Files

T

ced4568 507ac4c5d3 feat(ansible): idempotent role-based host config for both production VMs

common/firewall/docker-tls/platform/lab-host/monitoring-agent/backup roles,
orchestrated by site.yml with the ordering that matters (firewall/TLS land
before the services that depend on them). Ansible Vault for secrets, no new
tool introduced for this project's modest secret surface. Explicit
dev/staging/production environment separation, no secrets committed
(.gitignore covers vault plaintext, TLS keys, Terraform state, *.env).

Validated: ansible-playbook --syntax-check clean.

2026-08-18 17:13:01 -05:00

325 B

Raw Blame History

Dev environment

Nothing new here for Phase 4 — dev still means platform/docker-compose.dev.yml + platform/.env (gitignored), exactly as built in Phases 1–3B. See platform/README.md.

This directory exists only so infra/environments/ visibly has all three tiers, not because dev needed new infrastructure code.

325 B Raw Blame History Unescape Escape

Dev environment

325 B

Raw Blame History