ansible/roles/base_os

base_os

Baseline OS configuration for app guests:

• Installs required packages (git/curl/nodejs/npm/ufw/openssh-server/etc.)
• Creates deployment user (default appuser) with passwordless sudo
• Adds your authorized SSH key
• Configures UFW to allow SSH + backend/frontend ports

Variables

See defaults/main.yml. Common inputs in the app stack:

• appuser_name, appuser_groups, appuser_shell
• appuser_ssh_public_key (usually {{ vault_ssh_public_key }})
• components.backend, components.frontend (enable/disable firewall rules per component)
• app_backend_port, app_frontend_port

This role is used by playbooks/app/configure_app.yml after provisioning.