Initial server-infra setup

inventory/group_vars/all.yml

@@ -0,0 +1,16 @@
+---
+ansible_user: westfarn
+ansible_python_interpreter: /usr/bin/python3
+
+admin_user: westfarn
+
+# UFW
+ufw_ssh_port: 22
+ufw_ssh_allowed_network: 10.0.0.0/24
+ufw_allowed_tcp_ports:
+  - 80
+  - 443
+
+# Docker
+docker_users:
+  - "{{ admin_user }}"

inventory/group_vars/webservers.yml

@@ -0,0 +1,2 @@
+---
+# Shared webserver settings (add per-environment overrides here later)

inventory/host_vars/desktop.yml

@@ -0,0 +1,6 @@
+---
+# Update with this machine's LAN IP: ip -4 addr show scope global
+ansible_host: 10.0.0.1  # FIXME: set your desktop IP
+
+ansible_control_node: true
+act_runner_enabled: true

inventory/hosts.yml

@@ -0,0 +1,10 @@
+---
+all:
+  children:
+    webservers:
+      hosts:
+        adama:
+          ansible_host: 10.0.0.77
+        roslin:
+          ansible_host: 10.0.0.176
+        desktop: