From 4b7379914a1865f07b2c54252234cc90158fc253 Mon Sep 17 00:00:00 2001
From: Miguel Dalberto Pedro <miguel.pedro@precisioninno.com>
Date: Thu, 29 Oct 2026 12:48:06 -0300
Subject: feat(iac): establish Ansible baseline for Nginx, SearXNG, Valkey, and
 Certbot

- Reverse-engineer live Debian 13 (trixie) VPS state at miguelpedro.xyz.br
- Add modular Ansible roles: common, certbot, valkey, searxng, and nginx
- Encrypt SearXNG secret_key using ansible-vault in group_vars/all/vault.yml
- Cleanly remove unused example.com Nginx stub symlink (sites-enabled/miguelpedro.xyz.br)
- Scaffold cgit + fcgiwrap role (cgit_enabled: false) for upcoming deployment
- Add DISCOVERY_REPORT.md, COMMAND_LOG.md, README.md, and AGENT_INSTRUCTIONS.md with Self-Updating Protocol
---
 group_vars/all/vault.yml | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 group_vars/all/vault.yml

(limited to 'group_vars/all/vault.yml')

diff --git a/group_vars/all/vault.yml b/group_vars/all/vault.yml
new file mode 100644
index 0000000..24d2418
--- /dev/null
+++ b/group_vars/all/vault.yml
@@ -0,0 +1,11 @@
+$ANSIBLE_VAULT;1.1;AES256
+36346435326632643666656638653461633663663564343262616135663231366637656338326431
+6538316131393133626634383632633838376535613733630a613733373063373930633163653330
+37323430646462313032373861613437653761623663663438313334383662363539393430643566
+3765613065353866620a616530386436623063346265376235363338333437653331343065626132
+38326565663137393061373566323435623065323631646337636437616539343239363162303538
+39366236643239616434633238323761666535636631643636373966653363306536353031646366
+31663431363233616239643165326161363163623761373734643438353930323233666263313334
+34373034396261346130366231353065666632343032323761653738636364623763353238643563
+32316233323436636265306366356639323865313062663561613039303238306639393933303634
+3965616565613436663032356437383862643034333231326165
-- 
cgit v1.2.3