Files
Lucas WintherandClaude Opus 5.5 be0b90b879 Cache the CI toolchain in a shared action
ci/toolchain installs the pinned tools, collections and rsync from cache for
both GitHub and Gitea; GitLab caches pip downloads. shellcheck now finds
scripts rather than globbing, which broke when a glob matched nothing.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-09-30 15:16:58 +02:00

27 lines
916 B
Plaintext

---
# The strictest profile, held from the first commit. It is much cheaper than
# adopting it later.
profile: production
exclude_paths:
- .git/
- .idea/
- .cache/
# Stack payloads are data — third-party compose and config files copied to the
# host verbatim. They are not Ansible content and must not be linted as if
# they were. See server/README.md.
- server/
skip_list:
# The production profile wants role variables prefixed with the role name
# (compose_stack_name, compose_stack_networks, ...). compose_stack is internal
# to this repository and is never published to Galaxy, and the shorter stack_*
# names are what playbooks read as. Documented as a contract in AGENTS.md.
- var-naming[no-role-prefix]
kinds:
- playbook: ansible/playbooks/*.yml
- vars: ansible/inventory/group_vars/*.yml
- vars: ansible/inventory/host_vars/*.yml
- requirements: ansible/requirements.yml