PhilandClaude Opus 5.5
0c14ee5b1d
The READMEs, CLAUDE.md and todo.md still described Authentik, services removed long ago (Ghost, MMDL, Postiz, Pinchflat...) and two servers. Now they list the 24 services actually deployed (checked against docker ps), explain that netcup and docker-01 are one machine, document Gondulf, StarPunk, Listmonk, Gokapi and dockcheck, and use bin/deploy throughout. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
7 lines
583 B
Markdown
7 lines
583 B
Markdown
- the password for secrets.enc is in vault_pass
|
|
- do not use the ansible-vault edit command
|
|
- NEVER, EVER, EVER, USE, OPEN, OR TOUCH SECRETS.ENC
|
|
- Whenever I talk about cron jobs I am referring to cron jobs on the remote servers managed by ansible, never the local machine
|
|
- never use secrets.enc
|
|
- all secrets go in vault.yml, never secrets.enc, never some random file you want to create, only ever vault.yml. you decrypt vault.yml with vault_pass
|
|
- Never use ansible-vault edit. Edit vault.yml only with bin/vault-run <command> (it decrypts, runs your edit, checks and re-encrypts) |