Murat ÖZDEMİR
9e20f2fcf8
Document and commit the production bootstrap state after the initial Hetzner and Ansible rollout. - switch Ansible prod runbooks to use the shared vault password file - record production admin CIDRs, SSH key path, encrypted group vault, and encrypted per-host vault files - add generated production inventory and the prod setup history notes from the first bootstrap - keep root password login disabled while preserving key-based root access for Ansible bootstrap continuity - document separate Hetzner projects and tokens for test/prod and commit the prod provider lock file - remove the private Redis firewall allowance from the prod Terraform firewall and matching setup docs
32 lines
943 B
YAML
32 lines
943 B
YAML
"all":
|
|
"children":
|
|
"app":
|
|
"hosts":
|
|
"iklim-app-01":
|
|
"ansible_host": "178.104.210.41"
|
|
"ansible_user": "root"
|
|
"hetzner_floating_ip": "78.47.220.82"
|
|
"private_ip": "10.20.10.11"
|
|
"iklim-app-02":
|
|
"ansible_host": "178.105.69.1"
|
|
"ansible_user": "root"
|
|
"private_ip": "10.20.10.12"
|
|
"iklim-app-03":
|
|
"ansible_host": "178.104.219.3"
|
|
"ansible_user": "root"
|
|
"private_ip": "10.20.10.13"
|
|
"db":
|
|
"hosts":
|
|
"iklim-db-01":
|
|
"ansible_host": "159.69.117.158"
|
|
"ansible_user": "root"
|
|
"private_ip": "10.20.20.11"
|
|
"iklim-db-02":
|
|
"ansible_host": "178.104.219.162"
|
|
"ansible_user": "root"
|
|
"private_ip": "10.20.20.12"
|
|
"iklim-db-03":
|
|
"ansible_host": "159.69.115.105"
|
|
"ansible_user": "root"
|
|
"private_ip": "10.20.20.13"
|