boma/inventories/production/group_vars
sjat 43e5a4aa53 secrets(vault): add Gandi LiveDNS PAT as vault.gandi.pat
Personal Access Token for wingu.me LiveDNS, used by the M1 public_dns role via
community.general.gandi_livedns. Stored under the nested vault.<service>.<key> map
(CLAUDE.md); the placeholder canary is preserved. Verified the token authenticates
+ is scoped to wingu.me, and that the file round-trips (decrypts to the expected
structure). PAT to be rotated after M1 (transmitted in plaintext during setup).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-14 09:14:10 +02:00
..
all secrets(vault): add Gandi LiveDNS PAT as vault.gandi.pat 2026-06-14 09:14:10 +02:00
control inventory: manage ubongo (control node) as the operator account 2026-06-11 14:09:15 +02:00