panxiao81
88a02ababa
Reorganize the brownfield repository, remove retired and generated artifacts, harden ignore rules, and record the GitOps/IaC redesign.
7 lines
291 B
Django/Jinja
7 lines
291 B
Django/Jinja
# {{ ansible_managed }}
|
|
# Broad admin for human OIDC logins (mapped from the {{ openbao_oidc_admin_group }} AD group).
|
|
# Homelab-broad on purpose; scope down to specific mounts if you want least privilege.
|
|
path "*" {
|
|
capabilities = ["create", "read", "update", "delete", "list", "sudo"]
|
|
}
|