e35e8819673",
-    "zh:55faa7276c3a600a54e70331afdd9d6a35484b0b1dba871dfa0a2d08a6ba4d51",
-    "zh:57f1bc30e3db042115912d0c2cc3d0fa40a09ed59f34d4340152d8af94e65d74",
-    "zh:72a4ab4a5f04d079426070dbc9eca0f71d29ed080e40ff3f08a072bf84776267",
-    "zh:7854c38e3362aa02c3a454147b9e06c59ec81617c2f524b52654580bd8dae580",
-    "zh:a8c4f28083ff0277ef7d68bb6b4effe4400244e0a18c8d8aab759c9743edc66f",
-    "zh:c5480c547c08d6a9506b2444bf2bb347475f0f8de99698ce56e49b4cbc46acb7",
-    "zh:e7c5b359f584adb16dd534fff108c9403862a9f86806fd7ec3e27136fcd9da5e",
+    "h1:0OH908XIuDk42UTevFCfMMEnDdbsqNzSZBLGqjoj8S0=",
+    "zh:09b627b92a59848769fadfc3d8103eebf070a3800144bf03cb93f44472327f44",
+    "zh:0e19eb7f1047d541e50b97d7ac440ea73685d0c28ed2dbe64217cbe2f0b353e0",
+    "zh:20f1e70091ff3056876618c93afd79527c8995f955d153993e8fbb10fa42593b",
+    "zh:3920315be565976f5a9da0803f8f1a108221282f1bc9e21160669d793af4e0c8",
+    "zh:5133b2a2027428d3926eaa3bcdc0ab65a75305d54f6cbc7c54cce746dfddbc8e",
+    "zh:514c588b04738d55c9e6b1c5a4e3fb1ef4041dfb809d2268f14d29839ecfba59",
+    "zh:55916034025b4833bd6a93bb5948dfb7d00830a772ef74fa70898c6f7de0da0b",
+    "zh:58b485a4b0bde56ca7032fca0ac09cb4c6ff2579e06cf4f2a311bb695baa0df1",
+    "zh:75ebe44e6da4108af5fe02a9cd99ed0189985b486a2a56594952098d161ceb3d",
+    "zh:a8c870bfb5958a3d49d639db3c2761cfb453c6a6f95e5e241890922b11c8a4d8",
+    "zh:c2df2748b9be47a6c3e613667c64874d5cb1d3fbb5b985d6eb9c3af5af298454",
+    "zh:c3059668f4f81e450e555a47310e7042044b335f131643262fd51f9ba96f2214",
+    "zh:ddbbb23910666f70cf4a9587ba57b45f5f58c53a1f8d7cee1d6f90a3d3ef38ef",
+    "zh:e430138b897edcd3b64e4309db34ac872526187782626aa074d8d1647a0abfa8",
    "zh:f26e0763dbe6a6b2195c94b44696f2110f7f55433dc142839be16b9697fa5597",
-    "zh:f6ce33ea77e5a7b380cebf3b8636c5371aab212d4604ccc73e86faa32efe4ba5",
  ]
 }

 provider "registry.opentofu.org/hashicorp/random" {
-  version = "3.7.1"
+  version     = "3.7.2"
+  constraints = "3.7.2"
  hashes = [
-    "h1:v8+6umuoWwD1nKm+3tPcPO8rKHthran7ZSbm7J2xQEc=",
-    "zh:1011387a5127d46e2bf0bd5124a8469506272b2110613d9eb80d178f94bd67a9",
-    "zh:28785c36d6dc331d49e8bf6a30d4ba21ae4378f5d98c43c0aeb42f51efb2e42f",
-    "zh:50fc0e52f0255950404681455420344a16263f91622bd481954606e6e3be9eb2",
-    "zh:563f22c53f40e41cfffdcfac32a9292292c10582183c3f1dd85770cf806bfce9",
-    "zh:586a5615898d369374d4bd7d70bc013cffe7553d3e14638f169a3f745665fee1",
-    "zh:6275f6e5697993048ac088715484a9a5e919682651e098a5ac31e567216bf102",
-    "zh:95a44bb3f012da1e036936d60df2d08f5942a96cb912fc23432d2ee050857527",
-    "zh:a5fe6b0e586645a88d98738739fec40fd7ad83dbc63fe66ff6327aee2dc07f11",
-    "zh:ea57886899b6baf466f3ff978f4482d2fd7fa049c42509cc819431375cddd5bd",
-    "zh:f021cfbe23bdb32738f170c1ae736ffb769a2fa3dcafd0f9906155c2e21377e4",
+    "h1:yHMBbZOIHlXUuBQ8Mhioe0hwmhermuboq2eNNoCJaf8=",
+    "zh:2ffeb1058bd7b21a9e15a5301abb863053a2d42dffa3f6cf654a1667e10f4727",
+    "zh:519319ed8f4312ed76519652ad6cd9f98bc75cf4ec7990a5684c072cf5dd0a5d",
+    "zh:7371c2cc28c94deb9dba62fbac2685f7dde47f93019273a758dd5a2794f72919",
+    "zh:9b0ac4c1d8e36a86b59ced94fa517ae9b015b1d044b3455465cc6f0eab70915d",
+    "zh:c6336d7196f1318e1cbb120b3de8426ce43d4cacd2c75f45dba2dbdba666ce00",
+    "zh:c71f18b0cb5d55a103ea81e346fb56db15b144459123f1be1b0209cffc1deb4e",
+    "zh:d2dc49a6cac2d156e91b0506d6d756809e36bf390844a187f305094336d3e8d8",
+    "zh:d5b5fc881ccc41b268f952dae303501d6ec9f9d24ee11fe2fa56eed7478e15d0",
+    "zh:db9723eaca26d58c930e13fde221d93501529a5cd036b1f167ef8cff6f1a03cc",
+    "zh:fe3359f733f3ab518c6f85f3a9cd89322a7143463263f30321de0973a52d4ad8",
  ]
 }
--- a/modules/proxmox_lxc_container/providers.tf
+++ b/modules/proxmox_lxc_container/providers.tf
@@ -2,7 +2,7 @@ terraform {
  required_providers {
    proxmox = {
      source  = "bpg/proxmox"
-      version = "0.76.0"
+      version = "0.86.0"
    }
    random = {
      source  = "hashicorp/random"
--- a/modules/proxmox_lxc_container/variables.tf
+++ b/modules/proxmox_lxc_container/variables.tf
@@ -77,7 +77,5 @@ variable "disk" {
 variable "debian_tmpl" {
  description = "Debian template to use"
  type        = string
-  default     = "local:vztmpl/debian-12-standard_12.7-1_amd64.tar.zst"
-  ## other possible value
-  # "local:vztmpl/debian-13-standard_13.1-1_amd64.tar.zst"
+  default     = "local:vztmpl/debian-13-standard_13.1-1_amd64.tar.zst"
 }
--- a/providers.tf
+++ b/providers.tf
@@ -2,7 +2,7 @@ terraform {
  required_providers {
    proxmox = {
      source  = "bpg/proxmox"
-      version = "0.76.0"
+      version = "0.86.0"
    }
  }

--- a/terraform.tfvars
+++ b/terraform.tfvars
@@ -1,7 +1,6 @@
 lxc_containers = {
  haproxy = {
    server_desc = "* HAProxy (point de terminaison TLS IPv4)"
-    debian_tmpl = "local:vztmpl/debian-13-standard_13.1-1_amd64.tar.zst"
    ip_suffix   = 2
    tags = [
      "lbservers"
@@ -10,14 +9,13 @@ lxc_containers = {

  bt = {
    server_desc = "* Transmission\n* Sonarr\n* Jackett"
-    debian_tmpl = "local:vztmpl/debian-13-standard_13.1-1_amd64.tar.zst"
    ip_suffix   = 3
    tags = [
      "btservers",
      "resticservers",
      "webservers",
    ]
-    memory_dedicated = 1024
+    memory_dedicated = 2048
    unprivileged     = false
    disk = [{
      size = "150G"
@@ -50,7 +48,6 @@ lxc_containers = {
  web1 = {
    server_desc = "* Shaarli\n* FreshRSS\n* Nextcloud\n* Blog\n* Roundcube\n* Firefly3\n* Repo\n* Koillection"
    ip_suffix   = 5
-    debian_tmpl = "local:vztmpl/debian-13-standard_13.1-1_amd64.tar.zst"
    tags = [
      "pgsqlservers",
      "phpservers",
@@ -99,7 +96,6 @@ lxc_containers = {
  voice1 = {
    server_desc = "* Mumble"
    ip_suffix   = 7
-    debian_tmpl = "local:vztmpl/debian-13-standard_13.1-1_amd64.tar.zst"
    tags = [
      "mumbleservers",
      "resticservers"
@@ -111,7 +107,6 @@ lxc_containers = {
  syslog = {
    server_desc = "* syslog-ng"
    ip_suffix   = 8
-    debian_tmpl = "local:vztmpl/debian-13-standard_13.1-1_amd64.tar.zst"
    tags = [
      "rsyslogservers"
    ]
@@ -124,7 +119,6 @@ lxc_containers = {
  voice3 = {
    server_desc = "* Icecast2"
    ip_suffix   = 9
-    debian_tmpl = "local:vztmpl/debian-13-standard_13.1-1_amd64.tar.zst"
    tags = [
      "icecastservers",
      "webservers"
@@ -210,29 +204,17 @@ lxc_containers = {
    server_desc = "* Gitea"
    ip_suffix   = 16
    tags = [
-      "actrunnerservers",
      "giteaservers",
-      "dockerservers",
      "pgsqlservers",
      "resticservers",
      "webservers",
    ]
-    memory_dedicated = 1024
-    cpu_cores        = 2
-    features = {
-      nesting = true
-      keyctl  = true
-      fuse    = true
-      mount   = null
-    }
+    memory_dedicated = 512
+    cpu_cores        = 1
    disk = [{
      size = "30G"
      path = "/srv"
      },
-      {
-        size = "10G"
-        path = "/var/lib/docker"
-      },
      {
        size = "5G"
        path = "/var/lib/postgresql"
@@ -250,7 +232,6 @@ lxc_containers = {

  vlt1 = {
    server_desc = "* Vaultwarden"
-    debian_tmpl = "local:vztmpl/debian-13-standard_13.1-1_amd64.tar.zst"
    ip_suffix   = 18
    tags = [
      "resticservers",
@@ -276,7 +257,7 @@ lxc_containers = {
        path = "/srv"
      },
      {
-        size = "10G"
+        size = "20G"
        path = "/var/lib/postgresql"
      }
    ]
@@ -308,7 +289,6 @@ lxc_containers = {
  es1 = {
    server_desc = "Elastic Search"
    ip_suffix   = 21
-    debian_tmpl = "local:vztmpl/debian-13-standard_13.1-1_amd64.tar.zst"
    tags = [
      "resticservers",
      "elasticsearchservers"
@@ -342,4 +322,20 @@ lxc_containers = {
      }
    ]
  }
+
+  git2 = {
+    server_desc  = "* act_runner"
+    ip_suffix    = 23
+    unprivileged = false
+    tags = [
+      "podmanservers",
+      "actrunnerservers"
+    ]
+    cpu_cores        = 2
+    memory_dedicated = 2048
+    disk = [{
+      size = "10G"
+      path = "/srv"
+    }]
+  }
 }
--- a/variables.tf
+++ b/variables.tf
@@ -9,7 +9,7 @@ variable "lxc_containers" {
    unprivileged     = optional(bool, true)
    started          = optional(bool, true)
    start_on_boot    = optional(bool, false)
-    debian_tmpl      = optional(string, "local:vztmpl/debian-12-standard_12.7-1_amd64.tar.zst")
+    debian_tmpl      = optional(string, "local:vztmpl/debian-13-standard_13.1-1_amd64.tar.zst")
    disk = optional(list(object({
      path = string
      size = string
Author	SHA1	Message	Date
Clément VÉRET	cb6db91a5f	📈: upgrade mail to debian 13 All checks were successful terraform-lint / terraform-lint (push) Successful in 23s Details	2025-12-05 10:52:59 +01:00
Clément VÉRET	8b0321b9bb	♻️: debian 13 by default Some checks failed terraform-lint / terraform-lint (push) Failing after 22s Details	2025-12-05 08:44:48 +01:00
Clément VÉRET	470a0d06f6	📈: upgrade web3 to debian 13 All checks were successful terraform-lint / terraform-lint (push) Successful in 23s Details	2025-12-04 16:58:13 +01:00
Clément VÉRET	dc5aa33762	📈: upgrade masto1 to debian 13 All checks were successful terraform-lint / terraform-lint (push) Successful in 26s Details	2025-12-04 15:51:20 +01:00
Clément VÉRET	96ec90be88	📈: upgrade pt1 to debian 13	2025-12-04 14:24:14 +01:00
Clément VÉRET	4c92d5a0cf	⚡️: boost git2 All checks were successful terraform-lint / terraform-lint (push) Successful in 23s Details	2025-12-03 10:50:35 +01:00
Clément VÉRET	46e4a47944	⚡️: boost git2 All checks were successful terraform-lint / terraform-lint (push) Successful in 24s Details	2025-12-03 09:40:07 +01:00
VC	edd4b308e6	🚨: lint properly All checks were successful terraform-lint / terraform-lint (push) Successful in 24s Details	2025-11-30 11:53:22 +01:00
Clément VÉRET	0adc22d7d5	📈: upgrade web4/jabber to debian 13 Some checks failed terraform-lint / terraform-lint (push) Failing after 20s Details	2025-11-26 15:01:31 +01:00
Clément VÉRET	ea742ba8b1	📈: upgrade dns1 to debian 13 Some checks failed terraform-lint / terraform-lint (push) Failing after 20s Details	2025-11-26 14:18:55 +01:00
Clément VÉRET	6d12b2f2e3	📈: upgrade unifi/munin/garage1 to debian 13 Some checks failed terraform-lint / terraform-lint (push) Failing after 24s Details	2025-11-26 13:50:06 +01:00
Clément VÉRET	bb95ec8e39	♻️: put tmpl at the same place for each VM All checks were successful terraform-lint / terraform-lint (push) Successful in 23s Details	2025-11-26 13:27:05 +01:00
Clément VÉRET	dcc4384f2f	📈: upgrade ftp to debian 13 All checks were successful terraform-lint / terraform-lint (push) Successful in 23s Details	2025-11-26 13:12:23 +01:00
VC	174f701f0b	⚡️: nerf git1 All checks were successful terraform-lint / terraform-lint (push) Successful in 22s Details	2025-11-23 16:38:31 +01:00
VC	af73e6baec	✨: add git2 All checks were successful terraform-lint / terraform-lint (push) Successful in 1m20s Details	2025-11-23 15:54:54 +01:00
VC	0515c56ea2	🔥: remove git2 Some checks failed terraform-lint / terraform-lint (push) Failing after 1s Details	2025-11-23 14:45:49 +01:00
VC	5fa41832e4	✨: add git2 Some checks failed terraform-lint / terraform-lint (push) Failing after 48s Details	2025-11-23 14:39:49 +01:00
Clément VÉRET	92339dc908	🚀: more memory for bt Some checks failed terraform-lint / terraform-lint (push) Failing after 1s Details	2025-11-18 09:08:47 +01:00
Clément VÉRET	3d2240b49e	📈: upgrade git1 to debian 13 All checks were successful terraform-lint / terraform-lint (push) Successful in 11s Details	2025-11-14 08:38:09 +01:00
CVE	b3ee999685	Merge pull request 'test/podman' (#3 ) from test/podman into main All checks were successful terraform-lint / terraform-lint (push) Successful in 5s Details Reviewed-on: #3	2025-11-13 11:56:24 +01:00
Clément VÉRET	08cf7b6b77	⬆️: upgrade bpg/proxmox All checks were successful terraform-lint / terraform-lint (push) Successful in 6s Details	2025-11-13 11:54:47 +01:00