chrisfu abc458260c ansible: lock in docker_build_host role for the arm64 build lane (gandalf) ... Provisions the docker engine on [build_hosts] (gandalf) for the native arm64 daily knoe-db image build → registry.knoe.dev, run via a remote buildx builder. gandalf is also a k3s_agent, so the role holds iptables FORWARD=ACCEPT to protect k3s pod networking (docker's containerd coexists with k3s's on separate sockets). Verified idempotent: --check against gandalf = ok=5, changed=0. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-06-21 15:11:08 -07:00
..
bin	fix(ansible): workstation install script + Makefile target for local Macs	2026-05-27 21:15:49 -07:00
deployments/svc-check-helm	infrastructure: restore ansible configuration and refactor samba_dns for internal zone - Restored the 'infrastructure' directory and root-level 'ansible.sh', 'ansible.cfg' scripts. - Refactored 'samba_dns' role to dynamically handle 'prole.org' and 'internal.prole.org' DNS zones. - Switched 'samba-tool' commands to use machine account authentication (-P) in 'samba_dns' and 'samba_reverse_dns'. - Updated AD DC inventory variables to use 127.0.0.1 and correct admin principal. - Added tags to 'samba_dns' tasks for better target execution. - Updated IDE project configuration for knoe-db.	2026-04-28 00:05:03 -07:00
inventory	ansible: lock in docker_build_host role for the arm64 build lane (gandalf)	2026-06-21 15:11:08 -07:00
logs/ansible	feat(infrastructure): add Pi-hole DNS flush playbook and logs dir	2026-05-23 21:31:52 -07:00
playbooks	ansible: lock in docker_build_host role for the arm64 build lane (gandalf)	2026-06-21 15:11:08 -07:00
roles	ansible: lock in docker_build_host role for the arm64 build lane (gandalf)	2026-06-21 15:11:08 -07:00
setup	infrastructure: restore ansible configuration and refactor samba_dns for internal zone - Restored the 'infrastructure' directory and root-level 'ansible.sh', 'ansible.cfg' scripts. - Refactored 'samba_dns' role to dynamically handle 'prole.org' and 'internal.prole.org' DNS zones. - Switched 'samba-tool' commands to use machine account authentication (-P) in 'samba_dns' and 'samba_reverse_dns'. - Updated AD DC inventory variables to use 127.0.0.1 and correct admin principal. - Added tags to 'samba_dns' tasks for better target execution. - Updated IDE project configuration for knoe-db.	2026-04-28 00:05:03 -07:00
ansible.cfg	fix(ansible): wire vault_password_file to repo-root .vault_pass	2026-05-27 21:05:49 -07:00