4e72ddf4ef
Completed Issue #2: Ansible Base Configuration All objectives met: - ✅ Hetzner Cloud dynamic inventory (hcloud plugin) - ✅ Common role (SSH hardening, UFW firewall, fail2ban, auto-updates) - ✅ Docker role (Docker Engine + Compose + networks) - ✅ Traefik role (reverse proxy with Let's Encrypt SSL) - ✅ Setup playbook (orchestrates all base roles) - ✅ Successfully tested on live test server (91.99.210.204) Additional improvements: - Fixed ansible.cfg for Ansible 2.20+ compatibility - Updated ADR dates to 2025 - All roles follow Infrastructure Agent patterns Test Results: - SSH hardening applied (key-only auth) - UFW firewall active (ports 22, 80, 443) - Fail2ban protecting SSH - Automatic security updates enabled - Docker running with traefik network - Traefik deployed and ready for SSL Files added: - ansible/playbooks/setup.yml - ansible/roles/docker/* (complete) - ansible/roles/traefik/* (complete) Closes #2 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
22 lines
452 B
YAML
22 lines
452 B
YAML
---
|
|
# Default variables for docker role
|
|
|
|
# Docker version (use 'latest' or pin specific version)
|
|
docker_edition: "ce"
|
|
docker_install_compose: true
|
|
|
|
# Docker daemon configuration
|
|
docker_daemon_options:
|
|
log-driver: "json-file"
|
|
log-opts:
|
|
max-size: "10m"
|
|
max-file: "3"
|
|
storage-driver: "overlay2"
|
|
|
|
# Docker Compose version
|
|
docker_compose_version: "2.24.0"
|
|
|
|
# Docker networks to create
|
|
docker_networks:
|
|
- name: "traefik"
|
|
driver: "bridge"
|