Initial infra setup: Terraform, Ansible, backup roles

ansible/group_vars/gitea/vault.yml.example

@@ -0,0 +1,12 @@
+# Copy to vault.yml and encrypt with: ansible-vault encrypt vault.yml
+# Reference in playbook with: ansible-playbook --ask-vault-pass gitea.yml
+---
+cf_origin_cert: |
+  -----BEGIN CERTIFICATE-----
+  <paste cert from Cloudflare here>
+  -----END CERTIFICATE-----
+
+cf_origin_key: |
+  -----BEGIN PRIVATE KEY-----
+  <paste key from Cloudflare here>
+  -----END PRIVATE KEY-----

ansible/group_vars/infra/vars.yml

@@ -0,0 +1,6 @@
+---
+gitea_domain: "git.lunarfront.tech"
+gitea_instance_url: "https://git.lunarfront.tech"
+vaultwarden_domain: "vault.lunarfront.tech"
+vaultwarden_signups_allowed: false
+gitea_db_type: postgres