Establish clean homelab infrastructure baseline

Reorganize the brownfield repository, remove retired and generated artifacts, harden ignore rules, and record the GitOps/IaC redesign.
2026-09-09 16:47:20 +00:00
commit 88a02ababa
418 changed files with 50579 additions and 0 deletions
@@ -0,0 +1,38 @@
+---
+# Inventory. Copy to hosts.local.yml and edit, or edit in place.
+all:
+  children:
+    samba_dc:
+      hosts:
+        dc1:
+          ansible_host: 192.168.10.5
+          ansible_user: ansible        # cloud-init user created by create-dc-vm.yml
+          # Provisions to dc1.ad.ddupan.top — matches samba_ad_* vars in group_vars.
+
+    samba_members:
+      hosts:
+        laptop:
+          # The KVM/hypervisor host itself (192.168.10.127 on br0), also the KMS host.
+          # Joined as an AD member fileserver by join-member.yml — runs locally.
+          ansible_connection: local
+          ansible_host: 127.0.0.1
+
+    windows_admin:
+      hosts:
+        winadmin1:
+          ansible_host: 192.168.10.6
+      vars:
+        # WinRM connection for ansible.windows modules.
+        ansible_connection: winrm
+        ansible_user: Administrator
+        ansible_password: "{{ vault_win_local_admin_password }}"
+        ansible_port: 5986
+        ansible_winrm_transport: ntlm
+        ansible_winrm_server_cert_validation: ignore
+
+    # Hosts that need INTERACTIVE domain login (PAM/SSSD), not SMB serving.
+    ad_workstations:
+      hosts:
+        retrolab:
+          ansible_host: 10.60.0.10
+          ansible_user: panxiao81