Files

T

CubelaPetarandClaude Fable 5 277f378fb8 Fix stale sftp IP, ansible.cfg keys, drop dead shutdown playbook

- sftp IP 192.168.99.68 in CLAUDE.md and server README (DMZ move)
- ansible.cfg: ansible_python_interpreter is a host var, moved to
  group_vars/all.yml; [ssh_connections] -> [ssh_connection] so
  pipelining actually applies
- remove playbooks/shutdown.yml (targeted nonexistent k3s_cluster group)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-14 10:30:43 +02:00

group_vars

Fix stale sftp IP, ansible.cfg keys, drop dead shutdown playbook

2026-07-14 10:30:43 +02:00

playbooks

Fix stale sftp IP, ansible.cfg keys, drop dead shutdown playbook

2026-07-14 10:30:43 +02:00

roles/nextcloud

first commit

2026-07-10 09:57:37 +02:00

ansible.cfg

Fix stale sftp IP, ansible.cfg keys, drop dead shutdown playbook

2026-07-14 10:30:43 +02:00

hosts.ini

changed sftp ip in hosts file as it lives in dmz and not in srv vlan

2026-07-14 09:47:46 +02:00

justfile

first commit

2026-07-10 09:57:37 +02:00

LICENSE

first commit

2026-07-10 09:57:37 +02:00

README.md

Clean up inventory, group_vars, and prefill READMEs

2026-07-10 14:40:00 +02:00

requirements.yml

first commit

2026-07-10 09:57:37 +02:00

run.yml

Clean up inventory, group_vars, and prefill READMEs

2026-07-10 14:40:00 +02:00

TODO.md

first commit

2026-07-10 09:57:37 +02:00

README.md

Ansible

Global configuration for all Phytron servers. Run everything from this directory, preferably via just.

Layout

hosts.ini — inventory; one group per host (phy_z_*), host aliases match the real hostnames
group_vars/all.yml — defaults for all hosts; group_vars/<group>.yml holds per-host overrides only
group_vars/secrets.yml — ansible-vault encrypted secrets
run.yml — main playbook; playbooks/ — utilities (update, shutdown)
roles/ — custom roles; external roles come from requirements.yml

Usage

just reqs                     # install Galaxy role requirements
just run <HOST> [ARGS]       # run run.yml against one host, e.g. just run phy_z_srv_cloud
just compose <HOST>          # docker compose tasks only (--tags compose)
just vault edit              # edit encrypted secrets (encrypt/decrypt/edit)