Set up repo structure and implement base role

- Document architecture decisions in README (Ansible + Docker Compose + Traefik)
- Scaffold Ansible layout: inventory, site.yml, group_vars, 9 service roles
- Implement base role: package install, deploy user, SSH hardening,
  UFW firewall (22/80/443), fail2ban, unattended-upgrades
- Add reinstall runbook in docs/runbook.md
- Add ansible/requirements.yml for community.general and ansible.posix

This commit is contained in:

2026-06-27 15:02:21 +02:00

parent 694d6d5526

commit 6115d9d48f

18 changed files with 385 additions and 0 deletions

ansible/roles/base/files/20auto-upgrades

View File

@@ -0,0 +1,2 @@
 APT::Periodic::Update-Package-Lists "1";
 APT::Periodic::Unattended-Upgrade "1";