pluto
b9be45dc71
Complete IaC covering: - 14 roles: common, docker, traefik, vaultwarden, monitoring, media, matrix, home_assistant, frigate, adguard, gitea, semaphore, openclaw, security, backup - Inventory for all hosts (Peggy, Bart, Yoda, NAS, Firewalla) - Stack playbooks: core-infrastructure, monitoring, media, communication, automation, smarthome, security-hardening - Maintenance playbooks: update-containers, backup, health-check - Production Docker Compose templates with Traefik labels - Security hardening (sysctl, auditd, UFW, fail2ban) - Automated backups with retention policy
26 lines
598 B
INI
26 lines
598 B
INI
[defaults]
|
|
inventory = inventory/hosts.yml
|
|
roles_path = roles
|
|
remote_user = glyptic
|
|
private_key_file = ~/.ssh/id_docker_server
|
|
host_key_checking = False
|
|
retry_files_enabled = False
|
|
stdout_callback = yaml
|
|
callbacks_enabled = timer, profile_tasks
|
|
forks = 10
|
|
timeout = 30
|
|
gathering = smart
|
|
fact_caching = jsonfile
|
|
fact_caching_connection = .fact_cache
|
|
fact_caching_timeout = 3600
|
|
|
|
[privilege_escalation]
|
|
become = True
|
|
become_method = sudo
|
|
become_user = root
|
|
become_ask_pass = False
|
|
|
|
[ssh_connection]
|
|
pipelining = True
|
|
ssh_args = -o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=no
|