DerLinkman
30f3e9a4c6
- replace inventory/dmc12.yml with cloudlorean.yml (+ group_vars) and update all README/AGENTS call examples and the inventory table - move admin_password hash into encrypted vault.yml; remove plaintext copies from roles/bootstrap/defaults and group_vars/external.yml - bootstrap.yml loads vault.yml via vars_files (same pattern as monitoring) - monitoring: PSK config/registration updates, docker role defaults, os-updates logging/reboot refinements, ansible.cfg/execute.sh tweaks - add .project-wiki knowledge base and .github agent instructions
365 lines
6.6 KiB
YAML
365 lines
6.6 KiB
YAML
version: 1
|
|
updated: '2026-09-09'
|
|
documents:
|
|
- id: GLOSSARY
|
|
type: note
|
|
title: Glossary
|
|
path: GLOSSARY.md
|
|
status: placeholder
|
|
tags:
|
|
- glossary
|
|
related: []
|
|
source_paths: []
|
|
confidence: unknown
|
|
- id: PROJECT
|
|
type: project
|
|
title: Project Overview
|
|
path: PROJECT.md
|
|
status: active
|
|
tags:
|
|
- project
|
|
- ansible
|
|
- infrastructure
|
|
related:
|
|
- PRODUCT-BRIEF
|
|
- CONSTRAINTS
|
|
source_paths:
|
|
- AGENTS.md
|
|
- README.md
|
|
confidence: confirmed
|
|
- id: CURRENT-PLAN
|
|
type: note
|
|
title: Current Plan
|
|
path: implementation/current-plan.md
|
|
status: placeholder
|
|
tags:
|
|
- implementation
|
|
- plan
|
|
related: []
|
|
source_paths: []
|
|
confidence: unknown
|
|
- id: SCAN-20260909
|
|
type: scan-report
|
|
title: Codebase Scan 2026-09-09
|
|
path: implementation/scans/scan-20260909.md
|
|
status: active
|
|
tags:
|
|
- scan
|
|
related:
|
|
- PROJECT
|
|
- TECH-CODEBASE-MAP
|
|
- ALERT-20260909-001
|
|
- ALERT-20260909-002
|
|
source_paths:
|
|
- README.md
|
|
- roles/
|
|
- playbooks/
|
|
- inventory/
|
|
- docker/
|
|
confidence: confirmed
|
|
- id: CONSTRAINTS
|
|
type: note
|
|
title: Constraints
|
|
path: requirements/constraints.md
|
|
status: active
|
|
tags:
|
|
- requirements
|
|
- constraints
|
|
related:
|
|
- PROJECT
|
|
source_paths:
|
|
- AGENTS.md
|
|
confidence: confirmed
|
|
- id: OPEN-QUESTIONS
|
|
type: note
|
|
title: Open Questions
|
|
path: requirements/open-questions.md
|
|
status: active
|
|
tags:
|
|
- requirements
|
|
- open-questions
|
|
related:
|
|
- SCAN-20260909
|
|
- ALERT-20260909-001
|
|
- ALERT-20260909-002
|
|
source_paths:
|
|
- AGENTS.md
|
|
- README.md
|
|
- inventory/group_vars/external.yml
|
|
confidence: confirmed
|
|
- id: PRODUCT-BRIEF
|
|
type: note
|
|
title: Product Brief
|
|
path: requirements/product-brief.md
|
|
status: placeholder
|
|
tags:
|
|
- requirements
|
|
- product
|
|
related: []
|
|
source_paths: []
|
|
confidence: unknown
|
|
- id: REQ-FUNC-HOST-LIFECYCLE
|
|
type: requirements
|
|
title: Host Lifecycle Operations
|
|
path: requirements/functional/host-lifecycle-operations.md
|
|
status: active
|
|
tags:
|
|
- requirements
|
|
- functional
|
|
related:
|
|
- PROJECT
|
|
- CONSTRAINTS
|
|
source_paths:
|
|
- README.md
|
|
- AGENTS.md
|
|
confidence: confirmed
|
|
- id: NFR-OPERATIONAL-POLICIES
|
|
type: requirements
|
|
title: Operational Policies
|
|
path: requirements/non-functional/operational-policies.md
|
|
status: active
|
|
tags:
|
|
- requirements
|
|
- non-functional
|
|
related:
|
|
- PROJECT
|
|
- CONSTRAINTS
|
|
source_paths:
|
|
- README.md
|
|
- AGENTS.md
|
|
confidence: confirmed
|
|
- id: TECH-ARCHITECTURE
|
|
type: technical
|
|
title: Architecture
|
|
path: technical/architecture.md
|
|
status: active
|
|
tags:
|
|
- technical
|
|
- architecture
|
|
- ansible
|
|
related:
|
|
- TECH-CODEBASE-MAP
|
|
- TECH-DEPLOYMENT
|
|
source_paths:
|
|
- ansible.cfg
|
|
- execute.sh
|
|
- roles/
|
|
confidence: confirmed
|
|
- id: TECH-CODEBASE-MAP
|
|
type: technical
|
|
title: Codebase Map
|
|
path: technical/codebase-map.md
|
|
status: active
|
|
tags:
|
|
- technical
|
|
- codebase
|
|
related:
|
|
- TECH-ARCHITECTURE
|
|
source_paths:
|
|
- roles/
|
|
- playbooks/
|
|
- inventory/
|
|
confidence: confirmed
|
|
- id: TECH-DEPLOYMENT
|
|
type: technical
|
|
title: Deployment
|
|
path: technical/deployment.md
|
|
status: active
|
|
tags:
|
|
- technical
|
|
- deployment
|
|
- docker
|
|
related:
|
|
- TECH-ARCHITECTURE
|
|
source_paths:
|
|
- execute.sh
|
|
- docker/
|
|
confidence: confirmed
|
|
- id: TECH-SECURITY
|
|
type: technical
|
|
title: Security
|
|
path: technical/security.md
|
|
status: active
|
|
tags:
|
|
- technical
|
|
- security
|
|
related:
|
|
- ALERT-20260909-001
|
|
- NFR-002
|
|
source_paths:
|
|
- vault.yml
|
|
- roles/bootstrap/defaults/main.yml
|
|
- ansible.cfg
|
|
confidence: confirmed
|
|
- id: TECH-TESTING
|
|
type: technical
|
|
title: Testing
|
|
path: technical/testing.md
|
|
status: active
|
|
tags:
|
|
- technical
|
|
- testing
|
|
related:
|
|
- MOD-005
|
|
source_paths: []
|
|
confidence: confirmed
|
|
- id: TECH-INTEGRATIONS-ZABBIX
|
|
type: technical
|
|
title: Integrations - Zabbix
|
|
path: technical/integrations/zabbix.md
|
|
status: active
|
|
tags:
|
|
- technical
|
|
- integration
|
|
- zabbix
|
|
related:
|
|
- MOD-003
|
|
source_paths:
|
|
- roles/monitoring/
|
|
- inventory/group_vars/
|
|
confidence: confirmed
|
|
- id: MOD-001
|
|
type: module
|
|
title: Bootstrap Role
|
|
path: technical/modules/MOD-001-bootstrap-role.md
|
|
status: active
|
|
tags:
|
|
- module
|
|
- bootstrap
|
|
related:
|
|
- MOD-002
|
|
- MOD-003
|
|
- REQ-001
|
|
source_paths:
|
|
- roles/bootstrap/
|
|
confidence: confirmed
|
|
- id: MOD-002
|
|
type: module
|
|
title: Docker Role
|
|
path: technical/modules/MOD-002-docker-role.md
|
|
status: active
|
|
tags:
|
|
- module
|
|
- docker
|
|
related:
|
|
- MOD-001
|
|
- MOD-006
|
|
- REQ-002
|
|
source_paths:
|
|
- roles/docker/
|
|
confidence: confirmed
|
|
- id: MOD-003
|
|
type: module
|
|
title: Monitoring Role (Zabbix Agent 2)
|
|
path: technical/modules/MOD-003-monitoring-role.md
|
|
status: active
|
|
tags:
|
|
- module
|
|
- monitoring
|
|
- zabbix
|
|
related:
|
|
- MOD-001
|
|
- TECH-INTEGRATIONS-ZABBIX
|
|
- REQ-003
|
|
source_paths:
|
|
- roles/monitoring/
|
|
confidence: confirmed
|
|
- id: MOD-004
|
|
type: module
|
|
title: OS Updates Role
|
|
path: technical/modules/MOD-004-os-updates-role.md
|
|
status: active
|
|
tags:
|
|
- module
|
|
- os-updates
|
|
related:
|
|
- MOD-005
|
|
- REQ-004
|
|
- NFR-006
|
|
source_paths:
|
|
- roles/os-updates/
|
|
confidence: confirmed
|
|
- id: MOD-005
|
|
type: module
|
|
title: Healthcheck Role
|
|
path: technical/modules/MOD-005-healthcheck-role.md
|
|
status: active
|
|
tags:
|
|
- module
|
|
- healthcheck
|
|
- docker
|
|
related:
|
|
- MOD-004
|
|
- REQ-004
|
|
source_paths:
|
|
- roles/healthcheck/
|
|
confidence: confirmed
|
|
- id: MOD-006
|
|
type: module
|
|
title: Hawser Role
|
|
path: technical/modules/MOD-006-hawser-role.md
|
|
status: active
|
|
tags:
|
|
- module
|
|
- hawser
|
|
- docker
|
|
related:
|
|
- MOD-002
|
|
- REQ-005
|
|
source_paths:
|
|
- roles/hawser/
|
|
confidence: confirmed
|
|
- id: MOD-007
|
|
type: module
|
|
title: Manage SSH Keys Role
|
|
path: technical/modules/MOD-007-manage-ssh-keys-role.md
|
|
status: active
|
|
tags:
|
|
- module
|
|
- ssh
|
|
- hardening
|
|
related:
|
|
- REQ-006
|
|
source_paths:
|
|
- roles/manage-ssh-keys/
|
|
confidence: confirmed
|
|
- id: ALERT-20260909-001
|
|
type: alert
|
|
title: Plaintext admin password hash committed outside vault
|
|
path: alerts/ALERT-20260909-001.md
|
|
status: resolved
|
|
resolved: '2026-09-09'
|
|
severity: high
|
|
tags:
|
|
- alert
|
|
- security
|
|
- secrets
|
|
related:
|
|
- NFR-002
|
|
- OQ-006
|
|
- TECH-SECURITY
|
|
source_paths:
|
|
- roles/bootstrap/defaults/main.yml
|
|
- inventory/group_vars/external.yml
|
|
confidence: confirmed
|
|
- id: ALERT-20260909-002
|
|
type: alert
|
|
title: Uncommitted dmc12-to-cloudlorean rename and stale documentation
|
|
path: alerts/ALERT-20260909-002.md
|
|
status: resolved
|
|
resolved: '2026-09-09'
|
|
severity: medium
|
|
tags:
|
|
- alert
|
|
- consistency
|
|
- git
|
|
related:
|
|
- OQ-003
|
|
- SCAN-20260909
|
|
source_paths:
|
|
- inventory/dmc12.yml
|
|
- inventory/cloudlorean.yml
|
|
- README.md
|
|
- AGENTS.md
|
|
confidence: confirmed
|