bart/platform
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
platform/platform-infra
History
Exact
Bart Van Geyt a90d07875d chore(ansible): set admin ed25519 key for platform hosts 
Provide the admin's ed25519 public key in admin_authorized_keys so the
ssh_hardening role installs it, enabling key-based login (and allowing
ssh_disable_password_auth to be flipped on later).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-09 03:54:01 +02:00
..
ansible chore(ansible): set admin ed25519 key for platform hosts 2026-08-09 03:54:01 +02:00
stacks fix(stacks/traefik): pin v3.7.10 so Docker provider works on Engine 29 2026-08-09 03:52:45 +02:00
README.md Phase 1: Ansible host baseline for Ubuntu VM 2026-07-07 12:45:42 +02:00

README.md

platform-infra

Host baseline and platform services as code.

ansible/ — Phase 1 host baseline ✅

Idempotent Ubuntu 24.04 host config. See ansible/README.md for how to run it.

Roles: base (packages, timezone, unattended-upgrades) → zfs (pool on a dedicated disk + platform datasets) → docker (Engine + Compose, data-root on ZFS, zfs storage driver) → firewall (nftables inbound + container SMTP egress block) → ssh_hardening (key-first SSH, sftponly group).

Planned (later phases)

  • Phase 2 base compose projects: Traefik, shared MariaDB, Forgejo + registry, Prometheus/Grafana/Loki, Uptime-Kuma.
  • Phase 5 Ansible: automysqlbackup, ZFS snapshot/send jobs.

See ../docs/07-repo-layout-gitops.md.