- Add `hetzner-sizing-report.md` defining data-driven server type recommendations for test and prod environments.
- Update Terraform configurations to align with the recommended `CPX` server types and refine firewall rules for Docker Swarm and database interactions.
- Introduce comprehensive documentation and stack files for:
- Single-node PostgreSQL/MongoDB deployment on a test DB worker node.
- High-availability 3-node MongoDB replica set and Patroni+etcd PostgreSQL cluster for production.
- Enhance Ansible bootstrap roles with SELinux disabling, fail2ban configuration, and StorageBox SSH key management for CI/CD.
- Reorganize and rename setup documentation files for improved structure and clarity.
51 lines
690 B
Plaintext
51 lines
690 B
Plaintext
# Terraform local/runtime files
|
|
.terraform/
|
|
*.tfstate
|
|
*.tfstate.*
|
|
crash.log
|
|
crash.*.log
|
|
override.tf
|
|
override.tf.json
|
|
*_override.tf
|
|
*_override.tf.json
|
|
|
|
# Terraform secret variable files
|
|
*.tfvars
|
|
*.tfvars.json
|
|
terraform.tfvars
|
|
terraform.tfvars.json
|
|
|
|
# Ansible local/runtime files
|
|
*.retry
|
|
.ansible/
|
|
ansible-vault-password*
|
|
vault-password*
|
|
|
|
# Secret material
|
|
.env
|
|
.env.*
|
|
!.env.example
|
|
secrets/
|
|
secret/
|
|
*.pem
|
|
*.key
|
|
id_rsa
|
|
id_rsa.pub
|
|
id_ed25519
|
|
id_ed25519.pub
|
|
*_private_key
|
|
*_private_key.pub
|
|
|
|
# Gitea runner tokens/config generated with secrets
|
|
act_runner.token
|
|
gitea-runner-registration-token*
|
|
runner-registration-token*
|
|
runner-config.secret.yaml
|
|
|
|
# OS/editor noise
|
|
.DS_Store
|
|
*.swp
|
|
*.swo
|
|
|
|
*.pdf
|