Create Ansible project template

ansible.cfg

@@ -0,0 +1,4 @@
+[defaults]
+retry_files_enabled = False
+inventory = ./inventory.yaml
+vault_password_file = ./.vault-password

files/pre-commit

@@ -0,0 +1,16 @@
+# Pre-commit hook to ensure vault.yaml is encrypted
+#
+# Credit goes to Nick Busey from HomelabOS for this neat little trick
+# https://gitlab.com/NickBusey/HomelabOS/-/issues/355
+
+if ( git show :vars/vault.yaml | grep -q "$ANSIBLE_VAULT;" ); then
+echo "\e[38;5;108mVault Encrypted. Safe to commit.\e[0m"
+else
+echo "\e[38;5;208mVault not encrypted! Run 'make encrypt' and try again.\e[0m"
+exit 1
+fi
+
+command -v yamllint > /dev/null && echo "Running yamllint..." && yamllint . || exit 1
+command -v ansible-lint > /dev/null && echo "Running ansible-lint..." ansible-lint
+
+# vi: ft=sh

group_vars/all.yaml

@@ -0,0 +1 @@
+---\n

host_vars/host.yaml

@@ -0,0 +1 @@
+---\n

inventory.yaml

@@ -0,0 +1 @@
+---\n

playbooks/localhost_setup.yaml

@@ -0,0 +1,17 @@
+---
+- name: Localhost setup
+  hosts: 127.0.0.1
+  tasks:
+    - name: Install packages
+      ansible.builtin.package:
+        name: "{{ item }}"
+        state: present
+      with_items:
+        - yamllint
+        - ansible-lint
+
+    - name: Set up git pre-commit hooks
+      ansible.builtin.copy:
+        src: ../files/pre-commit
+        dest: ../.git/hooks/pre-commit
+        mode: 0755

roles/requirements.yaml

@@ -0,0 +1 @@
+---\n