2 Commits

Author	SHA1	Message	Date
Adyrem	e888560175	Add pre-commit hook to detect secrets ... Blocks commits containing: - Private key file headers (RSA/EC/DSA/OPENSSH) - Plaintext passwords/tokens ≥16 chars - Gitea/GitHub-style hex tokens - Files with private key path suffixes (_ed25519, _rsa, etc.) Allowlisted: Ansible vault variable references ({{ vault_* }}), encrypted vault blocks ($ANSIBLE_VAULT), and comment lines. Run scripts/install-hooks.sh after cloning to activate. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-15 20:03:43 +02:00
Adyrem	39be9fafe7	Add Gitea Actions runner, ansible-lint CI, vault setup, and fix group_vars layout ... - Move group_vars into inventory/ so playbooks can find them (was only visible to ad-hoc commands via CWD) - Add Ansible Vault for sensitive variables (gitea/grafana passwords, tokens, db credentials) with vault_password_file outside the repo - Enable Gitea Actions and deploy act_runner with Docker backend on the gitea VM - Add .gitea/workflows/lint.yml to run ansible-lint on every push - Set up Gitea → GitHub push mirror (sync_on_commit) - Fix ansible.cfg stdout_callback for ansible-core 2.20 compatibility - Add python-psycopg2 to gitea role (required for postgresql modules) - Add docker to gitea_runner role (required by act_runner at startup) - Exclude password hashes and VM images from git Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-13 17:34:03 +02:00