jack
66b70827df
Syncthing removal (was already decided, now fully removed): - roles/base/tasks/firewall.yml: remove 3 UFW rules (ports 22000/21027) - inventory/group_vars/all/main.yml: remove domain_sync, domain_mon, syncthing_basic_auth_htpasswd - roles/services/templates/env.j2: remove DOMAIN_SYNC - roles/services/templates/authelia/configuration.yml.j2: remove Syncthing 2FA rule - roles/services/tasks/directories.yml: remove syncthing/config and syncthing/data dirs - roles/services/defaults/main.yml: remove syncthing_image - roles/services/tasks/main.yml: remove syncthing image pull Security hardening: - inventory/group_vars/all/main.yml: move cloudflare_zone_id to vault - inventory/group_vars/all/vault.yml: add vault_cloudflare_zone_id .gitignore improvements: - add *.env, acme.json, *.log, editor dirs, venv, temp files Documentation (new): - docs/STATUS.md: all services, servers, known issues - docs/BACKLOG.md: prioritized task list, done/todo - docs/DECISIONS.md: architecture decisions and rationale - CLAUDE.md: rewritten with read-first docs, rules, full arch reference Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
20 lines
859 B
Django/Jinja
20 lines
859 B
Django/Jinja
# Generated by Ansible — do not edit manually
|
|
VAULTWARDEN_ADMIN_TOKEN={{ vaultwarden_admin_token }}
|
|
FORGEJO_DB_PASSWORD={{ forgejo_db_password }}
|
|
PLANE_DB_PASSWORD={{ plane_db_password }}
|
|
PLANE_SECRET_KEY={{ plane_secret_key }}
|
|
PLANE_MINIO_PASSWORD={{ plane_minio_password }}
|
|
DOMAIN_BASE={{ domain_base }}
|
|
DOMAIN_VAULT={{ domain_vault }}
|
|
DOMAIN_GIT={{ domain_git }}
|
|
DOMAIN_PLANE={{ domain_plane }}
|
|
DOMAIN_TRAEFIK={{ domain_traefik }}
|
|
FORGEJO_RUNNER_TOKEN={{ forgejo_runner_token }}
|
|
GRAFANA_ADMIN_PASSWORD={{ grafana_admin_password }}
|
|
AUTHELIA_JWT_SECRET={{ authelia_jwt_secret }}
|
|
AUTHELIA_SESSION_SECRET={{ authelia_session_secret }}
|
|
AUTHELIA_STORAGE_KEY={{ authelia_storage_key }}
|
|
CROWDSEC_BOUNCER_KEY={{ crowdsec_bouncer_key }}
|
|
# Cloudflare DNS-01 ACME challenge
|
|
CLOUDFLARE_DNS_API_TOKEN={{ cloudflare_dns_api_token }}
|
|
CF_ZONE_ID={{ cloudflare_zone_id }}
|