fix: Linting refactor

.ci/actionlint/actionlint.yml → .github/actionlint.yaml

@@ -1,4 +1,4 @@
 ---
 self-hosted-runner:
   labels:
-    - k8s-homelab
+    - k8s-homelab-runner

.github/workflows/lint.yaml

@@ -13,56 +13,119 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  build:
-    name: Lint
+  actionlint:
+    name: actionlint
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
-      - name: Generate Token
-        uses: actions/create-github-app-token@c1a285145b9d317df6ced56c09f525b5c2b6f755 # v1
-        if: ${{ github.event.pull_request.head.repo.full_name == github.repository }}
-        id: app-token
+      - name: Get changed files
+        id: changed-files
+        uses: tj-actions/changed-files@v45
         with:
-          app-id: ${{ secrets.BOT_APP_ID }}
-          private-key: ${{ secrets.BOT_APP_PRIVATE_KEY }}
-
-      - name: MegaLinter
-        uses: oxsecurity/megalinter/flavors/terraform@1fc052d03c7a43c78fe0fee19c9d648b749e0c01 # v8.3.0
-        env:
-          GITHUB_TOKEN: "${{ steps.app-token.outputs.token }}"
-          PRINT_ALPACA: false
-          VALIDATE_ALL_CODEBASE: ${{ github.event_name == 'workflow_dispatch' }}
-          ENABLE_LINTERS: |-
-            ${{
-              join(
-                fromJSON('
-                  [
-                    "ACTION_ACTIONLINT",
-                    "ANSIBLE_ANSIBLE_LINT",
-                    "COPYPASTE_JSCPD",
-                    "MARKDOWN_MARKDOWNLINT",
-                    "PYTHON_FLAKE8",
-                    "PYTHON_PYLINT",
-                    "REPOSITORY_GIT_DIFF",
-                    "REPOSITORY_SECRETLINT",
-                    "TERRAFORM_TERRAFORM_FMT",
-                    "YAML_PRETTIER",
-                    "YAML_YAMLLINT"
-                  ]
-                '),
-                ','
+          files: |
+            .github/workflows/**/*.yml
+            .github/workflows/**/*.yaml
+
+      - name: Run actionlint
+        if: steps.changed-files.outputs.any_changed == 'true'
+        uses: bjw-s/[email protected]
+        with:
+          actionlint_config: .github/actionlint.yaml
+          file_pattern: ${{ steps.changed-files.outputs.all_changed_files }}
+
+  yamllint:
+    name: yamllint
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Get changed files
+        id: changed-files
+        uses: tj-actions/changed-files@v45
+        with:
+          files: |
+            **.yml
+            **.yaml
+
+      - name: Install yamllint
+        if: steps.changed-files.outputs.any_changed == 'true'
+        shell: bash
+        run: |
+          pip install --user yamllint
+
+      - name: Run yamllint
+        if: steps.changed-files.outputs.any_changed == 'true'
+        shell: bash
+        run: |
+          yamllint --config-file .yamllint.yaml --format github ${{ steps.changed-files.outputs.all_changed_files }}
+
+  markdownlint:
+    name: markdownlint
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Get changed files
+        id: changed-files
+        uses: tj-actions/changed-files@v45
+        with:
+          files: |
+            **.md
+
+      - name: Run markdownlint-cli2
+        if: steps.changed-files.outputs.any_changed == 'true'
+        uses: bjw-s/[email protected]
+        with:
+          markdownlint_config: .markdownlint.yaml
+          file_pattern: ${{ steps.changed-files.outputs.all_changed_files }}
+
+  prettier:
+    name: prettier
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Get changed files
+        id: changed-files
+        uses: tj-actions/changed-files@v45
+
+      - name: Run prettier
+        if: steps.changed-files.outputs.any_changed == 'true'
+        uses: bjw-s/[email protected]
+        with:
+          prettier_ignore: .prettierignore
+          prettier_config: .prettierrc.yaml
+          file_pattern: ${{ steps.changed-files.outputs.all_changed_files }}
+
+  lint_success:
+    needs:
+      - actionlint
+      - prettier
+      - yamllint
+      - markdownlint
+    if: |
+      always()
+    name: Lint successful
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check job status
+        if: >-
+          ${{
+              (
+                contains(needs.*.result, 'failure') || contains(needs.*.result, 'cancelled')
               )
-            }}
-          ACTION_ACTIONLINT_CONFIG_FILE: .ci/actionlint/actionlint.yml
-          ANSIBLE_ANSIBLE_LINT_ARGUMENTS: "-c .ci/ansible-lint/.ansible-lint ansible"
-          COPYPASTE_JSCPD_CONFIG_FILE: .ci/jscpd/jscpd.json
-          MARKDOWN_MARKDOWNLINT_CONFIG_FILE: .ci/markdownlint/markdownlint.yaml
-          MARKDOWN_MARKDOWNLINT_RULES_PATH: .ci/markdownlint/
-          PYTHON_FLAKE8_CONFIG_FILE: .ci/flake8/.flake8
-          YAML_YAMLLINT_CONFIG_FILE: .ci/yamllint/.yamllint.yaml
-          YAML_PRETTIER_CONFIG_FILE: .ci/prettier/.prettierrc.yaml
-          YAML_PRETTIER_ARGUMENTS: --ignore-path .ci/prettier/.prettierignore
+          }}
+        run: exit 1

.pre-commit-config.yaml

@@ -16,7 +16,7 @@ repos:
       - id: yamllint
         args:
           - --config-file
-          - .ci/yamllint/.yamllint.yaml
+          - .yamllint.yaml
 
   - repo: https://github.com/pre-commit/pre-commit-hooks
     rev: v5.0.0
@@ -57,7 +57,7 @@ repos:
       - id: markdownlint
         args:
           - --config
-          - ".ci/markdownlint/.markdownlint.yaml"
+          - .markdownlint.yaml
 
   - repo: https://github.com/jumanjihouse/pre-commit-hooks
     rev: 3.0.0

.ci/yamllint/.yamllint.yaml → .yamllint.yaml

@@ -3,9 +3,13 @@ ignore: |
   hack/
   .private/
   .terraform/
+  .venv/
   .vscode/
   *.sops.*
-  gotk-components.yaml
+  *.zinn.tech.yaml
+  tech-wildcard-tls.yaml
+  wildcard-tls.yaml
+
 extends: default
 rules:
   truthy:

.ci/ansible-lint/.ansible-lint → ansible/.ansible-lint

@@ -1,2 +1,3 @@
+---
 exclude_paths:
   - files/

ansible/files/ragnar/minio.yaml

@@ -1,3 +1,4 @@
+---
 services:
   minio:
     command: server /data --console-address ":9001"

ansible/files/ragnar/node-exporter.yaml

@@ -1,3 +1,4 @@
+---
 services:
   node-exporter:
     command:

ansible/files/ragnar/smartctl-exporter.yaml

@@ -1,3 +1,4 @@
+---
 services:
   smartctl-exporter:
     command:
@@ -6,6 +7,6 @@ services:
     image: quay.io/prometheuscommunity/smartctl-exporter:v0.13.0
     ports:
       - "9633:9633"
-    privileged: True
+    privileged: true
     restart: always
     user: root

ansible/playbooks/update-pikvm-certificate.yaml

@@ -1,3 +1,4 @@
+---
 - name: Update PiKVM Certificate
   hosts: pikvm
   remote_user: root

ansible/playbooks/update-pikvm-configuration.yaml

@@ -1,3 +1,4 @@
+---
 - name: Update PiKVM Configuration
   hosts: pikvm
   remote_user: root

ansible/playbooks/update-proxmox-certificate.yaml

@@ -1,3 +1,4 @@
+---
 - name: Update Proxmox Certificate
   hosts: "ares"
   remote_user: root

ansible/playbooks/update-ragnar-certificate.yaml

@@ -1,3 +1,4 @@
+---
 - name: Update TrueNAS Certificate
   hosts: ragnar
   become: true

ansible/playbooks/update-ragnar-configuration.yaml

@@ -1,3 +1,4 @@
+---
 - name: Update Ragnar Configuration
   hosts: ragnar
   tasks:

ansible/playbooks/update-titan-certificate.yaml

@@ -1,3 +1,4 @@
+---
 - name: Update Gatus Certificate
   hosts: titan
   remote_user: root

ansible/playbooks/update-udmse-configuration.yaml

@@ -1,3 +1,4 @@
+---
 - name: Update Styx Configuration
   hosts: styx
   tasks:

ansible/playbooks/update-unifi-certificate.yaml

@@ -1,3 +1,4 @@
+---
 - name: Update UniFi Certificate
   hosts: styx zeus
   tasks: