prole/infrastructure/inventory
chrisfu 86990af9c8 feat(certs): add acme.sh DNS-01 role and cert-manager playbook for LE
- New acme role: installs acme.sh, issues certs for myrddin/merlin/gandalf
  via DNS-01 (name.com API), installs cert files to /etc/ssl/certs/prole/,
  sets up renewal cron. rc=2 (already valid) treated as ok.
- New playbooks/acme.yml: runs acme role on myrddin (issues all 3 host certs)
- New playbooks/certmgr.yml: cert-manager and letsencrypt-prod ClusterIssuer
  (HTTP-01/Traefik) for external endpoints (db/svc/api.prole.org)
- Add vault references for name.com API creds to group_vars/all/vars.yml
- Add prole_ssl_src_dir and prole_ssl_files to myrddin/merlin/gandalf host_vars

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-06 14:09:28 -04:00
..
group_vars feat(certs): add acme.sh DNS-01 role and cert-manager playbook for LE 2026-05-06 14:09:28 -04:00
host_vars feat(certs): add acme.sh DNS-01 role and cert-manager playbook for LE 2026-05-06 14:09:28 -04:00
hosts.ini feat(tailscale): add Ansible role and playbook for merlin + gandalf 2026-05-05 18:57:05 -04:00