b93af8cc78
Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02994-7685-7940-bf34-3555b8256018
16 lines
580 B
YAML
16 lines
580 B
YAML
- hosts: all
|
|
become: true
|
|
vars_files:
|
|
- ../inventory/group_vars/all.yaml
|
|
roles:
|
|
- role: base
|
|
tags: [base]
|
|
- role: sops_agent
|
|
tags: [sops]
|
|
- role: custodian_agent # injects ~/.ssh/id_custodian_agent.pub into authorized_keys
|
|
tags: [custodian_agent]
|
|
- role: swapfile # provisions swap file (size + swappiness from host_vars)
|
|
tags: [swap]
|
|
- role: resource_limits # nproc PAM caps + systemd user slice memory limits
|
|
tags: [resource_limits]
|
|
# - role: wireguard # enable if you configure WireGuard variables
|