0 Fork 0

mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2026-11-09 04:06:42 +00:00

Files

T

kevinveenbirkenbachandClaude Opus 5 7bc12e55f3 fix(docs): drop the generated sections the designer merge put back

aceb5295ef moved Cosmos, Quick Setup and Credits out of the committed role
READMEs and into the documentation build's own scratch checkout, so a
committed copy can no longer go stale when the metadata moves. Merging
feature/designer (ebad39422c) took origin/main's side of those files, which
still carries them, and reinstated all 290 along with the cosmos make target
and its i8cos alias. tests/lint/ansible/roles/test_readme.py hard-fails on a
committed copy, and the reinstated Credits block credited one person with two
URLs, which tripped the credits-attribution lint as well.

Stripped with the repository's own fence-aware parser against
MANAGED_SECTIONS, not with a line filter: the Cosmos block holds a mermaid
fence a naive filter would cut through. The result is byte-identical to
aceb5295ef for every README that carries no prose change since.

The cosmos target wrote the forbidden section straight back into the
checkout, so it goes with them.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-10-06 01:50:43 +02:00

files/shell

…

README.md

sys-ca-selfsigned

Description

Creates (once) a local Root CA (self-signed) for the Infinito.Nexus environment.

This role provisions:

Root CA private key: {{ CA_ROOT.key_host }}
Root CA certificate: {{ CA_ROOT.cert_host }}

The generated Root CA certificate can be injected into containers (e.g. via sys-svc-compose-ca) so that containers trust your internal TLS endpoints.

Overview

This role provisions a local Root CA (self-signed, CA:TRUE) for trusting internal TLS endpoints. Produces /etc/infinito.nexus/ca/root-ca.crt for sys-svc-compose-ca injection.

Features

Automated provisioning: Configured by Ansible without manual steps.

Outputs

CA_ROOT.cert_host (default: /etc/infinito.nexus/ca/root-ca.crt)
CA_ROOT.key_host (default: /etc/infinito.nexus/ca/root-ca.key)

Inputs

CA_ROOT (mapping)
- base_dir (string): base directory for CA files
- cert_host (string): host path to Root CA certificate
- key_host (string): host path to Root CA private key
- openssl_conf_host (string): host path for generated openssl.cnf
- days (int): certificate validity
- key_bits (int): RSA key size
- subject (mapping): DN fields (C/O/OU/CN)
- force_regen (bool): if true, remove and regenerate key/cert

Notes

The Root CA private key is generated unencrypted (automation-friendly). Protect file permissions.
This role does not sign leaf certificates. It only provisions the Root CA.