boma/ansible.cfg

[defaults]
inventory           = inventories/production/
roles_path          = roles
collections_path    = .collections
vault_password_file = scripts/vault-pass-client.sh
interpreter_python  = auto_silent
stdout_callback     = default
callback_result_format = yaml
callbacks_enabled   = ansible.posix.profile_tasks

# Avoid slow DNS lookups
[ssh_connection]
pipelining          = True
ssh_args            = -o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=accept-new
Add core Ansible scaffold, tooling, and pre-commit guards Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> 2026-05-30 14:10:01 +02:00			`[defaults]`
feat(make): offsite TF token injection + directory inventory + tf-inventory-offsite Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> 2026-06-14 12:05:41 +02:00			`inventory = inventories/production/`
Add core Ansible scaffold, tooling, and pre-commit guards Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> 2026-05-30 14:10:01 +02:00			`roles_path = roles`
			`collections_path = .collections`
Source vault password from Vaultwarden via rbw; nest vault structure Master vault password is fetched from Vaultwarden via the rbw agent (scripts/vault-pass-client.sh, wired as vault_password_file) instead of a plaintext .vault_pass. Vault secrets use a nested vault.<service>.<key> map. Encrypted vault.yml files are excluded from lint. Includes the host rename in Makefile and STATUS.md. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> 2026-05-30 18:16:35 +02:00			`vault_password_file = scripts/vault-pass-client.sh`
Add core Ansible scaffold, tooling, and pre-commit guards Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> 2026-05-30 14:10:01 +02:00			`interpreter_python = auto_silent`
fix(deploy): make check/deploy actually run Two latent bugs that blocked the documented deploy path (never exercised end-to-end before applying dev_env to ubongo): - Makefile: the PLAYBOOK variable was both the ansible-playbook BINARY path and the user-supplied playbook NAME, so `make check/deploy PLAYBOOK=<name>` overrode the binary. Renamed the binary var to PLAYBOOK_BIN. - ansible.cfg: stdout_callback=yaml and callbacks_enabled=timer were community.general plugins (not installed; boma only ships ansible.posix). Use the built-in default callback with callback_result_format=yaml and ansible.posix.profile_tasks — same intent, no new heavy collection. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> 2026-06-11 14:09:12 +02:00			`stdout_callback = default`
			`callback_result_format = yaml`
			`callbacks_enabled = ansible.posix.profile_tasks`
Add core Ansible scaffold, tooling, and pre-commit guards Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> 2026-05-30 14:10:01 +02:00
			`# Avoid slow DNS lookups`
			`[ssh_connection]`
			`pipelining = True`
			`ssh_args = -o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=accept-new`