Introduces pre-commit framework with hooks for: - General file hygiene (trailing whitespace, EOF, large files) - Secret detection (TruffleHog) - YAML linting (yamllint) - Ansible linting (ansible-lint) - Python linting/formatting (ruff) - Shell script analysis (shellcheck, shfmt) - TOML formatting (taplo) - JSON formatting (prettier) Fixes 91+ ansible-lint violations: - Renamed variables to use role prefixes (e.g., brew_start -> alloy_brew_start) - Capitalized handler names per convention - Added changed_when to command tasks - Fixed template usage in task names Fixes shellcheck warnings: - Removed unused variables - Fixed SC2155 (declare and assign separately) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
37 lines
712 B
YAML
37 lines
712 B
YAML
---
|
|
# Tailscale serve configuration for this host
|
|
# Each service maps a Tailscale service name to local endpoints
|
|
|
|
tailscale_serve_services:
|
|
- name: svc:grafana
|
|
https:
|
|
port: 443
|
|
upstream: http://localhost:3000
|
|
|
|
- name: svc:forge
|
|
https:
|
|
port: 443
|
|
upstream: http://localhost:3001
|
|
tcp:
|
|
port: 22
|
|
upstream: tcp://localhost:2200
|
|
|
|
- name: svc:kiwix
|
|
https:
|
|
port: 443
|
|
upstream: http://localhost:5501
|
|
|
|
- name: svc:pypi
|
|
https:
|
|
port: 443
|
|
upstream: http://127.0.0.1:3141
|
|
|
|
- name: svc:pg
|
|
tcp:
|
|
port: 5432
|
|
upstream: tcp://localhost:5432
|
|
|
|
- name: svc:feed
|
|
https:
|
|
port: 443
|
|
upstream: http://localhost:8080
|