railiance-infra/inventory/servers.yaml

schema_version: "1.0"
servers:
  - name: CoulombCore
    provider: hosteurope
    lifecycle_mode: adopted
    ip: 92.205.130.254
    ssh_user: tegwick
    ssh_key: ~/.ssh/id_ops
    baseline_profile: external-firewall
  - name: Railiance01
    provider: hosteurope
    lifecycle_mode: adopted
    ip: 92.205.62.239
    ssh_user: tegwick
    baseline_profile: ufw-managed
Implement reproducible S1 handoff contracts Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02994-7685-7940-bf34-3555b8256018 2026-08-23 12:02:23 +02:00			`schema_version: "1.0"`
feat: bootstrap and harden Railiance01 at HostEurope - Extend base role with fail2ban, UFW k3s/Flannel rules, HISTCONTROL - Add handlers dir for fail2ban restart - Fix inventory script to emit correct dynamic inventory JSON format - Add roles_path to ansible.cfg so playbook finds roles - Add Railiance01 (92.205.62.239) to inventory/servers.yaml - Mark workplan T03/T04/T05 as done Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> 2026-03-08 22:53:38 +00:00			`servers:`
feat(ansible): add swapfile + resource_limits roles; add CoulombCore to inventory T01: roles/swapfile — idempotent 4GB swapfile, vm.swappiness=10, fstab entry T02: roles/resource_limits — PAM nproc caps (512/1024), systemd user-1000.slice memory limits (1500M/512M); templated per-host via host_vars - inventory/host_vars/CoulombCore.yml — host-specific vars for both roles - inventory/servers.yaml — add CoulombCore with id_ops SSH key - inventory_from_yaml.py — load host_vars files into Ansible hostvars - playbooks/bootstrap.yaml — include swapfile + resource_limits roles - workplans/WP-0004 — flag T04/T09/T10 needs_human, add CoulombCore-local convergence note Codifies manual INC-002 hardening. See RAIL-HO-WP-0004-T01/T02. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> 2026-03-27 01:49:35 +01:00			`- name: CoulombCore`
Implement reproducible S1 handoff contracts Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02994-7685-7940-bf34-3555b8256018 2026-08-23 12:02:23 +02:00			`provider: hosteurope`
			`lifecycle_mode: adopted`
feat(ansible): add swapfile + resource_limits roles; add CoulombCore to inventory T01: roles/swapfile — idempotent 4GB swapfile, vm.swappiness=10, fstab entry T02: roles/resource_limits — PAM nproc caps (512/1024), systemd user-1000.slice memory limits (1500M/512M); templated per-host via host_vars - inventory/host_vars/CoulombCore.yml — host-specific vars for both roles - inventory/servers.yaml — add CoulombCore with id_ops SSH key - inventory_from_yaml.py — load host_vars files into Ansible hostvars - playbooks/bootstrap.yaml — include swapfile + resource_limits roles - workplans/WP-0004 — flag T04/T09/T10 needs_human, add CoulombCore-local convergence note Codifies manual INC-002 hardening. See RAIL-HO-WP-0004-T01/T02. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> 2026-03-27 01:49:35 +01:00			`ip: 92.205.130.254`
			`ssh_user: tegwick`
			`ssh_key: ~/.ssh/id_ops`
Implement reproducible S1 handoff contracts Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02994-7685-7940-bf34-3555b8256018 2026-08-23 12:02:23 +02:00			`baseline_profile: external-firewall`
feat: bootstrap and harden Railiance01 at HostEurope - Extend base role with fail2ban, UFW k3s/Flannel rules, HISTCONTROL - Add handlers dir for fail2ban restart - Fix inventory script to emit correct dynamic inventory JSON format - Add roles_path to ansible.cfg so playbook finds roles - Add Railiance01 (92.205.62.239) to inventory/servers.yaml - Mark workplan T03/T04/T05 as done Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> 2026-03-08 22:53:38 +00:00			`- name: Railiance01`
Implement reproducible S1 handoff contracts Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02994-7685-7940-bf34-3555b8256018 2026-08-23 12:02:23 +02:00			`provider: hosteurope`
			`lifecycle_mode: adopted`
feat: bootstrap and harden Railiance01 at HostEurope - Extend base role with fail2ban, UFW k3s/Flannel rules, HISTCONTROL - Add handlers dir for fail2ban restart - Fix inventory script to emit correct dynamic inventory JSON format - Add roles_path to ansible.cfg so playbook finds roles - Add Railiance01 (92.205.62.239) to inventory/servers.yaml - Mark workplan T03/T04/T05 as done Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> 2026-03-08 22:53:38 +00:00			`ip: 92.205.62.239`
			`ssh_user: tegwick`
Implement reproducible S1 handoff contracts Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02994-7685-7940-bf34-3555b8256018 2026-08-23 12:02:23 +02:00			`baseline_profile: ufw-managed`