Forked from
Arch Linux / infrastructure
379 commits behind the upstream repository.
-
Evangelos Foutras authored
We make almost no use of the dynamic properties of the hcloud inventory, so we can simplify this by declaring all cloud servers in the main hosts inventory. The main benefit of this change is that temporary and experimental cloud servers are not automatically included in the Ansible playbooks. In such cases it is usually incorrect to deploy changes to these unknown servers. A smaller side benefit is that Ansible will now use hostnames to connect to cloud servers, whereas the dynamic inventory provided IPv4 addresses. This results in more meaningful ~/.ssh/known_hosts entries.
Evangelos Foutras authoredWe make almost no use of the dynamic properties of the hcloud inventory, so we can simplify this by declaring all cloud servers in the main hosts inventory. The main benefit of this change is that temporary and experimental cloud servers are not automatically included in the Ansible playbooks. In such cases it is usually incorrect to deploy changes to these unknown servers. A smaller side benefit is that Ansible will now use hostnames to connect to cloud servers, whereas the dynamic inventory provided IPv4 addresses. This results in more meaningful ~/.ssh/known_hosts entries.
Code owners
Assign users and groups as approvers for specific file changes. Learn more.
ansible.cfg 431 B
[defaults]
inventory = hosts
library = library
remote_tmp = $HOME/.ansible/tmp
remote_user = root
nocows = 1
roles_path = roles
vault_id_match = True
vault_identity_list = default@misc/vault-keyring-client.sh,super@misc/vault-keyring-client.sh
retry_files_enabled = False
callback_plugins = plugins/callback
callbacks_enabled = profile_tasks
max_diff_size = 250000
[ssh_connection]
pipelining = True
scp_if_ssh = True
retries = 5