boma/inventories/production/group_vars/all
sjat 64f1e821d8 docs(review): 2026-06-14 repo audit — M4a doc drift + Traefik→Caddy lag
11 safe auto-fixes (docs/comments only): reverse_proxy meta stale DNS-01
description, base/playbooks/scripts/terraform/public_dns README build-state,
CAPABILITIES reverse-proxy Traefik→Caddy, README ADR list → 024, TF cax11→cx23
stamps, public_dns wildcard DNS-01→HTTP-01 comment. 29 open findings reported.
make lint green. No stale-deferred (ADR-011 open questions still open).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-14 18:37:54 +02:00
..
firewall.yml feat(base): shared firewall catalog/zones + firewall defaults 2026-06-06 18:49:40 +02:00
public_dns.yml docs(review): 2026-06-14 repo audit — M4a doc drift + Traefik→Caddy lag 2026-06-14 18:37:54 +02:00
reverse_proxy.yml refactor(reverse_proxy): vanilla Caddy + HTTP-01 (drop DNS-01 custom image) 2026-06-14 18:11:20 +02:00
vars.yml feat(base): ssh hardening + fail2ban (hardening concern, ADR-002) 2026-06-14 16:42:56 +02:00
vault.yml secrets(vault): rotate Gandi PAT (via make edit-vault) 2026-06-14 10:30:58 +02:00