fix: public DNS for semaphore container (galaxy AAAA-only via corporate DNS)

2026-08-24 08:16:50 +02:00
parent a245e97136
commit 518671948c
1 changed files with 6 additions and 1 deletions
@@ -24,7 +24,12 @@ in {
    volumes = [
      "semaphore_data:/var/lib/semaphore"
    ];
-    extraOptions = ["--network=web" "--ip=10.89.0.17" "--add-host=postgres:10.89.0.1"];
+    # Public DNS: the corporate DNS behind aardvark answers AAAA queries for
+    # galaxy.ansible.com but not A queries — with no IPv6 route in the web
+    # network ansible-galaxy downloads failed (EAI_AGAIN / empty responses).
+    # Bypass with public resolvers; git.az-gruppe.com is publicly resolvable,
+    # targets connect by IP (same pattern as librechat/homarr on AZ-CLD-1).
+    extraOptions = ["--network=web" "--ip=10.89.0.17" "--add-host=postgres:10.89.0.1" "--dns=8.8.8.8" "--dns=8.8.4.4"];
  };

  # Idempotent provisioning of the semaphore role/database on the host