From 18d076fefdb8fa03dcf927b55db96c1d169dc938 Mon Sep 17 00:00:00 2001
From: alessandrovitali <mail@alessandrovitali.net>
Date: Wed, 19 Aug 2026 19:54:21 +0200
Subject: [PATCH] feat(ansible): configure coolify

---
 .gitignore                                   | 1 +
 ansible/ansible.cfg                          | 1 +
 ansible/group_vars/{all.yml => all/main.yml} | 2 +-
 ansible/group_vars/all/vault.yml             | 9 +++++++++
 ansible/host_vars/coolify.yml                | 3 +++
 ansible/inventory.tpl                        | 2 +-
 ansible/playbook.yml                         | 1 +
 ansible/requirements.yml                     | 2 +-
 8 files changed, 18 insertions(+), 3 deletions(-)
 rename ansible/group_vars/{all.yml => all/main.yml} (85%)
 create mode 100644 ansible/group_vars/all/vault.yml
 create mode 100644 ansible/host_vars/coolify.yml

diff --git a/.gitignore b/.gitignore
index 36d0546..7f8ae65 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,6 +8,7 @@
 
 # Ansible
 ansible/inventory.ini
+.vault_pass
 
 # Private Keys & Secrets
 *.pem
diff --git a/ansible/ansible.cfg b/ansible/ansible.cfg
index 4dd424d..44e7760 100644
--- a/ansible/ansible.cfg
+++ b/ansible/ansible.cfg
@@ -1,3 +1,4 @@
 [defaults]
 inventory = inventory.ini
+vault_password_file = .vault_pass
 host_key_checking = False
diff --git a/ansible/group_vars/all.yml b/ansible/group_vars/all/main.yml
similarity index 85%
rename from ansible/group_vars/all.yml
rename to ansible/group_vars/all/main.yml
index b732479..41076b4 100644
--- a/ansible/group_vars/all.yml
+++ b/ansible/group_vars/all/main.yml
@@ -1,5 +1,5 @@
 ---
-ansible_user: "ansible"
+ansible_user: "debian"
 
 sysadmin_user: "alessandrovitali"
 sysadmin_public_ssh_key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAm/J+9YG+odym9In9C4iLcrfXlrlPK2TygtI7lBNNpl"
diff --git a/ansible/group_vars/all/vault.yml b/ansible/group_vars/all/vault.yml
new file mode 100644
index 0000000..cdb6998
--- /dev/null
+++ b/ansible/group_vars/all/vault.yml
@@ -0,0 +1,9 @@
+$ANSIBLE_VAULT;1.1;AES256
+65353035363835666333386634353332383639633462326134656533366434373363333636613938
+3163306136623962346363373030643330343364333139360a376334666363396337613631303663
+34376561376439353863646561616134636230366435653431643633313130356665313163663136
+3837396262376433350a646430383332633931383561383939336561616235336232623665316537
+37353537303138646630393733626262653362636661613336336565636162343835386265343262
+66323466616364306363313638633630343766313065646135336138396639343536326162393562
+34303234653937393637643031643066383537363632383663303062303230613135363336326135
+63366363353663366137
diff --git a/ansible/host_vars/coolify.yml b/ansible/host_vars/coolify.yml
new file mode 100644
index 0000000..2a17534
--- /dev/null
+++ b/ansible/host_vars/coolify.yml
@@ -0,0 +1,3 @@
+coolify_root_username: "alessandrovitali"
+coolify_root_user_email: "mail@studiovitali.ch"
+coolify_root_user_password: "{{ vault_coolify_admin_password }}"
diff --git a/ansible/inventory.tpl b/ansible/inventory.tpl
index 990821f..873d9d6 100644
--- a/ansible/inventory.tpl
+++ b/ansible/inventory.tpl
@@ -1,2 +1,2 @@
 [coolify]
-coolify ansible_host=${public_ip} ansible_user=debian
+coolify ansible_host=${public_ip}
diff --git a/ansible/playbook.yml b/ansible/playbook.yml
index 3b75a47..0198d86 100644
--- a/ansible/playbook.yml
+++ b/ansible/playbook.yml
@@ -6,3 +6,4 @@
     - role: studio.ansible.base
     - role: studio.ansible.users
     - role: studio.ansible.security
+    - role: studio.ansible.coolify
diff --git a/ansible/requirements.yml b/ansible/requirements.yml
index 4e23b72..364cc2f 100644
--- a/ansible/requirements.yml
+++ b/ansible/requirements.yml
@@ -4,4 +4,4 @@ collections:
   - name: studio.ansible
     source: https://git.studiovita.li/studio/ansible.git ## HTTPS
     type: git
-    version: coolify
+    version: feat/coolify