Graham McIntire
6f0d308fea
- Remove forgejo role, play, group, host_vars, and DNS references - Replace hardcoded /Users/graham/.ssh/ paths with env var lookup - Remove broken setup-user Makefile target - Add community.mysql collection to requirements.yml - Add .ansible/ to .gitignore - git rm --cached .DS_Store files and .vscode/settings.json - Update CLAUDE.md and README.md to reflect actual state - Add findings.md with audit results
38 lines
1.1 KiB
YAML
38 lines
1.1 KiB
YAML
---
|
|
# Host-specific configuration for netbox.vntx.net.
|
|
# Connection
|
|
ansible_user: graham
|
|
ansible_host: 204.110.191.243
|
|
ansible_python_interpreter: /usr/bin/python3
|
|
ansible_ssh_common_args: '-o StrictHostKeyChecking=accept-new'
|
|
|
|
# This host's network is configured out of band; don't let the general role
|
|
# clobber it.
|
|
network:
|
|
skip: true
|
|
|
|
# Public-facing reverse proxy + SSH-from-LAN — mirrors the live ufw rules.
|
|
firewall_allow_rules:
|
|
- port: 80
|
|
proto: tcp
|
|
comment: HTTP
|
|
- port: 443
|
|
proto: tcp
|
|
comment: HTTPS
|
|
|
|
# ---- netbox role overrides ----
|
|
netbox_admins:
|
|
- name: "Graham McIntire"
|
|
email: "graham@vntx.net"
|
|
|
|
netbox_allowed_hosts:
|
|
- netbox.vntx.net
|
|
|
|
netbox_caddy_domain: netbox.vntx.net
|
|
netbox_login_required: true
|
|
|
|
# Secrets — pull from a vault file alongside this one (host_vars/netbox.vntx.net/vault.yml,
|
|
# encrypted with ansible-vault). The role asserts these are set before rendering config.
|
|
netbox_secret_key: "{{ vault_netbox_secret_key }}"
|
|
netbox_db_password: "{{ vault_netbox_db_password }}"
|
|
netbox_api_token_peppers: "{{ vault_netbox_api_token_peppers | default({}) }}"
|