diff options
| author | Miguel Dalberto Pedro <miguel.pedro@precisioninno.com> | 2026-10-29 12:48:06 -0300 |
|---|---|---|
| committer | Miguel Dalberto Pedro <miguel.pedro@precisioninno.com> | 2026-10-29 12:48:06 -0300 |
| commit | 4b7379914a1865f07b2c54252234cc90158fc253 (patch) | |
| tree | a476c7e08bb994034d7d04b5b1cdfce216f49c43 /site.yml | |
| download | my-infra-4b7379914a1865f07b2c54252234cc90158fc253.tar.gz my-infra-4b7379914a1865f07b2c54252234cc90158fc253.zip | |
feat(iac): establish Ansible baseline for Nginx, SearXNG, Valkey, and Certbot
- Reverse-engineer live Debian 13 (trixie) VPS state at miguelpedro.xyz.br
- Add modular Ansible roles: common, certbot, valkey, searxng, and nginx
- Encrypt SearXNG secret_key using ansible-vault in group_vars/all/vault.yml
- Cleanly remove unused example.com Nginx stub symlink (sites-enabled/miguelpedro.xyz.br)
- Scaffold cgit + fcgiwrap role (cgit_enabled: false) for upcoming deployment
- Add DISCOVERY_REPORT.md, COMMAND_LOG.md, README.md, and AGENT_INSTRUCTIONS.md with Self-Updating Protocol
Diffstat (limited to 'site.yml')
| -rw-r--r-- | site.yml | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/site.yml b/site.yml new file mode 100644 index 0000000..97f42ed --- /dev/null +++ b/site.yml @@ -0,0 +1,18 @@ +--- +- name: Configure and manage miguelpedro.xyz.br VPS + hosts: vps + become: true + roles: + - role: common + tags: [common] + - role: certbot + tags: [certbot, tls] + - role: valkey + tags: [valkey, searxng] + - role: searxng + tags: [searxng] + - role: nginx + tags: [nginx, web] + - role: cgit + tags: [cgit] + when: cgit_enabled | default(false) | bool |