diff options
| author | Miguel Dalberto Pedro <miguel.pedro@precisioninno.com> | 2026-10-29 12:48:06 -0300 |
|---|---|---|
| committer | Miguel Dalberto Pedro <miguel.pedro@precisioninno.com> | 2026-10-29 12:48:06 -0300 |
| commit | 4b7379914a1865f07b2c54252234cc90158fc253 (patch) | |
| tree | a476c7e08bb994034d7d04b5b1cdfce216f49c43 /group_vars/all/vars.yml | |
| download | my-infra-4b7379914a1865f07b2c54252234cc90158fc253.tar.gz my-infra-4b7379914a1865f07b2c54252234cc90158fc253.zip | |
feat(iac): establish Ansible baseline for Nginx, SearXNG, Valkey, and Certbot
- Reverse-engineer live Debian 13 (trixie) VPS state at miguelpedro.xyz.br
- Add modular Ansible roles: common, certbot, valkey, searxng, and nginx
- Encrypt SearXNG secret_key using ansible-vault in group_vars/all/vault.yml
- Cleanly remove unused example.com Nginx stub symlink (sites-enabled/miguelpedro.xyz.br)
- Scaffold cgit + fcgiwrap role (cgit_enabled: false) for upcoming deployment
- Add DISCOVERY_REPORT.md, COMMAND_LOG.md, README.md, and AGENT_INSTRUCTIONS.md with Self-Updating Protocol
Diffstat (limited to 'group_vars/all/vars.yml')
| -rw-r--r-- | group_vars/all/vars.yml | 44 |
1 files changed, 44 insertions, 0 deletions
diff --git a/group_vars/all/vars.yml b/group_vars/all/vars.yml new file mode 100644 index 0000000..8ecb430 --- /dev/null +++ b/group_vars/all/vars.yml @@ -0,0 +1,44 @@ +--- +# Global Infrastructure Variables + +# Domains +primary_domain: miguelpedro.xyz.br +primary_domain_aliases: + - www.miguelpedro.xyz.br +searxng_domain: searx.miguelpedro.xyz.br +cgit_domain: git.miguelpedro.xyz.br + +# Web roots +default_web_root: /var/www/html +primary_web_root: /var/www/miguelpedro.xyz.br/html + +# Nginx configuration +nginx_remove_unused_sites: + - miguelpedro.xyz.br + +# Valkey configuration +valkey_bind_addresses: "127.0.0.1 -::1" +valkey_port: 6379 + +# SearXNG configuration +searxng_user: searxng +searxng_group: searxng +searxng_uid: 988 +searxng_gid: 988 +searxng_home: /usr/local/searxng +searxng_src_dir: /usr/local/searxng/searxng-src +searxng_venv_dir: /usr/local/searxng/searx-pyenv +searxng_run_dir: /usr/local/searxng/run +searxng_socket_path: /usr/local/searxng/run/socket +searxng_git_repo: https://github.com/searxng/searxng +searxng_git_version: b5ed73fcb6c6bda5d4e8b13d1472aa3917f784dc +searxng_instance_name: "SearXNG" +searxng_base_url: "https://{{ searxng_domain }}/" +searxng_valkey_url: "valkey://localhost:6379/0" +searxng_secret_key: "{{ vault_searxng_secret_key }}" + +# Future cgit deployment toggle & defaults +cgit_enabled: false +cgit_repos_path: /srv/git +cgit_title: "Miguel Pedro Git Repositories" +cgit_description: "Self-hosted Git repositories powered by cgit" |