mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-11 13:17:07 +00:00
kevinveenbirkenbachandClaude Opus 5
4fcd13179d
Merging feature/designer (ebad39422c) resolved thirteen meta/services.yml by
hunk rather than by key. Six consumers lost their seaweedfs block and
web-app-meta lost its api block, so the deploy graph no longer sees the edge
to the provider and never pulls it in. MediaWiki and WordPress additionally
lost public: true, which web-svc-seaweedfs reads in s3.json.j2 to grant
anonymous read on the bucket: without it both deploy green and serve their
uploads from a private bucket, so the media simply does not load.
The same resolution inserted a second design and email block into
web-svc-api. A duplicate YAML key is not a syntax error, the last one wins,
and the second design block would have overridden the deliberate
enabled: false opt-out of the first. inventories/development/default.yml had
the same shape with two top-level applications blocks, where the trailing one
would have replaced the whole first subtree and taken the design base colour
with it.
Audited repository-wide against ebad39422c^1: the only top-level service key
the merge removed is css (90 roles, the css to design rename), the public:
true count is 18 before and 18 after, and every other removed line is the
title keys moving into the design block or the hermes oauth2 origin port
becoming a lookup.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
82 lines
2.7 KiB
YAML
82 lines
2.7 KiB
YAML
---
|
|
# Sample inventory for CI Pipeline.
|
|
#
|
|
# Per-application overrides MUST live in the role itself under
|
|
# `roles/<role>/meta/variants.yml` (one entry per matrix-deploy
|
|
# variant). The dev init step at `cli/administration/deploy/development/init.py`
|
|
# materialises one inventory folder per round (`<dir>-0`, `<dir>-1`,
|
|
# ...; or just `<dir>` when there is a single round) with the active
|
|
# variant baked into each folder's host_vars. The matching deploy step
|
|
# iterates those folders and purges only the apps whose variant changed
|
|
# between rounds. This file holds only the cross-cutting environment
|
|
# knobs.
|
|
MASK_CREDENTIALS_IN_LOGS: false
|
|
ASYNC_ENABLED: false
|
|
MODE_DEBUG: true
|
|
ENVIRONMENT: development
|
|
TLS_ENABLED: true
|
|
TLS_MODE: "self_signed"
|
|
|
|
DOMAIN_PRIMARY: "{{ lookup('env', 'INFINITO_DOMAIN') }}"
|
|
BUILDKIT_ENABLED: "{{ lookup('env', 'INFINITO_BUILDKIT_ENABLED') | bool }}"
|
|
INFINITO_IMAGE_TAG: "{{ lookup('env', 'INFINITO_IMAGE_TAG') | default('latest', true) }}"
|
|
INFINITO_GHCR_MIRROR_PREFIX: "{{ lookup('env', 'INFINITO_GHCR_MIRROR_PREFIX') | default('', true) }}"
|
|
CA_CONTAINER_ENABLED: "{{ lookup('env', 'INFINITO_CONTAINER_CA_ENABLED') | bool }}"
|
|
test_e2e_playwright_keep: "{{ lookup('env', 'INFINITO_PLAYWRIGHT_KEEP') | bool }}"
|
|
MAIL_PRODUCTION_HOST: "{{ lookup('env', 'INFINITO_MAIL_PRODUCTION_HOST') | default('', true) }}"
|
|
MAIL_PRODUCTION_RESOLVER: "{{ lookup('env', 'INFINITO_MAIL_PRODUCTION_RESOLVER') | default('', true) }}"
|
|
SYS_TIMEOUT_CONTAINER_EXEC: "60min"
|
|
networks:
|
|
internet:
|
|
ip4: "{{ lookup('env', 'INFINITO_IP4') }}"
|
|
ip6: "{{ lookup('env', 'INFINITO_IP6') }}"
|
|
dns: "{{ lookup('env', 'INFINITO_DNS_IP') }}"
|
|
|
|
DESIGN_BASE_COLOR: "#FFA500"
|
|
|
|
applications:
|
|
web-svc-design:
|
|
services:
|
|
design:
|
|
colors:
|
|
base: "{{ DESIGN_BASE_COLOR }}"
|
|
svc-cache-package:
|
|
secrets:
|
|
credentials:
|
|
admin_password: "{{ lookup('env', 'INFINITO_CACHE_PACKAGE_ADMIN_PASSWORD') }}"
|
|
|
|
API:
|
|
openai:
|
|
api_key: "{{ lookup('env', 'INFINITO_API_OPENAI_KEY') }}"
|
|
anthropic:
|
|
api_key: "{{ lookup('env', 'INFINITO_API_ANTHROPIC_KEY') }}"
|
|
openrouter:
|
|
api_key: "{{ lookup('env', 'INFINITO_API_OPENROUTER_KEY') }}"
|
|
|
|
OIDC_OVERRIDE:
|
|
CLIENT:
|
|
SECRET: VERYUNSAFESAMPLEPASSWORD1234
|
|
PLAYWRIGHT_MAPACHE_PASSWORD: "VeryUnsecureMapache!1"
|
|
users:
|
|
administrator:
|
|
authorized_keys:
|
|
- ssh-ed25519 AAAA_TEST_DUMMY_KEY github-ci-dummy@infinito
|
|
password: "'$tr0ng€xampl3PW!"
|
|
biber:
|
|
username: "biber"
|
|
firstname: "Harry"
|
|
lastname: "Beaver"
|
|
website: "https://www.infinito.nexus/"
|
|
gpg: "DUMMY-GPG-KEY-NOT-SET"
|
|
password: "VeryUnsecurePassword!1"
|
|
|
|
uid: 10001
|
|
gid: 10001
|
|
accounts: ["mailbox", "identity"]
|
|
roles: []
|
|
tokens: {}
|
|
authorized_keys: []
|
|
SIZE_PERCENT_CLEANUP_DISC_SPACE: 99
|
|
|
|
WORKSTATION_USER: biber
|