ced4568
507ac4c5d3
common/firewall/docker-tls/platform/lab-host/monitoring-agent/backup roles, orchestrated by site.yml with the ordering that matters (firewall/TLS land before the services that depend on them). Ansible Vault for secrets, no new tool introduced for this project's modest secret surface. Explicit dev/staging/production environment separation, no secrets committed (.gitignore covers vault plaintext, TLS keys, Terraform state, *.env). Validated: ansible-playbook --syntax-check clean.
8 lines
415 B
Django/Jinja
8 lines
415 B
Django/Jinja
# Docker's systemd unit specifies `-H fd://` on ExecStart by default, which conflicts with
|
|
# setting `hosts` in daemon.json ("specified both as a flag and in the configuration file").
|
|
# This override clears ExecStart and re-specifies it with no -H flag, letting daemon.json's
|
|
# `hosts` list be the only source of truth — the documented fix for this exact conflict.
|
|
[Service]
|
|
ExecStart=
|
|
ExecStart=/usr/bin/dockerd
|