ilia
3415340e26
All checks were successful
CI / skip-ci-check (pull_request) Successful in 1m18s
CI / lint-and-test (pull_request) Successful in 1m21s
CI / ansible-validation (pull_request) Successful in 2m43s
CI / secret-scanning (pull_request) Successful in 1m19s
CI / dependency-scan (pull_request) Successful in 1m23s
CI / sast-scan (pull_request) Successful in 2m28s
CI / license-check (pull_request) Successful in 1m20s
CI / vault-check (pull_request) Successful in 2m21s
CI / playbook-test (pull_request) Successful in 2m19s
CI / container-scan (pull_request) Successful in 1m48s
CI / sonar-analysis (pull_request) Successful in 1m26s
CI / workflow-summary (pull_request) Successful in 1m17s
28 lines
1006 B
Markdown
28 lines
1006 B
Markdown
## Overview
|
|
|
|
This repository manages infrastructure automation using **Ansible** for:
|
|
- Development machines (`dev`)
|
|
- Desktop machines (`desktop`)
|
|
- Service hosts (`services`, `qa`, `ansible`, `tailscale`)
|
|
- Proxmox-managed guests for “app projects” (LXC-first, with a KVM path)
|
|
|
|
Primary entrypoint is the **Makefile** (`Makefile`) and playbooks under `playbooks/`.
|
|
|
|
### Goals
|
|
|
|
- **Predictable, repeatable provisioning** of hosts and Proxmox guests
|
|
- **Safe defaults**: avoid destructive automation; prefer guardrails and idempotency
|
|
- **Clear separation** between server vs workstation responsibilities
|
|
- **Secrets handled via Ansible Vault** (never commit plaintext credentials)
|
|
|
|
### Non-goals
|
|
|
|
- Automated decommission/destroy playbooks for infrastructure or guests
|
|
- Managing interactive IDE/editor installs (kept out of Ansible by design)
|
|
|
|
### Target users
|
|
|
|
- You (and collaborators) operating a small homelab / Proxmox environment
|
|
- Contributors extending roles/playbooks in a consistent style
|
|
|