Manage routine operations through Ansible

2026-08-03 16:01:35 +08:00
parent b73125e5bc
commit 7a9acb4f7c
25 changed files with 353 additions and 59 deletions
@@ -50,4 +50,13 @@ Official stance: prefer environment variables; `config.json` is **not** the reco
 5. Do not commit secrets; do not copy passwords from Obsidian into this repo.
 6. Verify SMTP with AUTH (not TCP-only) — [vaultwarden-health](../runbooks/vaultwarden-health.md) §5.

+## Operations path
+
+Use `ansible/playbooks/health-report.yml --limit vaultwarden` for routine
+status. After a reviewed effective-configuration change that needs a container
+recreate, use the allowlisted `compose-reconcile.yml` target `vaultwarden`.
+Add `service_reconcile_restart_traefik=true` only when the documented
+post-recreate 404 occurs. Direct Compose commands remain diagnostic tools, not
+the routine control path.
+
 Replay migration steps: [runbooks/vaultwarden-sqlite-to-postgres.md](../runbooks/vaultwarden-sqlite-to-postgres.md).