platform/platform-infra
Bart Van Geyt 21ff7026a0 docs(ansible): note WSL /mnt/c world-writable config caveat
Running the playbook from /mnt/c in WSL makes Ansible ignore ansible.cfg
(world-writable dir), losing the inventory. Document the fix (copy to WSL
home, or export ANSIBLE_CONFIG) plus the inventory/syntax-check reminders.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-09 04:45:39 +02:00
..
ansible docs(ansible): note WSL /mnt/c world-writable config caveat 2026-07-09 04:45:39 +02:00
stacks Phase 2: platform service stacks + CLAUDE.md 2026-07-07 16:58:18 +02:00
README.md Phase 1: Ansible host baseline for Ubuntu VM 2026-07-07 12:45:42 +02:00

platform-infra

Host baseline and platform services as code.

ansible/ — Phase 1 host baseline

Idempotent Ubuntu 24.04 host config. See ansible/README.md for how to run it.

Roles: base (packages, timezone, unattended-upgrades) → zfs (pool on a dedicated disk + platform datasets) → docker (Engine + Compose, data-root on ZFS, zfs storage driver) → firewall (nftables inbound + container SMTP egress block) → ssh_hardening (key-first SSH, sftponly group).

Planned (later phases)

  • Phase 2 base compose projects: Traefik, shared MariaDB, Forgejo + registry, Prometheus/Grafana/Loki, Uptime-Kuma.
  • Phase 5 Ansible: automysqlbackup, ZFS snapshot/send jobs.

See ../docs/07-repo-layout-gitops.md.