ilia
3415340e26
All checks were successful
CI / skip-ci-check (pull_request) Successful in 1m18s
CI / lint-and-test (pull_request) Successful in 1m21s
CI / ansible-validation (pull_request) Successful in 2m43s
CI / secret-scanning (pull_request) Successful in 1m19s
CI / dependency-scan (pull_request) Successful in 1m23s
CI / sast-scan (pull_request) Successful in 2m28s
CI / license-check (pull_request) Successful in 1m20s
CI / vault-check (pull_request) Successful in 2m21s
CI / playbook-test (pull_request) Successful in 2m19s
CI / container-scan (pull_request) Successful in 1m48s
CI / sonar-analysis (pull_request) Successful in 1m26s
CI / workflow-summary (pull_request) Successful in 1m17s
30 lines
678 B
Markdown
30 lines
678 B
Markdown
# Architecture (canonical doc moved)
|
|
|
|
The canonical architecture document is now:
|
|
|
|
- `project-docs/architecture.md`
|
|
|
|
This `docs/reference/architecture.md` file is kept as a pointer to avoid maintaining two competing sources of truth.
|
|
|
|
## Best Practices
|
|
|
|
### Code Organization
|
|
1. One role = one responsibility
|
|
2. Idempotent tasks
|
|
3. Proper handler usage
|
|
4. Template for configuration
|
|
5. Defaults for flexibility
|
|
|
|
### Security
|
|
1. Vault for all secrets
|
|
2. Least privilege principle
|
|
3. Regular updates
|
|
4. Audit logging
|
|
5. Network segmentation
|
|
|
|
### Operations
|
|
1. Test in check mode
|
|
2. Use tags for selective runs
|
|
3. Document changes
|
|
4. Version control everything
|
|
5. Monitor and alert |