iac/ansible/roles
Sergei Poljanski b4d6852a80 ansible: run Xray on asxpio-services
The VLESS Reality proxy ran from a hand-installed binary on the
temporary server. Run the upstream image instead, pinned and on the
host network, with only CAP_NET_BIND_SERVICE; its config (keys and
client id) is in the vault.

Assisted-by: Claude:opus-5-5
2026-11-12 20:56:42 +04:00
..
base base: drop the one-off crontab migration 2026-11-12 07:01:07 +04:00
crawler_alert ansible: describe what runs on the servers 2026-11-12 06:47:08 +04:00
docker_service docker_service: let the dry run of a new service pass 2026-11-12 20:55:34 +04:00
forgejo ansible: describe what runs on the servers 2026-11-12 06:47:08 +04:00
forgejo_runner ansible: describe what runs on the servers 2026-11-12 06:47:08 +04:00
minecraft ansible: describe what runs on the servers 2026-11-12 06:47:08 +04:00
minecraft_fossils ansible: retire Minecraft Fossils 2026-11-12 20:54:22 +04:00
restic_backup ansible: nightly restic backups to both object storage regions 2026-11-12 20:53:44 +04:00
s3fs s3fs: allow turning the mounts off, off on asxpio-ops 2026-10-12 05:03:11 +04:00
sillytavern ansible: describe what runs on the servers 2026-11-12 06:47:08 +04:00
ssh_hardening ssh: add user zerrtika 2026-08-13 07:04:04 +04:00
swap swap: add a swapfile role, 2 GB on asxpio-ops 2026-10-12 05:31:32 +04:00
traefik ansible: describe what runs on the servers 2026-11-12 06:47:08 +04:00
wireguard ansible rework 2025-11-04 11:06:35 +02:00
xmpp ansible: run the asxp.io XMPP server on asxpio-services 2026-11-12 20:56:42 +04:00
xray ansible: run Xray on asxpio-services 2026-11-12 20:56:42 +04:00