new groups, stop using all

ansible/infra/01_user_and_access_setup_playbook.yml

@@ -1,5 +1,5 @@
 - name: Secure Debian
-  hosts: all
+  hosts: managed
   vars_files:
     - ../infra_vars.yml
   become: true

ansible/infra/02_firewall_and_fail2ban_playbook.yml

@@ -1,5 +1,5 @@
 - name: Secure Debian
-  hosts: all
+  hosts: managed
   vars_files:
     - ../infra_vars.yml
   become: true

ansible/infra/410_disk_usage_alerts.yml

@@ -1,5 +1,5 @@
 - name: Deploy Disk Usage Monitoring
-  hosts: all
+  hosts: managed
   become: yes
   vars_files:
     - ../infra_vars.yml

ansible/infra/420_system_healthcheck.yml

@@ -1,5 +1,5 @@
 - name: Deploy System Healthcheck Monitoring
-  hosts: all
+  hosts: managed
   become: yes
   vars_files:
     - ../infra_vars.yml

ansible/infra/900_install_rsync.yml

@@ -1,5 +1,5 @@
 - name: Install rsync
-  hosts: all
+  hosts: managed
   vars_files:
     - ../infra_vars.yml
   become: true

ansible/infra/910_docker_playbook.yml

@@ -1,5 +1,5 @@
 - name: Install Docker and Docker Compose on Debian 12
-  hosts: all
+  hosts: managed
 
   become: yes
   tasks:

ansible/infra/920_join_headscale_mesh.yml

@@ -1,5 +1,5 @@
 - name: Join machine to headscale mesh network
-  hosts: all
+  hosts: managed
   become: yes
   vars_files:
     - ../infra_vars.yml

ansible/inventory.ini

@@ -23,3 +23,39 @@ localhost ansible_connection=local ansible_user=counterweight gpg_recipient=coun
 [arbret]
 prd-arbret ansible_host=167.99.242.62 ansible_user=counterweight ansible_port=22 ansible_ssh_private_key_file=~/.ssh/counterganzua
 
+[edge]
+vipy
+
+[monitoring]
+watchtower
+
+[vpn_control]
+spacey
+
+[hypervisor]
+nodito
+
+[bitcoin]
+knots_box_local
+
+[electrum]
+fulcrum_box_local
+
+[mempool]
+mempool_box_local
+
+[memos]
+memos_box_local
+
+[ci_runner]
+forgejo_runner_local
+
+[control]
+localhost
+
+# Every machine Ansible may configure as a server.
+# Deliberately EXCLUDES [control] (your laptop) and [arbret].
+[managed:children]
+vps
+nodito_host
+nodito_vms