mirror of
https://github.com/fscotto/infra.git
synced 2026-09-27 19:03:47 +00:00
eab66b6d3d
* Add dormant Rocky server profile * feat: activate Rocky server profile for prometheus * fix: complete Rocky server migration tooling * Remove FreeBSD profile * feat: add Aegis Fedora CoreOS profile * docs: define Git Flow branch prefixes * Add Aegis TPM-backed btrfs storage Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com> * Preserve existing Aegis filesystem tables Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com> * Remove unsupported Aegis TPM storage Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com> * Configure Aegis pi Btrfs storage Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com> * Mount Aegis Btrfs as root Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com> * Handle Maven on Mise * Feature/aegis coreos (#7) * feat(aegis): add ARM image bootstrap workflow * feat(aegis): manage firewall and SSH hardening * feat(aegis): harden Fedora IoT services * chore(aegis): remove local TLS configuration * fix(aegis): restore supported Fedora IoT bootstrap --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>
60 lines
983 B
YAML
60 lines
983 B
YAML
---
|
|
rocky_manage_docker_repo: true
|
|
rocky_manage_github_cli_repo: true
|
|
|
|
rocky_profile_packages:
|
|
- avahi
|
|
- curl
|
|
- dmidecode
|
|
- dosfstools
|
|
- gcc
|
|
- gcc-c++
|
|
- git-delta
|
|
- gh
|
|
- gnupg2
|
|
- htop
|
|
- make
|
|
- nmap-ncat
|
|
- nodejs
|
|
- parted
|
|
- pciutils
|
|
- pinentry
|
|
- ranger
|
|
- ripgrep
|
|
|
|
rocky_docker_packages:
|
|
- containerd.io
|
|
- docker-buildx-plugin
|
|
- docker-ce
|
|
- docker-ce-cli
|
|
- docker-compose-plugin
|
|
|
|
rocky_docker_conflicting_packages:
|
|
- docker
|
|
- docker-client
|
|
- docker-client-latest
|
|
- docker-common
|
|
- docker-engine
|
|
- docker-latest
|
|
- docker-latest-logrotate
|
|
- docker-logrotate
|
|
- podman
|
|
- runc
|
|
|
|
enabled_services:
|
|
- firewalld
|
|
- docker
|
|
|
|
server_firewall_backend: firewalld
|
|
server_firewalld_zone: public
|
|
server_firewalld_services:
|
|
- ssh
|
|
server_firewalld_ports: []
|
|
server_firewalld_absent_ports:
|
|
- 22000/tcp
|
|
- 22000/udp
|
|
- 21027/udp
|
|
server_sshd_service_name: sshd
|
|
server_compose_selinux_mount_option: Z
|
|
server_syncthing_enabled: false
|