Reorganize the brownfield repository, remove retired and generated artifacts, harden ignore rules, and record the GitOps/IaC redesign.
39 lines
1.2 KiB
YAML
39 lines
1.2 KiB
YAML
---
|
|
# Inventory. Copy to hosts.local.yml and edit, or edit in place.
|
|
all:
|
|
children:
|
|
samba_dc:
|
|
hosts:
|
|
dc1:
|
|
ansible_host: 192.168.10.5
|
|
ansible_user: ansible # cloud-init user created by create-dc-vm.yml
|
|
# Provisions to dc1.ad.ddupan.top — matches samba_ad_* vars in group_vars.
|
|
|
|
samba_members:
|
|
hosts:
|
|
laptop:
|
|
# The KVM/hypervisor host itself (192.168.10.127 on br0), also the KMS host.
|
|
# Joined as an AD member fileserver by join-member.yml — runs locally.
|
|
ansible_connection: local
|
|
ansible_host: 127.0.0.1
|
|
|
|
windows_admin:
|
|
hosts:
|
|
winadmin1:
|
|
ansible_host: 192.168.10.6
|
|
vars:
|
|
# WinRM connection for ansible.windows modules.
|
|
ansible_connection: winrm
|
|
ansible_user: Administrator
|
|
ansible_password: "{{ vault_win_local_admin_password }}"
|
|
ansible_port: 5986
|
|
ansible_winrm_transport: ntlm
|
|
ansible_winrm_server_cert_validation: ignore
|
|
|
|
# Hosts that need INTERACTIVE domain login (PAM/SSSD), not SMB serving.
|
|
ad_workstations:
|
|
hosts:
|
|
retrolab:
|
|
ansible_host: 10.60.0.10
|
|
ansible_user: panxiao81
|