boma/roles
sjat bca74458fb fix(base): iifname for load-time safety; zone-source molecule fixture
nft -c rejects iif "wt0" when the interface is absent (container, or any host
before NetBird); iifname matches by name and is robust to wt0 coming/going.
Drop the ansible_host fixture override (the docker connection uses it as the
container name) — molecule covers zone resolution, pytest covers service->IP.
2026-06-06 19:02:50 +02:00
..
base fix(base): iifname for load-time safety; zone-source molecule fixture 2026-06-06 19:02:50 +02:00
README.md Reconcile CI to trunk-based; mark base/docker_host not-built (R6-R8,R15-R16) 2026-05-30 19:32:37 +02:00

roles/

Local Ansible roles. No Galaxy roles — every role is written and maintained here (ADR-003). Scaffold new ones with make new-role NAME=<name>; never create the directory structure by hand.

Each role must have: a molecule/default/ scenario (Debian 13), a populated README.md, and a filled-in meta/main.yml. Conventions: CLAUDE.md and docs/runbooks/new-role.md.

Current state: base and docker_host are not built yet — they exist only as empty, untracked dirs, so site.yml would fail on a clean clone. Build them with make new-role when defining the baseline. See STATUS.md.