Set up repo structure and implement base role

- Document architecture decisions in README (Ansible + Docker Compose + Traefik)
- Scaffold Ansible layout: inventory, site.yml, group_vars, 9 service roles
- Implement base role: package install, deploy user, SSH hardening,
  UFW firewall (22/80/443), fail2ban, unattended-upgrades
- Add reinstall runbook in docs/runbook.md
- Add ansible/requirements.yml for community.general and ansible.posix

This commit is contained in:

2026-06-27 15:02:21 +02:00

parent 694d6d5526

commit 6115d9d48f

18 changed files with 385 additions and 0 deletions

									
										ansible/roles/gitea/tasks/main.yml
									
		+2
		
												View File
												
				@@ -0,0 +1,2 @@

				---

				# TODO: implement gitea role