Murat ÖZDEMİR
9e20f2fcf8
Document and commit the production bootstrap state after the initial Hetzner and Ansible rollout. - switch Ansible prod runbooks to use the shared vault password file - record production admin CIDRs, SSH key path, encrypted group vault, and encrypted per-host vault files - add generated production inventory and the prod setup history notes from the first bootstrap - keep root password login disabled while preserving key-based root access for Ansible bootstrap continuity - document separate Hetzner projects and tokens for test/prod and commit the prod provider lock file - remove the private Redis firewall allowance from the prod Terraform firewall and matching setup docs
25 lines
941 B
YAML
25 lines
941 B
YAML
storagebox_account: "u469968"
|
|
storagebox_user: "{{ storagebox_account }}-sub5"
|
|
storagebox_url: "https://{{ storagebox_user }}.your-storagebox.de/"
|
|
storagebox_mount_point: "/mnt/storagebox"
|
|
storagebox_password: "{{ vault_storagebox_password }}"
|
|
storagebox_managed_directories:
|
|
- path: "{{ storagebox_mount_point }}/ssl"
|
|
mode: "0755"
|
|
- path: "{{ storagebox_mount_point }}/swag/config"
|
|
mode: "0755"
|
|
- path: "{{ storagebox_mount_point }}/swag/site-confs"
|
|
mode: "0755"
|
|
- path: "{{ storagebox_mount_point }}/grafana/data"
|
|
mode: "0755"
|
|
- path: "{{ storagebox_mount_point }}/precipitation/images"
|
|
mode: "0755"
|
|
|
|
iklim_password: "{{ vault_iklim_password }}"
|
|
act_runner_labels: "prod-runner,ubuntu-24.04,{{ inventory_hostname }}"
|
|
swarm_manager_ip: "10.20.10.11"
|
|
mongodb_replset_name: "rs0"
|
|
admin_allowed_cidrs: "78.187.87.109/32 95.70.151.248/32"
|
|
admin_ssh_public_key_path: "~/.ssh/id_rsa.pub"
|
|
timezone: "Europe/Istanbul"
|