diff options
| author | Miguel Dalberto Pedro <miguel.pedro@precisioninno.com> | 2026-10-29 12:48:06 -0300 |
|---|---|---|
| committer | Miguel Dalberto Pedro <miguel.pedro@precisioninno.com> | 2026-10-29 12:48:06 -0300 |
| commit | 4b7379914a1865f07b2c54252234cc90158fc253 (patch) | |
| tree | a476c7e08bb994034d7d04b5b1cdfce216f49c43 /group_vars/all | |
| download | my-infra-4b7379914a1865f07b2c54252234cc90158fc253.tar.gz my-infra-4b7379914a1865f07b2c54252234cc90158fc253.zip | |
feat(iac): establish Ansible baseline for Nginx, SearXNG, Valkey, and Certbot
- Reverse-engineer live Debian 13 (trixie) VPS state at miguelpedro.xyz.br
- Add modular Ansible roles: common, certbot, valkey, searxng, and nginx
- Encrypt SearXNG secret_key using ansible-vault in group_vars/all/vault.yml
- Cleanly remove unused example.com Nginx stub symlink (sites-enabled/miguelpedro.xyz.br)
- Scaffold cgit + fcgiwrap role (cgit_enabled: false) for upcoming deployment
- Add DISCOVERY_REPORT.md, COMMAND_LOG.md, README.md, and AGENT_INSTRUCTIONS.md with Self-Updating Protocol
Diffstat (limited to 'group_vars/all')
| -rw-r--r-- | group_vars/all/vars.yml | 44 | ||||
| -rw-r--r-- | group_vars/all/vault.yml | 11 |
2 files changed, 55 insertions, 0 deletions
diff --git a/group_vars/all/vars.yml b/group_vars/all/vars.yml new file mode 100644 index 0000000..8ecb430 --- /dev/null +++ b/group_vars/all/vars.yml @@ -0,0 +1,44 @@ +--- +# Global Infrastructure Variables + +# Domains +primary_domain: miguelpedro.xyz.br +primary_domain_aliases: + - www.miguelpedro.xyz.br +searxng_domain: searx.miguelpedro.xyz.br +cgit_domain: git.miguelpedro.xyz.br + +# Web roots +default_web_root: /var/www/html +primary_web_root: /var/www/miguelpedro.xyz.br/html + +# Nginx configuration +nginx_remove_unused_sites: + - miguelpedro.xyz.br + +# Valkey configuration +valkey_bind_addresses: "127.0.0.1 -::1" +valkey_port: 6379 + +# SearXNG configuration +searxng_user: searxng +searxng_group: searxng +searxng_uid: 988 +searxng_gid: 988 +searxng_home: /usr/local/searxng +searxng_src_dir: /usr/local/searxng/searxng-src +searxng_venv_dir: /usr/local/searxng/searx-pyenv +searxng_run_dir: /usr/local/searxng/run +searxng_socket_path: /usr/local/searxng/run/socket +searxng_git_repo: https://github.com/searxng/searxng +searxng_git_version: b5ed73fcb6c6bda5d4e8b13d1472aa3917f784dc +searxng_instance_name: "SearXNG" +searxng_base_url: "https://{{ searxng_domain }}/" +searxng_valkey_url: "valkey://localhost:6379/0" +searxng_secret_key: "{{ vault_searxng_secret_key }}" + +# Future cgit deployment toggle & defaults +cgit_enabled: false +cgit_repos_path: /srv/git +cgit_title: "Miguel Pedro Git Repositories" +cgit_description: "Self-hosted Git repositories powered by cgit" diff --git a/group_vars/all/vault.yml b/group_vars/all/vault.yml new file mode 100644 index 0000000..24d2418 --- /dev/null +++ b/group_vars/all/vault.yml @@ -0,0 +1,11 @@ +$ANSIBLE_VAULT;1.1;AES256 +36346435326632643666656638653461633663663564343262616135663231366637656338326431 +6538316131393133626634383632633838376535613733630a613733373063373930633163653330 +37323430646462313032373861613437653761623663663438313334383662363539393430643566 +3765613065353866620a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|