common/firewall/docker-tls/platform/lab-host/monitoring-agent/backup roles, orchestrated by site.yml with the ordering that matters (firewall/TLS land before the services that depend on them). Ansible Vault for secrets, no new tool introduced for this project's modest secret surface. Explicit dev/staging/production environment separation, no secrets committed (.gitignore covers vault plaintext, TLS keys, Terraform state, *.env). Validated: ansible-playbook --syntax-check clean.
8 lines
325 B
Markdown
8 lines
325 B
Markdown
# Dev environment
|
||
|
||
Nothing new here for Phase 4 — dev still means `platform/docker-compose.dev.yml` +
|
||
`platform/.env` (gitignored), exactly as built in Phases 1–3B. See `platform/README.md`.
|
||
|
||
This directory exists only so `infra/environments/` visibly has all three tiers, not because
|
||
dev needed new infrastructure code.
|