DerLinkman
30f3e9a4c6
- replace inventory/dmc12.yml with cloudlorean.yml (+ group_vars) and update all README/AGENTS call examples and the inventory table - move admin_password hash into encrypted vault.yml; remove plaintext copies from roles/bootstrap/defaults and group_vars/external.yml - bootstrap.yml loads vault.yml via vars_files (same pattern as monitoring) - monitoring: PSK config/registration updates, docker role defaults, os-updates logging/reboot refinements, ansible.cfg/execute.sh tweaks - add .project-wiki knowledge base and .github agent instructions
2.4 KiB
2.4 KiB
Code Traceability Map
Connects wiki documents to source paths. Created during the 2026-09-09 scan.
| Wiki Document | Source Paths | Notes |
|---|---|---|
| MOD-001 Bootstrap | bootstrap.yml, roles/bootstrap/ |
Composes docker + monitoring roles |
| MOD-002 Docker | playbooks/docker.yml, roles/docker/ |
Official Docker apt repo |
| MOD-003 Monitoring | playbooks/monitoring.yml, roles/monitoring/, vault.yml |
Zabbix Agent 2, PSK, API registration |
| MOD-004 OS Updates | playbooks/os-updates-deb.yml, roles/os-updates/ |
Mirror switch, reboot, logging |
| MOD-005 Healthcheck | playbooks/os-updates-deb.yml, roles/healthcheck/ |
Container quality gate |
| MOD-006 Hawser | playbooks/upgrade-hawser.yml, roles/hawser/ |
Compose stack update |
| MOD-007 Manage SSH Keys | playbooks/hardening/manage-ssh-keys.yml, roles/manage-ssh-keys/ |
No Debian guard (gap) |
| TECH-DEPLOYMENT | execute.sh, docker/, ansible.cfg |
Runtime environment |
| TECH-SECURITY | vault.yml, roles/*/defaults/, ansible.cfg, roles/monitoring/tasks/configure-psk.yml |
Secrets, SSH, PSK |
| TECH-INTEGRATIONS-ZABBIX | roles/monitoring/, inventory/group_vars/ |
Zabbix + external services |
| NFR-003 | roles/os-updates/tasks/logging_*.yml, roles/healthcheck/tasks/main.yml |
Update log audit trail |
| NFR-006 | roles/os-updates/tasks/reboot.yml, roles/bootstrap/tasks/configure-sysctl.yml |
LXC skips |
| ALERT-20260909-001 | roles/bootstrap/defaults/main.yml, inventory/group_vars/external.yml, bootstrap.yml, vault.yml |
Plaintext admin hash - resolved (vaulted) |
| ALERT-20260909-002 | inventory/cloudlorean.yml, README.md, AGENTS.md, roles/*/README.md |
Rename committed, stale docs fixed |