sjat/boma
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

inventory: add ubongo to control group; set ssh-from-control addr

Browse source 
Wire the now-built physical control node ubongo (10.20.10.151) into the
production control group (the documented manual exception), and activate the
dormant base__firewall_control_addr knob (ADR-021 ssh-from-control source).
Forward-wiring only: no host has the base role applied yet.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
sjat 2026-06-11 10:32:24 +02:00
parent 7b190e4313
commit 7b5fd17e55
2 changed files with 6 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
inventories/production/group_vars/all/vars.yml
View file

@ -36,3 +36,6 @@ services__base_dir: /opt/services
# Unattended upgrades — security patches only # Unattended upgrades — security patches only
base__unattended_upgrades_enabled: true base__unattended_upgrades_enabled: true
# Management plane — activates the dormant ssh-from-control firewall rule
base__firewall_control_addr: "10.20.10.151" # ubongo (control node) LAN address — ADR-021 ssh-from-control source

4
inventories/production/hosts.yml
View file

@ -7,7 +7,9 @@
all: all:
children: children:
control: control:
hosts: {} hosts:
ubongo:
ansible_host: 10.20.10.151
docker_hosts: docker_hosts:
hosts: {} hosts: {}
proxmox_hosts: proxmox_hosts: