Add the lint configuration and the Makefile

ansible-lint at the production profile from the first commit, which is much cheaper than adopting it later. yamllint forbids implicit octal so a file mode cannot silently become an integer, and the Makefile is a thin wrapper so `make check` and CI run byte-identical commands. Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>
2026-09-16 03:58:01 +02:00
parent ff0a518001
commit 9b9e39e67f
4 changed files with 103 additions and 0 deletions
@@ -0,0 +1,25 @@
+---
+# The strictest profile, held from the first commit. It is much cheaper than
+# adopting it later.
+profile: production
+
+exclude_paths:
+  - .git/
+  - .idea/
+  # Stack payloads are data — third-party compose and config files copied to the
+  # host verbatim. They are not Ansible content and must not be linted as if
+  # they were. See server/README.md.
+  - server/
+
+skip_list:
+  # The production profile wants role variables prefixed with the role name
+  # (compose_stack_name, compose_stack_networks, ...). compose_stack is internal
+  # to this repository and is never published to Galaxy, and the shorter stack_*
+  # names are what playbooks read as. Documented as a contract in AGENTS.md.
+  - var-naming[no-role-prefix]
+
+kinds:
+  - playbook: ansible/playbooks/*.yml
+  - vars: ansible/inventory/group_vars/*.yml
+  - vars: ansible/inventory/host_vars/*.yml
+  - requirements: ansible/requirements.yml