ansible-lint at the production profile from the first commit, which is much cheaper than adopting it later. yamllint forbids implicit octal so a file mode cannot silently become an integer, and the Makefile is a thin wrapper so `make check` and CI run byte-identical commands. Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>
26 lines
904 B
Plaintext
26 lines
904 B
Plaintext
---
|
|
# The strictest profile, held from the first commit. It is much cheaper than
|
|
# adopting it later.
|
|
profile: production
|
|
|
|
exclude_paths:
|
|
- .git/
|
|
- .idea/
|
|
# Stack payloads are data — third-party compose and config files copied to the
|
|
# host verbatim. They are not Ansible content and must not be linted as if
|
|
# they were. See server/README.md.
|
|
- server/
|
|
|
|
skip_list:
|
|
# The production profile wants role variables prefixed with the role name
|
|
# (compose_stack_name, compose_stack_networks, ...). compose_stack is internal
|
|
# to this repository and is never published to Galaxy, and the shorter stack_*
|
|
# names are what playbooks read as. Documented as a contract in AGENTS.md.
|
|
- var-naming[no-role-prefix]
|
|
|
|
kinds:
|
|
- playbook: ansible/playbooks/*.yml
|
|
- vars: ansible/inventory/group_vars/*.yml
|
|
- vars: ansible/inventory/host_vars/*.yml
|
|
- requirements: ansible/requirements.yml
|