ansible/docs/reference/architecture.md
ilia 3415340e26
All checks were successful
CI / skip-ci-check (pull_request) Successful in 1m18s
CI / lint-and-test (pull_request) Successful in 1m21s
CI / ansible-validation (pull_request) Successful in 2m43s
CI / secret-scanning (pull_request) Successful in 1m19s
CI / dependency-scan (pull_request) Successful in 1m23s
CI / sast-scan (pull_request) Successful in 2m28s
CI / license-check (pull_request) Successful in 1m20s
CI / vault-check (pull_request) Successful in 2m21s
CI / playbook-test (pull_request) Successful in 2m19s
CI / container-scan (pull_request) Successful in 1m48s
CI / sonar-analysis (pull_request) Successful in 1m26s
CI / workflow-summary (pull_request) Successful in 1m17s
Refactor playbooks: servers/workstations, split monitoring, improve shell
2025-12-31 23:13:03 -05:00

678 B

Architecture (canonical doc moved)

The canonical architecture document is now:

  • project-docs/architecture.md

This docs/reference/architecture.md file is kept as a pointer to avoid maintaining two competing sources of truth.

Best Practices

Code Organization

  1. One role = one responsibility
  2. Idempotent tasks
  3. Proper handler usage
  4. Template for configuration
  5. Defaults for flexibility

Security

  1. Vault for all secrets
  2. Least privilege principle
  3. Regular updates
  4. Audit logging
  5. Network segmentation

Operations

  1. Test in check mode
  2. Use tags for selective runs
  3. Document changes
  4. Version control everything
  5. Monitor and alert