ml
f53ccbab4a
- New dl role — nginx serves files publicly over HTTPS with directory listing; atmoz/sftp on port 2223 for key-only uploads; both containers share /opt/dl/files volume - check-vault.sh gains a third tier: optional secrets are validated when present — vaultwarden_sso_client_secret must be non-empty, dl_sftp_authorized_keys must begin with a recognised SSH public key prefix - dl.ladkau.de added to DNS table, check-services.sh, and status dashboard - Configuration runbook section 7: deploy key generation, Gitea Actions scp workflow example, and SFTP client connection settings - Provisioning runbook documents the three-tier vault validation behaviour
18 lines
231 B
YAML
18 lines
231 B
YAML
---
|
|
- name: Full server provisioning
|
|
hosts: cloud
|
|
become: true
|
|
roles:
|
|
- base
|
|
- docker
|
|
- traefik
|
|
- gitea
|
|
- nextcloud
|
|
- sso
|
|
- mail
|
|
- registry
|
|
- k8s
|
|
- vaultwarden
|
|
- dl
|
|
- dashboard
|