From 4b7379914a1865f07b2c54252234cc90158fc253 Mon Sep 17 00:00:00 2001
From: Miguel Dalberto Pedro <miguel.pedro@precisioninno.com>
Date: Thu, 29 Oct 2026 12:48:06 -0300
Subject: feat(iac): establish Ansible baseline for Nginx, SearXNG, Valkey, and
 Certbot

- Reverse-engineer live Debian 13 (trixie) VPS state at miguelpedro.xyz.br
- Add modular Ansible roles: common, certbot, valkey, searxng, and nginx
- Encrypt SearXNG secret_key using ansible-vault in group_vars/all/vault.yml
- Cleanly remove unused example.com Nginx stub symlink (sites-enabled/miguelpedro.xyz.br)
- Scaffold cgit + fcgiwrap role (cgit_enabled: false) for upcoming deployment
- Add DISCOVERY_REPORT.md, COMMAND_LOG.md, README.md, and AGENT_INSTRUCTIONS.md with Self-Updating Protocol
---
 group_vars/all/vars.yml | 44 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 44 insertions(+)
 create mode 100644 group_vars/all/vars.yml

(limited to 'group_vars/all/vars.yml')

diff --git a/group_vars/all/vars.yml b/group_vars/all/vars.yml
new file mode 100644
index 0000000..8ecb430
--- /dev/null
+++ b/group_vars/all/vars.yml
@@ -0,0 +1,44 @@
+---
+# Global Infrastructure Variables
+
+# Domains
+primary_domain: miguelpedro.xyz.br
+primary_domain_aliases:
+  - www.miguelpedro.xyz.br
+searxng_domain: searx.miguelpedro.xyz.br
+cgit_domain: git.miguelpedro.xyz.br
+
+# Web roots
+default_web_root: /var/www/html
+primary_web_root: /var/www/miguelpedro.xyz.br/html
+
+# Nginx configuration
+nginx_remove_unused_sites:
+  - miguelpedro.xyz.br
+
+# Valkey configuration
+valkey_bind_addresses: "127.0.0.1 -::1"
+valkey_port: 6379
+
+# SearXNG configuration
+searxng_user: searxng
+searxng_group: searxng
+searxng_uid: 988
+searxng_gid: 988
+searxng_home: /usr/local/searxng
+searxng_src_dir: /usr/local/searxng/searxng-src
+searxng_venv_dir: /usr/local/searxng/searx-pyenv
+searxng_run_dir: /usr/local/searxng/run
+searxng_socket_path: /usr/local/searxng/run/socket
+searxng_git_repo: https://github.com/searxng/searxng
+searxng_git_version: b5ed73fcb6c6bda5d4e8b13d1472aa3917f784dc
+searxng_instance_name: "SearXNG"
+searxng_base_url: "https://{{ searxng_domain }}/"
+searxng_valkey_url: "valkey://localhost:6379/0"
+searxng_secret_key: "{{ vault_searxng_secret_key }}"
+
+# Future cgit deployment toggle & defaults
+cgit_enabled: false
+cgit_repos_path: /srv/git
+cgit_title: "Miguel Pedro Git Repositories"
+cgit_description: "Self-hosted Git repositories powered by cgit"
-- 
cgit v1.2.3