From 4b7379914a1865f07b2c54252234cc90158fc253 Mon Sep 17 00:00:00 2001
From: Miguel Dalberto Pedro <miguel.pedro@precisioninno.com>
Date: Thu, 29 Oct 2026 12:48:06 -0300
Subject: feat(iac): establish Ansible baseline for Nginx, SearXNG, Valkey, and
 Certbot

- Reverse-engineer live Debian 13 (trixie) VPS state at miguelpedro.xyz.br
- Add modular Ansible roles: common, certbot, valkey, searxng, and nginx
- Encrypt SearXNG secret_key using ansible-vault in group_vars/all/vault.yml
- Cleanly remove unused example.com Nginx stub symlink (sites-enabled/miguelpedro.xyz.br)
- Scaffold cgit + fcgiwrap role (cgit_enabled: false) for upcoming deployment
- Add DISCOVERY_REPORT.md, COMMAND_LOG.md, README.md, and AGENT_INSTRUCTIONS.md with Self-Updating Protocol
---
 roles/common/tasks/main.yml | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 roles/common/tasks/main.yml

(limited to 'roles/common/tasks')

diff --git a/roles/common/tasks/main.yml b/roles/common/tasks/main.yml
new file mode 100644
index 0000000..413a3dd
--- /dev/null
+++ b/roles/common/tasks/main.yml
@@ -0,0 +1,26 @@
+---
+- name: Ensure base system and build dependencies are installed
+  ansible.builtin.apt:
+    name:
+      - build-essential
+      - ca-certificates
+      - curl
+      - git
+      - libffi-dev
+      - libssl-dev
+      - libxslt1-dev
+      - nftables
+      - python-is-python3
+      - python3
+      - python3-babel
+      - python3-dev
+      - python3-venv
+      - screen
+      - shellcheck
+      - uwsgi
+      - uwsgi-plugin-python3
+      - vim
+      - wget
+      - zlib1g-dev
+    state: present
+    update_cache: false
-- 
cgit v1.2.3