bart/platform
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
platform/platform-infra
History
Bart Van Geyt 3678f43767 docs(ansible): document -K / passwordless sudo for become 
The playbook runs everything via become(root); note that -K
(--ask-become-pass) is required unless the target user has passwordless
sudo. Replace the misleading --check first-run hint with --syntax-check.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-09 05:01:20 +02:00
..
ansible docs(ansible): document -K / passwordless sudo for become 2026-07-09 05:01:20 +02:00
stacks Phase 2: platform service stacks + CLAUDE.md 2026-07-07 16:58:18 +02:00
README.md Phase 1: Ansible host baseline for Ubuntu VM 2026-07-07 12:45:42 +02:00

README.md

platform-infra

Host baseline and platform services as code.

ansible/ — Phase 1 host baseline ✅

Idempotent Ubuntu 24.04 host config. See ansible/README.md for how to run it.

Roles: base (packages, timezone, unattended-upgrades) → zfs (pool on a dedicated disk + platform datasets) → docker (Engine + Compose, data-root on ZFS, zfs storage driver) → firewall (nftables inbound + container SMTP egress block) → ssh_hardening (key-first SSH, sftponly group).

Planned (later phases)

  • Phase 2 base compose projects: Traefik, shared MariaDB, Forgejo + registry, Prometheus/Grafana/Loki, Uptime-Kuma.
  • Phase 5 Ansible: automysqlbackup, ZFS snapshot/send jobs.

See ../docs/07-repo-layout-gitops.md.