mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
kevinveenbirkenbachandClaude Opus 4.8
4039313266
Add tests/lint/repository/test_task_file_numbering.py: numbered task files use exactly two leading digits, a numbered *_core.yml must be 00_core.yml, per directory the numbers are unique/consecutive and start at 01 (00 with a core file), numbered includes appear in ascending order, and shared helpers live in tasks/utils/ instead of the numbered chain. Apply it across every role: rename NN_core.yml to 00_core.yml with a consecutive down-shift of the siblings, move letter-suffix children into a subdirectory named after their parent task, relocate helpers included from more than one place into tasks/utils/, and update every reference (include_tasks, path_absolute, .ansible-lint-ignore, requirement docs). Legacy narration comments in the touched files are deleted; the upstream xwiki.properties reference block opts out via nocheck. The unused MAILU_IP6_PUBLIC var (only ever named in now-removed comments) is dropped. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
38 lines
1.1 KiB
YAML
38 lines
1.1 KiB
YAML
---
|
|
- name: "✅ Ensure backup home directory exists"
|
|
ansible.builtin.file:
|
|
path: "{{ USER_BACKUP_HOME }}"
|
|
state: directory
|
|
owner: backup
|
|
group: backup
|
|
mode: "0700"
|
|
|
|
- name: "📁 create {{ USER_BACKUP_WRAPPER_DST }}"
|
|
ansible.builtin.template: # nocheck: stack-host-template (per-host backup user wrapper, lives in backup home on every backed-up host)
|
|
src: "ssh-wrapper.sh.j2"
|
|
dest: "{{ USER_BACKUP_WRAPPER_DST }}"
|
|
owner: backup
|
|
group: backup
|
|
mode: "0700"
|
|
|
|
- name: "✏️ Write authorized_keys for 'backup' via shared user role (wrapped)"
|
|
ansible.builtin.include_role:
|
|
name: user
|
|
vars:
|
|
user_key: "backup"
|
|
user_config: >-
|
|
{{
|
|
lookup('users', 'backup', {})
|
|
| combine(
|
|
{
|
|
'authorized_keys': (
|
|
lookup('users', 'backup', {}).authorized_keys
|
|
| default([])
|
|
| map('regex_replace', '^', 'command="' ~ USER_BACKUP_WRAPPER_DST ~ '" ')
|
|
| list
|
|
)
|
|
},
|
|
recursive=True
|
|
)
|
|
}}
|