ansible

ansible/inventory/group_vars/all.yaml

@@ -0,0 +1,21 @@
+---
+# Shared configuration for all servers
+
+# Docker network for Traefik
+traefik_network: traefik
+
+# Forgejo configuration
+forgejo_version: "12"
+forgejo_domain: git.asxp.io
+forgejo_http_port: 3000
+forgejo_ssh_port: 2222  # External port (container uses 22)
+
+# Forgejo Runner configuration
+forgejo_runner_version: "11"
+forgejo_runner_capacity: 1
+forgejo_runner_timeout: 3h
+forgejo_runner_token: "***REDACTED***"
+
+# Backup configuration
+backup_dest_dir: /opt/forgejo-backup
+backup_old_server: asxpio-old

ansible/inventory/host_vars/asxpio-ops.yaml

@@ -45,3 +45,11 @@ wireguard_dns_servers:
 # SSH Hardening Configuration
 # Allow public SSH access for Forgejo git operations
 ssh_allow_public_git: true
+ssh_git_user: git
+
+# Forgejo secrets (from old server)
+forgejo_secret_key: "***REDACTED***"
+forgejo_internal_token: "***REDACTED***"
+forgejo_jwt_secret: "***REDACTED***"
+forgejo_lfs_jwt_secret: "***REDACTED***"
+letsencrypt_email: "me@asxp.io"

ansible/inventory/hosts.yaml

@@ -18,7 +18,8 @@ all:
         ops_servers:
           hosts:
             asxpio-ops:
-              ansible_host: 10.20.0.10 #65.109.14.216
+              ansible_host: 10.20.0.10
+              #ansible_host: 65.109.14.216
               server_role: ops
               server_type: cx22
               services:
@@ -32,7 +33,8 @@ all:
         services_servers:
           hosts:
             asxpio-services:
-              ansible_host: 10.20.0.20 #95.217.15.42
+              ansible_host: 10.20.0.20
+              #ansible_host: 95.217.15.42
               server_role: services
               server_type: cx43
               services:
@@ -43,3 +45,10 @@ all:
                 - factorio
                 - prosody
                 - coturn
+
+        old_servers:
+          hosts:
+            asxpio-old:
+              ansible_host: asxp.io
+              server_role: legacy
+              ansible_user: asxpi