# `base_os`

Baseline OS configuration for app guests:

- Installs required packages (git/curl/nodejs/npm/ufw/openssh-server/etc.)
- Creates deployment user (default `appuser`) with passwordless sudo
- Adds your authorized SSH key
- Configures UFW to allow SSH + backend/frontend ports

## Variables

See [`defaults/main.yml`](defaults/main.yml). Common inputs in the app stack:

- `appuser_name`, `appuser_groups`, `appuser_shell`
- `appuser_ssh_public_key` (usually `{{ vault_ssh_public_key }}`)
- `components.backend`, `components.frontend` (enable/disable firewall rules per component)
- `app_backend_port`, `app_frontend_port`

This role is used by `playbooks/app/configure_app.yml` after provisioning.