Keep sanitized Compose sources in-repo with a confirmation-gated Ansible playbook, add repo-wide validation, tighten runbook ownership/STOP/review metadata, and archive stale research docs. Co-authored-by: Cursor <cursoragent@cursor.com>
14 lines
484 B
YAML
14 lines
484 B
YAML
---
|
|
# Deploy repo-owned Compose declarations (compose/<project>/compose.yml) to
|
|
# inventory hosts. Non-secret source; server-local .env provides the values.
|
|
# Gated: apply requires compose_deploy_confirm=true; --check is a read-only
|
|
# diff + validation. See runbooks/ansible-operations.md.
|
|
- name: Deploy repo-owned Compose declarations
|
|
hosts: docker_hosts
|
|
become: true
|
|
gather_facts: false
|
|
serial: 1
|
|
roles:
|
|
- role: compose_deploy
|
|
tags: [compose, deploy, mutating]
|