infra-automation

Files

ansible 7e89e93c9f Update documentation for PRIVATE submodules structure

📚 Documentation Update - Repository Security Enhancement

Changes:
1. Updated README.md:
   - Clarified submodule structure (both PRIVATE)
   - Updated Quick Start with submodule commands
   - Updated Project Structure diagram
   - Added SSH agent initialization

2. Created docs/submodule-workflow.md:
   - Comprehensive submodule usage guide
   - Clone, update, and workflow procedures
   - Security considerations for both submodules
   - Troubleshooting section
   - Best practices and compliance notes

3. Made ansible-inventories PRIVATE:
   - Protects internal network topology
   - Protects IP addresses and hostnames
   - Updated all documentation to reflect PRIVATE status

4. Updated inventories submodule reference:
   - Points to latest commit with security updates

Security Rationale:
- inventories → PRIVATE: Protects network topology, IP addresses
- secrets → PRIVATE: Protects SSH keys, vault files
- Main repo → PUBLIC: Playbooks and roles only

Repository Structure:
├── infra-automation (PUBLIC)
├── inventories (PRIVATE)
└── secrets (PRIVATE)

Benefits:
✅ Network topology protection
✅ Sensitive data isolation
✅ Proper access controls
✅ Independent version control
✅ Security-first approach

Documentation:
- docs/submodule-workflow.md: Complete submodule guide
- docs/git-ssh-setup.md: SSH configuration
- README.md: Updated project structure

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

2025-11-11 14:47:12 +01:00

architecture

Add comprehensive documentation structure and content

2025-11-11 01:36:25 +01:00

roles

Add comprehensive documentation structure and content

2025-11-11 01:36:25 +01:00

runbooks

Add Docker user namespace testing guide, rollback runbook, and VM backup playbook

2025-11-11 09:55:20 +01:00

security

Add Docker security audit findings and remediation plan