Post-Tyranny-Tech-Infrastru.../ansible/roles/common/handlers/main.yml

---
# Handlers for common role

- name: Restart systemd-resolved
  service:
    name: systemd-resolved
    state: restarted

- name: Restart SSH
  service:
    name: ssh
    state: restarted

- name: Restart unattended-upgrades
  service:
    name: unattended-upgrades
    state: restarted

- name: Restart fail2ban
  service:
    name: fail2ban
    state: restarted
WIP: Ansible base configuration - common role (#2) Progress on Issue #2: Ansible Base Configuration Completed: - ✅ Ansible installed via pipx (isolated Python environment) - ✅ Hetzner Cloud dynamic inventory configured - ✅ Ansible configuration (ansible.cfg) - ✅ Common role for base system hardening: - SSH hardening (key-only, no root password) - UFW firewall configuration - Fail2ban for SSH protection - Automatic security updates - Timezone and system packages - ✅ Comprehensive Ansible README with setup guide Architecture Updates: - Added Decision #15: pipx for isolated Python environments - Updated ADR changelog with pipx adoption Still TODO for #2: - Docker role - Traefik role - Setup playbook - Deploy playbook - Testing against live server Files added: - ansible/README.md - Complete Ansible guide - ansible/ansible.cfg - Ansible configuration - ansible/hcloud.yml - Hetzner dynamic inventory - ansible/roles/common/* - Base hardening role Partial progress on #2 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com> 2025-12-27 14:00:22 +01:00			`---`
			`# Handlers for common role`

feat: Add DNS configuration and Docker improvements Common role improvements: - Add systemd-resolved DNS configuration (Google + Cloudflare) - Ensures reliable DNS resolution for private network servers - Flush handlers immediately to apply DNS before other tasks Docker role improvements: - Enhanced Docker daemon configuration - Better support for private network deployments Scripts: - Update add-client-to-terraform.sh for new architecture These changes ensure private network clients can resolve DNS and access internet via NAT gateway. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com> 2026-01-20 19:06:32 +01:00			`- name: Restart systemd-resolved`
			`service:`
			`name: systemd-resolved`
			`state: restarted`

WIP: Ansible base configuration - common role (#2) Progress on Issue #2: Ansible Base Configuration Completed: - ✅ Ansible installed via pipx (isolated Python environment) - ✅ Hetzner Cloud dynamic inventory configured - ✅ Ansible configuration (ansible.cfg) - ✅ Common role for base system hardening: - SSH hardening (key-only, no root password) - UFW firewall configuration - Fail2ban for SSH protection - Automatic security updates - Timezone and system packages - ✅ Comprehensive Ansible README with setup guide Architecture Updates: - Added Decision #15: pipx for isolated Python environments - Updated ADR changelog with pipx adoption Still TODO for #2: - Docker role - Traefik role - Setup playbook - Deploy playbook - Testing against live server Files added: - ansible/README.md - Complete Ansible guide - ansible/ansible.cfg - Ansible configuration - ansible/hcloud.yml - Hetzner dynamic inventory - ansible/roles/common/* - Base hardening role Partial progress on #2 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com> 2025-12-27 14:00:22 +01:00			`- name: Restart SSH`
			`service:`
			`name: ssh`
			`state: restarted`

			`- name: Restart unattended-upgrades`
			`service:`
			`name: unattended-upgrades`
			`state: restarted`

			`- name: Restart fail2ban`
			`service:`
			`name: fail2ban`
			`state: restarted`