rename dmc12 inventory to cloudlorean and vault admin_password

- replace inventory/dmc12.yml with cloudlorean.yml (+ group_vars) and update all README/AGENTS call examples and the inventory table - move admin_password hash into encrypted vault.yml; remove plaintext copies from roles/bootstrap/defaults and group_vars/external.yml - bootstrap.yml loads vault.yml via vars_files (same pattern as monitoring) - monitoring: PSK config/registration updates, docker role defaults, os-updates logging/reboot refinements, ansible.cfg/execute.sh tweaks - add .project-wiki knowledge base and .github agent instructions
2026-09-09 14:14:18 +02:00
parent a31751af1d
commit 30f3e9a4c6
96 changed files with 3602 additions and 138 deletions
@@ -0,0 +1,364 @@
+version: 1
+updated: '2026-09-09'
+documents:
+- id: GLOSSARY
+  type: note
+  title: Glossary
+  path: GLOSSARY.md
+  status: placeholder
+  tags:
+  - glossary
+  related: []
+  source_paths: []
+  confidence: unknown
+- id: PROJECT
+  type: project
+  title: Project Overview
+  path: PROJECT.md
+  status: active
+  tags:
+  - project
+  - ansible
+  - infrastructure
+  related:
+  - PRODUCT-BRIEF
+  - CONSTRAINTS
+  source_paths:
+  - AGENTS.md
+  - README.md
+  confidence: confirmed
+- id: CURRENT-PLAN
+  type: note
+  title: Current Plan
+  path: implementation/current-plan.md
+  status: placeholder
+  tags:
+  - implementation
+  - plan
+  related: []
+  source_paths: []
+  confidence: unknown
+- id: SCAN-20260909
+  type: scan-report
+  title: Codebase Scan 2026-09-09
+  path: implementation/scans/scan-20260909.md
+  status: active
+  tags:
+  - scan
+  related:
+  - PROJECT
+  - TECH-CODEBASE-MAP
+  - ALERT-20260909-001
+  - ALERT-20260909-002
+  source_paths:
+  - README.md
+  - roles/
+  - playbooks/
+  - inventory/
+  - docker/
+  confidence: confirmed
+- id: CONSTRAINTS
+  type: note
+  title: Constraints
+  path: requirements/constraints.md
+  status: active
+  tags:
+  - requirements
+  - constraints
+  related:
+  - PROJECT
+  source_paths:
+  - AGENTS.md
+  confidence: confirmed
+- id: OPEN-QUESTIONS
+  type: note
+  title: Open Questions
+  path: requirements/open-questions.md
+  status: active
+  tags:
+  - requirements
+  - open-questions
+  related:
+  - SCAN-20260909
+  - ALERT-20260909-001
+  - ALERT-20260909-002
+  source_paths:
+  - AGENTS.md
+  - README.md
+  - inventory/group_vars/external.yml
+  confidence: confirmed
+- id: PRODUCT-BRIEF
+  type: note
+  title: Product Brief
+  path: requirements/product-brief.md
+  status: placeholder
+  tags:
+  - requirements
+  - product
+  related: []
+  source_paths: []
+  confidence: unknown
+- id: REQ-FUNC-HOST-LIFECYCLE
+  type: requirements
+  title: Host Lifecycle Operations
+  path: requirements/functional/host-lifecycle-operations.md
+  status: active
+  tags:
+  - requirements
+  - functional
+  related:
+  - PROJECT
+  - CONSTRAINTS
+  source_paths:
+  - README.md
+  - AGENTS.md
+  confidence: confirmed
+- id: NFR-OPERATIONAL-POLICIES
+  type: requirements
+  title: Operational Policies
+  path: requirements/non-functional/operational-policies.md
+  status: active
+  tags:
+  - requirements
+  - non-functional
+  related:
+  - PROJECT
+  - CONSTRAINTS
+  source_paths:
+  - README.md
+  - AGENTS.md
+  confidence: confirmed
+- id: TECH-ARCHITECTURE
+  type: technical
+  title: Architecture
+  path: technical/architecture.md
+  status: active
+  tags:
+  - technical
+  - architecture
+  - ansible
+  related:
+  - TECH-CODEBASE-MAP
+  - TECH-DEPLOYMENT
+  source_paths:
+  - ansible.cfg
+  - execute.sh
+  - roles/
+  confidence: confirmed
+- id: TECH-CODEBASE-MAP
+  type: technical
+  title: Codebase Map
+  path: technical/codebase-map.md
+  status: active
+  tags:
+  - technical
+  - codebase
+  related:
+  - TECH-ARCHITECTURE
+  source_paths:
+  - roles/
+  - playbooks/
+  - inventory/
+  confidence: confirmed
+- id: TECH-DEPLOYMENT
+  type: technical
+  title: Deployment
+  path: technical/deployment.md
+  status: active
+  tags:
+  - technical
+  - deployment
+  - docker
+  related:
+  - TECH-ARCHITECTURE
+  source_paths:
+  - execute.sh
+  - docker/
+  confidence: confirmed
+- id: TECH-SECURITY
+  type: technical
+  title: Security
+  path: technical/security.md
+  status: active
+  tags:
+  - technical
+  - security
+  related:
+  - ALERT-20260909-001
+  - NFR-002
+  source_paths:
+  - vault.yml
+  - roles/bootstrap/defaults/main.yml
+  - ansible.cfg
+  confidence: confirmed
+- id: TECH-TESTING
+  type: technical
+  title: Testing
+  path: technical/testing.md
+  status: active
+  tags:
+  - technical
+  - testing
+  related:
+  - MOD-005
+  source_paths: []
+  confidence: confirmed
+- id: TECH-INTEGRATIONS-ZABBIX
+  type: technical
+  title: Integrations - Zabbix
+  path: technical/integrations/zabbix.md
+  status: active
+  tags:
+  - technical
+  - integration
+  - zabbix
+  related:
+  - MOD-003
+  source_paths:
+  - roles/monitoring/
+  - inventory/group_vars/
+  confidence: confirmed
+- id: MOD-001
+  type: module
+  title: Bootstrap Role
+  path: technical/modules/MOD-001-bootstrap-role.md
+  status: active
+  tags:
+  - module
+  - bootstrap
+  related:
+  - MOD-002
+  - MOD-003
+  - REQ-001
+  source_paths:
+  - roles/bootstrap/
+  confidence: confirmed
+- id: MOD-002
+  type: module
+  title: Docker Role
+  path: technical/modules/MOD-002-docker-role.md
+  status: active
+  tags:
+  - module
+  - docker
+  related:
+  - MOD-001
+  - MOD-006
+  - REQ-002
+  source_paths:
+  - roles/docker/
+  confidence: confirmed
+- id: MOD-003
+  type: module
+  title: Monitoring Role (Zabbix Agent 2)
+  path: technical/modules/MOD-003-monitoring-role.md
+  status: active
+  tags:
+  - module
+  - monitoring
+  - zabbix
+  related:
+  - MOD-001
+  - TECH-INTEGRATIONS-ZABBIX
+  - REQ-003
+  source_paths:
+  - roles/monitoring/
+  confidence: confirmed
+- id: MOD-004
+  type: module
+  title: OS Updates Role
+  path: technical/modules/MOD-004-os-updates-role.md
+  status: active
+  tags:
+  - module
+  - os-updates
+  related:
+  - MOD-005
+  - REQ-004
+  - NFR-006
+  source_paths:
+  - roles/os-updates/
+  confidence: confirmed
+- id: MOD-005
+  type: module
+  title: Healthcheck Role
+  path: technical/modules/MOD-005-healthcheck-role.md
+  status: active
+  tags:
+  - module
+  - healthcheck
+  - docker
+  related:
+  - MOD-004
+  - REQ-004
+  source_paths:
+  - roles/healthcheck/
+  confidence: confirmed
+- id: MOD-006
+  type: module
+  title: Hawser Role
+  path: technical/modules/MOD-006-hawser-role.md
+  status: active
+  tags:
+  - module
+  - hawser
+  - docker
+  related:
+  - MOD-002
+  - REQ-005
+  source_paths:
+  - roles/hawser/
+  confidence: confirmed
+- id: MOD-007
+  type: module
+  title: Manage SSH Keys Role
+  path: technical/modules/MOD-007-manage-ssh-keys-role.md
+  status: active
+  tags:
+  - module
+  - ssh
+  - hardening
+  related:
+  - REQ-006
+  source_paths:
+  - roles/manage-ssh-keys/
+  confidence: confirmed
+- id: ALERT-20260909-001
+  type: alert
+  title: Plaintext admin password hash committed outside vault
+  path: alerts/ALERT-20260909-001.md
+  status: resolved
+  resolved: '2026-09-09'
+  severity: high
+  tags:
+  - alert
+  - security
+  - secrets
+  related:
+  - NFR-002
+  - OQ-006
+  - TECH-SECURITY
+  source_paths:
+  - roles/bootstrap/defaults/main.yml
+  - inventory/group_vars/external.yml
+  confidence: confirmed
+- id: ALERT-20260909-002
+  type: alert
+  title: Uncommitted dmc12-to-cloudlorean rename and stale documentation
+  path: alerts/ALERT-20260909-002.md
+  status: resolved
+  resolved: '2026-09-09'
+  severity: medium
+  tags:
+  - alert
+  - consistency
+  - git
+  related:
+  - OQ-003
+  - SCAN-20260909
+  source_paths:
+  - inventory/dmc12.yml
+  - inventory/cloudlorean.yml
+  - README.md
+  - AGENTS.md
+  confidence: confirmed