updates

inventory/host_vars/adama.yml

@@ -0,0 +1,13 @@
+---
+# Django services run active/active here and on roslin (shared external DB).
+# dta_webapp static also runs active/active (built into /var/www, served by
+# the web-static nginx container). Ports MUST match roslin so NPM can balance.
+# Each entry is one workload: django -> compose project <name>_<env> on port;
+# node-static -> /var/www/<env>_dta_webapp served on port.
+host_apps:
+  - { name: company_site, env: prod, port: 8000 }
+  - { name: company_site, env: beta, port: 8010 }
+  - { name: dta_service, env: prod, port: 8001 }
+  - { name: dta_service, env: beta, port: 8011 }
+  - { name: dta_webapp, env: prod, port: 8080 }
+  - { name: dta_webapp, env: beta, port: 8081 }

inventory/host_vars/ai-server-4080.yml

@@ -0,0 +1,16 @@
+---
+# ai-server-4080 — control node + Gitea act runner. Update IP with:
+#   ip -4 addr show scope global
+ansible_host: 10.0.0.128
+
+ansible_control_node: true
+act_runner_enabled: true
+
+# This host's pre-existing ~/.ssh/id_ed25519 is a personal key WITH a passphrase,
+# which hangs the (non-BatchMode) gitea access probe. Use a dedicated,
+# passphrase-less deploy key here instead.
+gitea_key_path: "/home/{{ admin_user }}/.ssh/gitea_deploy"
+
+# company_site prod runs here for side testing.
+host_apps:
+  - { name: company_site, env: prod, port: 8000 }

inventory/host_vars/desktop.yml

@@ -1,6 +0,0 @@
----
-# Update with this machine's LAN IP: ip -4 addr show scope global
-ansible_host: 10.0.0.1  # FIXME: set your desktop IP
-
-ansible_control_node: true
-act_runner_enabled: true

inventory/host_vars/roslin.yml

@@ -0,0 +1,10 @@
+---
+# Mirrors adama for active/active. Ports MUST match adama so NPM upstreams
+# can balance adama:PORT and roslin:PORT for the same workload.
+host_apps:
+  - { name: company_site, env: prod, port: 8000 }
+  - { name: company_site, env: beta, port: 8010 }
+  - { name: dta_service, env: prod, port: 8001 }
+  - { name: dta_service, env: beta, port: 8011 }
+  - { name: dta_webapp, env: prod, port: 8080 }
+  - { name: dta_webapp, env: beta, port: 8081 }