boma/roles/netbird_coordinator/meta/main.yml

---
galaxy_info:
  author: sjat
  description: >-
    Self-hosted NetBird control plane (ADR-016): combined server image
    (Management API + Signal + Relay + STUN + embedded Dex IdP) plus dashboard
    UI, run on askari via Docker Compose behind the Caddy reverse proxy. Stateful
    (encrypted SQLite store). Pinned images; secrets from vault.
  license: MIT
  min_ansible_version: "2.17"
  platforms:
    - name: Debian
      versions:
        - trixie
dependencies: []
feat(netbird): coordinator service role (combined server + dashboard, v0.72.4) First real service role. NetBird v0.72.4 self-hosted control plane: single netbirdio/netbird-server:0.72.4 (management + signal + relay + STUN + embedded Dex) plus netbirdio/dashboard:v2.39.0, both on the shared boma Docker network so the M4a Caddy fronts them. Renders docker-compose.yml + config.yaml (secrets from vault.netbird.*, no_log) + dashboard.env. STUN 3478/udp host-exposed; everything else via the proxy. netbird_coordinator__manage gates the compose-up for Molecule. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> 2026-06-15 17:39:56 +02:00			`---`
			`galaxy_info:`
			`author: sjat`
			`description: >-`
docs(netbird): service-role standard files (SECURITY/VERIFY/ACCESS/BACKUP) Author the four ADR-mandated service-role docs for netbird_coordinator and add the cross-role access__/backup__ data (ADR-021/022). First stateful service: backup__state=true; off-site capture pending the fisi pull node. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> 2026-06-15 18:01:29 +02:00			`Self-hosted NetBird control plane (ADR-016): combined server image`
			`(Management API + Signal + Relay + STUN + embedded Dex IdP) plus dashboard`
			`UI, run on askari via Docker Compose behind the Caddy reverse proxy. Stateful`
			`(encrypted SQLite store). Pinned images; secrets from vault.`
feat(netbird): coordinator service role (combined server + dashboard, v0.72.4) First real service role. NetBird v0.72.4 self-hosted control plane: single netbirdio/netbird-server:0.72.4 (management + signal + relay + STUN + embedded Dex) plus netbirdio/dashboard:v2.39.0, both on the shared boma Docker network so the M4a Caddy fronts them. Renders docker-compose.yml + config.yaml (secrets from vault.netbird.*, no_log) + dashboard.env. STUN 3478/udp host-exposed; everything else via the proxy. netbird_coordinator__manage gates the compose-up for Molecule. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> 2026-06-15 17:39:56 +02:00			`license: MIT`
			`min_ansible_version: "2.17"`
			`platforms:`
			`- name: Debian`
			`versions:`
			`- trixie`
			`dependencies: []`