Initial CV-aligned infrastructure portfolio

Rework portfolio around Linux operations, Zabbix monitoring, migration validation, and ELK/Grafana log observability. Add AAP-style LVM resize workflow, Zabbix server/proxy/agent automation assets, Linux/AIX monitoring templates, and updated validation CI.
2026-05-04 17:37:24 +00:00
commit 35e6b139fc
114 changed files with 6422 additions and 0 deletions
@@ -0,0 +1,20 @@
+---
+# Group variables for all hosts
+
+# SSH Configuration
+ssh_config:
+  port: 22
+  max_auth_tries: 3
+  alive_interval: 300
+
+# Firewall defaults
+firewall_enabled: true
+firewall_default_policy: deny
+
+# Patching defaults
+patch_enabled: true
+enforce_patch_window: true
+
+# Services monitoring
+enable_monitoring: false
+enable_health_checks: true
@@ -0,0 +1,9 @@
+---
+# Database servers group configuration
+db_type: postgresql
+db_port: 5432
+db_backup_enabled: true
+db_backup_path: /var/backups/database
+
+# Database user (use vault for production)
+db_admin_user: postgres
@@ -0,0 +1,10 @@
+---
+# Load balancers group configuration
+lb_type: haproxy
+lb_port: 443
+lb_stats_port: 8404
+lb_stats_enabled: true
+
+# Frontend configuration
+frontend_host: "0.0.0.0"
+frontend_port: 80
@@ -0,0 +1,10 @@
+---
+# Monitoring servers group configuration
+monitoring_type: prometheus
+monitoring_port: 9090
+monitoring_retention: 30d
+monitoring_scrape_interval: 15s
+
+# Grafana configuration
+grafana_port: 3000
+grafana_admin_password: "{{ vault_grafana_password }}"
@@ -0,0 +1,8 @@
+---
+# Example variables for secret values.
+# Copy these keys into an Ansible Vault encrypted file when real secrets are needed.
+
+admin_password: "replace-with-vault-managed-value"
+db_root_password: "replace-with-vault-managed-value"
+grafana_admin_password: "replace-with-vault-managed-value"
+ssh_key_passphrase: "replace-with-vault-managed-value"
@@ -0,0 +1,11 @@
+---
+# Webservers group configuration
+webserver_type: nginx
+http_port: 80
+https_port: 443
+health_check_path: /health
+
+# Application configuration
+app_name: "{{ group_names[0] | default('app') }}"
+app_user: "{{ admin_user }}"
+app_group: "{{ admin_user }}"