Compare commits

...

2 commits

Author SHA1 Message Date
d13ce1ee74 Update docker.io/library/redis Docker tag to v8
Some checks failed
/ Ansible Lint (pull_request) Failing after 43s
/ Ansible Lint (push) Failing after 46s
2026-01-25 15:00:45 +00:00
c285694aaa Add age private key
Some checks failed
/ Ansible Lint (push) Failing after 42s
2026-01-25 15:47:41 +01:00
2 changed files with 3 additions and 2 deletions

View file

@ -37,7 +37,8 @@ As the first step, we need to make the host known to Ansible.
2. Add the host to the desired roles. As a minimum, you'll want `base_config_hosts` and `infrastructure_authorized_keys_hosts`. For a typical web service based on Docker Compose, you'll want `docker_compose_hosts`, `nginx_hosts`, and `certbot_hosts`. 2. Add the host to the desired roles. As a minimum, you'll want `base_config_hosts` and `infrastructure_authorized_keys_hosts`. For a typical web service based on Docker Compose, you'll want `docker_compose_hosts`, `nginx_hosts`, and `certbot_hosts`.
3. In the directorry `inventories/chaosknoten/host_var/`: 3. In the directorry `inventories/chaosknoten/host_var/`:
1. A file `inventories/chaosknoten/host_var/example.yaml` with the host/service specific configuration. 1. A file `inventories/chaosknoten/host_var/example.yaml` with the host/service specific configuration.
2. A file `inventories/chaosknoten/host_var/example.sops.yaml` with the encrypted secrets for the host/service. Run `sops inventories/chaosknoten/host_var/example.yaml` to edit/create that file. Entries there should generally be prefixed with `secret__` to make it easier to see where that variable is coming from in templates etc. 2. A file `inventories/chaosknoten/host_var/example.sops.yaml` with the encrypted secrets for the host/service. Run `sops inventories/chaosknoten/host_var/example.yaml` to edit/create that file. Entries here should generally be prefixed with `secret__` to make it easier to see where that variable is coming from in templates etc.
* Add an entry `ansible_pull__age_private_key` with the age private key you generated above.
## Service-specific config ## Service-specific config

View file

@ -13,7 +13,7 @@ services:
restart: unless-stopped restart: unless-stopped
redis: redis:
image: docker.io/library/redis:7.4.7 image: docker.io/library/redis:8.4.0
ports: ports:
- "6379:6379" - "6379:6379"
volumes: volumes: