feat(ansible): move hosts to healthcheck_profiles list; decouple audit/restic

Inventory now declares the plural healthcheck_profiles list per host (hk2 runs
pdns, rustdesk, hk2aux) instead of a single healthcheck_profile, and carries
the rustdesk server vars (rustdesk_compose_dir/relay/image) plus the rustdesk
host group.

The restic role relied on the removed singular healthcheck_profile var; it now
uses its own restic_backup_profile (set per host to vaultwarden on us2 and pdns
on hk2), so the health-check rename no longer breaks it. audit.yml's summary
labels the host's profile list instead of the singular var.
This commit is contained in:
windyboy
2026-08-12 21:16:30 +08:00
parent d0d5e5a704
commit e7296e664a
7 changed files with 23 additions and 11 deletions
+3
View File
@@ -1,5 +1,8 @@
---
restic_enabled: false
# Approved Restic source profile (a key of restic_sources) for the host. Set
# per-host in inventory; the role fails if it is not an approved source.
restic_backup_profile: ""
restic_binary: /usr/bin/restic
restic_config_path: /etc/vps-restic/repository.env
restic_state_dir: /var/lib/vps-restic