# platform-infra Host baseline and platform services as code (Phase 1–2). Empty until then. **Planned contents:** - Ansible roles: ZFS pool/datasets, Docker, nftables (Docker-aware), SSH hardening, egress filtering, automysqlbackup, ZFS snapshot/`send` jobs. - Base compose projects: Traefik, shared MariaDB, Forgejo + registry, Prometheus/Grafana/Loki, Uptime-Kuma. See [../docs/07-repo-layout-gitops.md](../docs/07-repo-layout-gitops.md).