Ansible Automation Playbook

Production-ready Ansible patterns, roles, and CI templates — the reference architecture we use on real client engagements to manage thousands of Linux and Windows hosts. Stop rebuilding the same scaffolding on every project.

What's inside:

• A scalable repository layout (inventories, group_vars, roles, collections, playbooks, vault, molecule, CI) ready for 10 or 10,000 hosts.

• 12 reusable roles: base hardening, users, SSH, sudoers, time, logging, monitoring agents, package mirrors, container runtimes, nginx, app_deploy, and database client tooling.

• Static and dynamic inventory templates (AWS EC2, GCP, Azure, Proxmox, Netbox) with sensible group_vars layering.

• Ansible Vault layout with a password client script that fetches the master key from 1Password / HashiCorp Vault / AWS Secrets Manager — nothing sensitive committed to git.

• Molecule scenarios (Podman, Docker, EC2 drivers) with idempotency and verifier steps for every role.

• AWX / Ansible Automation Platform project import and an Event-Driven Ansible rule book sample.

• GitHub Actions and GitLab CI templates: ansible-lint, yamllint, syntax-check, Molecule matrix, gated apply pipelines.

• pre-commit hooks and an opinionated ansible.cfg tuned for production fleets.

• Reference of the 22-level variable precedence and a numeric performance playbook (which knob delivers 2x, which delivers 10x, which breaks idempotency).

Tested against Ansible Core 2.16 and 2.17. Lifetime updates while the playbook is maintained, delivered via /library.