personal_infra/ansible/group_vars/all/main.yml

new_user: counterweight
ssh_port: 22
allow_ssh_from: "any"
root_domain: contrapeso.xyz

# Uptime Kuma was decommissioned on 2026-09-11. The monitoring blocks in the
# playbooks are kept deliberately — the check logic is meant to be rewired to
# whatever replaces it. This flag keeps them inert until then. See archive/uptime_kuma/.
uptime_kuma_enabled: false

# age recipient for all backup artefacts
age_backup_recipient: "age192wwdaseqej2ggwyp884gtm05c396anp7chr0vr8m47g50fahpyqr9fsza"

# Public key small-backups-box pulls with
# Authorised on each source host for an unprivileged, dedicated user only
backup_pull_public_key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOfIixKMhA9z+Nvyx6ToZIniC8aEgyiInRiboaTTemgX offsite-backup-pull"
vars 2026-09-11 22:17:13 +02:00			`new_user: counterweight`
			`ssh_port: 22`
			`allow_ssh_from: "any"`
			`root_domain: contrapeso.xyz`
uptime-kuma: add uptime_kuma_enabled flag and make monitoring blocks inert Removing the credentials would otherwise break these playbooks mid-deploy: they template uptime_kuma_password with no assert to stop them first. 100 tasks are now guarded by uptime_kuma_enabled (false), so deployments run normally and the monitoring sections skip. A further 28 tasks were already self-guarding on monitor_setup/push_url being defined; verified that a skipped task's registered variable makes those skip cleanly rather than error. The blocks are kept on purpose — the health-check logic is the durable part and should be rewired to whatever replaces Uptime Kuma. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> 2026-09-11 22:43:55 +02:00
			`# Uptime Kuma was decommissioned on 2026-09-11. The monitoring blocks in the`
			`# playbooks are kept deliberately — the check logic is meant to be rewired to`
			`# whatever replaces it. This flag keeps them inert until then. See archive/uptime_kuma/.`
			`uptime_kuma_enabled: false`
age backups everywhere 2026-09-12 16:20:42 +02:00
			`# age recipient for all backup artefacts`
			`age_backup_recipient: "age192wwdaseqej2ggwyp884gtm05c396anp7chr0vr8m47g50fahpyqr9fsza"`

			`# Public key small-backups-box pulls with`
			`# Authorised on each source host for an unprivileged, dedicated user only`
			`backup_pull_public_key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOfIixKMhA9z+Nvyx6ToZIniC8aEgyiInRiboaTTemgX offsite-backup-pull"`