ansible

ansible/roles/common/tasks/main.yaml

@@ -0,0 +1,16 @@
+# Cloud-init already handles:
+# - Package installation (fail2ban, curl, git, htop, ncdu, tree, tmux, etc.)
+# - fail2ban service enabled and started
+# - User creation (asxpi with sudo + docker, deploy with sudo + docker)
+# - SSH hardening (key-only auth, prohibit root password)
+# - Docker installation and configuration
+# - Docker image pruning cron job (weekly at 3am Monday)
+# - Directory structure creation
+#
+# This role is now for post-cloud-init configuration only
+
+- name: Verify cloud-init completed successfully
+  command: cloud-init status --wait
+  register: cloud_init_status
+  changed_when: false
+  failed_when: "'done' not in cloud_init_status.stdout"