Initial VPS operations handbook

ansible/roles/matrix_stack/defaults/main.yml

@@ -0,0 +1,17 @@
+---
+# Matrix Stack deployment using the official ESS OCI chart
+# All sensitive values are handled by the chart's built-in initSecrets
+# or provided via pre-created Kubernetes Secrets.
+
+matrix_stack_enabled: false
+matrix_namespace: ess
+matrix_stack_chart_ref: oci://ghcr.io/element-hq/ess-helm/matrix-stack
+matrix_stack_chart_version: 26.7.2
+matrix_stack_release_name: ess
+# Root-only, non-secret values directory on the target host
+matrix_stack_values_dir: /etc/ess
+# Individual values files (must not contain secrets)
+matrix_stack_values_files:
+  - hostnames.yaml
+  - tls.yaml
+  - single-node.yaml