# inventories/

Ansible inventories, one directory per environment (`staging/`, `production/`).
Defines which hosts exist and their group membership; `group_vars/` and `host_vars/`
hold per-group and per-host configuration.

- `hosts.yml` is **generated** from Terraform outputs by `make tf-inventory` — do not
  hand-edit. The control node is the one manual exception.
- `offsite.yml` (in `production/`) is a **second** generated inventory file, written by
  `make tf-inventory-offsite` from the offsite Terraform env; it holds the `offsite_hosts`
  group (`askari`). Ansible merges it with `hosts.yml`, so both can declare the same group
  names harmlessly (the offsite generator emits all four groups, most empty).
- Host groups: `all`, `control`, `docker_hosts`, `proxmox_hosts`, `offsite_hosts`.
- Terraform→inventory data flow and the data contract: **ADR-009**.
- Addressing conventions (subnets, ranges): **ADR-007**.
- Layout and host groups: see CLAUDE.md ("Inventory structure").