DerLinkman
30f3e9a4c6
- replace inventory/dmc12.yml with cloudlorean.yml (+ group_vars) and update all README/AGENTS call examples and the inventory table - move admin_password hash into encrypted vault.yml; remove plaintext copies from roles/bootstrap/defaults and group_vars/external.yml - bootstrap.yml loads vault.yml via vars_files (same pattern as monitoring) - monitoring: PSK config/registration updates, docker role defaults, os-updates logging/reboot refinements, ansible.cfg/execute.sh tweaks - add .project-wiki knowledge base and .github agent instructions
130 lines
4.0 KiB
YAML
130 lines
4.0 KiB
YAML
version: 1
|
|
updated: '2026-09-09'
|
|
records:
|
|
REQ-001:
|
|
requirement: REQ-001
|
|
evidence:
|
|
- source: README.md
|
|
locator: "Playbooks table: 'bootstrap.yml | bootstrap | Vollständige Ersteinrichtung eines Debian-Hosts'"
|
|
type: doc
|
|
- source: roles/bootstrap/tasks/main.yml
|
|
locator: "import_tasks list + import_role docker/monitoring"
|
|
type: code
|
|
confidence: confirmed
|
|
REQ-002:
|
|
requirement: REQ-002
|
|
evidence:
|
|
- source: README.md
|
|
locator: "Playbooks table: 'playbooks/docker.yml | docker | Docker Engine installieren'"
|
|
type: doc
|
|
- source: roles/docker/defaults/main.yml
|
|
locator: "docker_mirror, docker_packages"
|
|
type: code
|
|
confidence: confirmed
|
|
REQ-003:
|
|
requirement: REQ-003
|
|
evidence:
|
|
- source: README.md
|
|
locator: "Playbooks table: 'playbooks/monitoring.yml | monitoring | Zabbix Agent 2 installieren & registrieren'"
|
|
type: doc
|
|
- source: roles/monitoring/tasks/register-host.yml
|
|
locator: "community.zabbix.zabbix_host registration"
|
|
type: code
|
|
confidence: confirmed
|
|
REQ-004:
|
|
requirement: REQ-004
|
|
evidence:
|
|
- source: README.md
|
|
locator: "Playbooks table: 'playbooks/os-updates-deb.yml | os-updates, healthcheck | Pakete aktualisieren + Healthcheck'"
|
|
type: doc
|
|
- source: playbooks/os-updates-deb.yml
|
|
locator: "include_role os-updates + healthcheck"
|
|
type: code
|
|
confidence: confirmed
|
|
REQ-005:
|
|
requirement: REQ-005
|
|
evidence:
|
|
- source: README.md
|
|
locator: "Playbooks table: 'playbooks/upgrade-hawser.yml | hawser | Hawser-Stack aktualisieren'"
|
|
type: doc
|
|
- source: roles/hawser/tasks/update-stack.yml
|
|
locator: "docker_compose_v2 pull: always"
|
|
type: code
|
|
confidence: confirmed
|
|
REQ-006:
|
|
requirement: REQ-006
|
|
evidence:
|
|
- source: README.md
|
|
locator: "Playbooks table: 'playbooks/hardening/manage-ssh-keys.yml | manage-ssh-keys | SSH-Schlüssel hartieren'"
|
|
type: doc
|
|
- source: roles/manage-ssh-keys/tasks/main.yml
|
|
locator: "validate/add/remove key subtasks"
|
|
type: code
|
|
confidence: confirmed
|
|
NFR-001:
|
|
requirement: NFR-001
|
|
evidence:
|
|
- source: README.md
|
|
locator: "Voraussetzungen: 'Ziel-Hosts: Debian (alle Playbooks prüfen os_family == \"Debian\")'"
|
|
type: doc
|
|
- source: bootstrap.yml
|
|
locator: "fail when os_family != Debian"
|
|
type: code
|
|
- source: playbooks/hardening/manage-ssh-keys.yml
|
|
locator: "no os_family guard (deviation)"
|
|
type: code
|
|
confidence: confirmed
|
|
NFR-002:
|
|
requirement: NFR-002
|
|
evidence:
|
|
- source: README.md
|
|
locator: "Secrets & Vault + Beitragen rule 3"
|
|
type: doc
|
|
- source: roles/bootstrap/defaults/main.yml
|
|
locator: "comment pointing to vault.yml (violation resolved, ALERT-20260909-001)"
|
|
type: code
|
|
- source: bootstrap.yml
|
|
locator: "vars_files: vault.yml (vaulted admin_password)"
|
|
type: code
|
|
confidence: confirmed
|
|
NFR-003:
|
|
requirement: NFR-003
|
|
evidence:
|
|
- source: README.md
|
|
locator: "Logging section: logs/<inventory>/<hostname>/update.log"
|
|
type: doc
|
|
- source: roles/os-updates/defaults/main.yml
|
|
locator: "os_update_log_file template"
|
|
type: code
|
|
confidence: confirmed
|
|
NFR-004:
|
|
requirement: NFR-004
|
|
evidence:
|
|
- source: README.md
|
|
locator: "Docker-Ausführungsumgebung section"
|
|
type: doc
|
|
- source: execute.sh
|
|
locator: "docker run with repo mount /ansible"
|
|
type: code
|
|
confidence: confirmed
|
|
NFR-005:
|
|
requirement: NFR-005
|
|
evidence:
|
|
- source: AGENTS.md
|
|
locator: "Dokumentationspflicht mapping table"
|
|
type: doc
|
|
- source: README.md
|
|
locator: "Beitragen rule 2"
|
|
type: doc
|
|
confidence: confirmed
|
|
NFR-006:
|
|
requirement: NFR-006
|
|
evidence:
|
|
- source: AGENTS.md
|
|
locator: "OS-Unterstützung: LXC sysctl/reboot skip"
|
|
type: doc
|
|
- source: roles/os-updates/tasks/reboot.yml
|
|
locator: "when: ansible_facts['virtualization_type'] != 'lxc'"
|
|
type: code
|
|
confidence: confirmed
|