ansible/ansible.cfg

[defaults]
inventory = inventory/hosts.yml
roles_path = roles
host_key_checking = False
retry_files_enabled = False
stdout_callback = yaml
forks = 10
timeout = 30

# Logging
log_path = /var/log/ansible/timmy-fleet.log

[privilege_escalation]
become = True
become_method = sudo
become_user = root
become_ask_pass = False

[ssh_connection]
pipelining = True
ssh_args = -o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=no
feat(ansible): Canonical IaC playbook for fleet management Implements the Ansible Infrastructure as Code story from KT 2026-04-08. One canonical Ansible playbook defines: - Deadman switch (snapshot good config on health, rollback+restart on death) - Golden state config deployment (Anthropic BANNED, Kimi→Gemini→Ollama) - Cron schedule (source-controlled, no manual crontab edits) - Agent startup sequence (pull→validate→start→verify) - request_log telemetry table (every inference call logged) - Thin config pattern (immutable local pointer to upstream) - Gitea webhook handler (deploy on merge) - Config validator (rejects banned providers) Fleet inventory: Timmy (Mac), Allegro (VPS), Bezalel (VPS), Ezra (VPS) Roles: wizard_base, golden_state, deadman_switch, request_log, cron_manager Addresses: timmy-config #442, #443, #444, #445, #446 References: KT Final 2026-04-08 P2, KT Bezalel 2026-04-08 #1-#5 2026-04-09 22:25:31 +00:00			`[defaults]`
			`inventory = inventory/hosts.yml`
			`roles_path = roles`
			`host_key_checking = False`
			`retry_files_enabled = False`
			`stdout_callback = yaml`
			`forks = 10`
			`timeout = 30`

			`# Logging`
			`log_path = /var/log/ansible/timmy-fleet.log`

			`[privilege_escalation]`
			`become = True`
			`become_method = sudo`
			`become_user = root`
			`become_ask_pass = False`

			`[ssh_connection]`
			`pipelining = True`
			`ssh_args = -o ControlMaster=auto -o ControlPersist=60s -o StrictHostKeyChecking=no`