fixes

.gitea/workflows/iac.yaml

@@ -3,6 +3,7 @@
 name: Postgres
 
 on: #[push,pull_request]
+  workflow_dispatch: {}
   push: &tofuPaths
     paths:
       - 'iac/*.tf'

.gitea/workflows/postgres.yaml

@@ -3,6 +3,7 @@
 name: Postgres
 
 on: #[push,pull_request]
+  workflow_dispatch: {}
   push: &postgresTofuPaths
     paths:
       - 'postgres/**/*.tf'

ansible/README.md

@@ -80,7 +80,7 @@ ansible -i ,localhost -c local localhost -m raw -a "echo hello world {{ inventor
 
 #### Install ansible
 
-`uv tool install ansible-core --with dnspython`  
+`uv tool install ansible-core --with dnspython --with jmespath --with kubernetes`  
 `echo 'export PATH="~/.local/share/uv/tools/ansible-core/bin:$PATH"' >> ~/.zshenv` 
 
 #### Install this project depedencies
@@ -93,5 +93,5 @@ ansible-galaxy collection install --token 11bebd8fd1ad4009f700bdedbeb80b19743ce3
 
 ```
 ansible-galaxy collection install ./ansible/arcodange/factory -f
-
+ansible-playbook -i ansible/arcodange/factory/inventory ansible/arcodange/factory/playbooks/02_setup.yml
 ```

ansible/arcodange/factory/playbooks/01_system.yml

@@ -165,11 +165,11 @@
                   localIp:
                     ipAllowList:
                       sourceRange:
-                      - "0.0.0.0/0"
+                        - "192.168.1.0/24"
-                    #     - "192.168.1.0/24"
+                        - "{{ ipify_public_ip }}/32"
-                    #     - "{{ ipify_public_ip }}/32"
+                        # - "0.0.0.0/0"
                       # ipStrategy:
-                      #   depth: 2
+                      #   depth: 1
             traefik_helm_values:
               deployment:
                 kind: "Deployment"

ansible/arcodange/factory/playbooks/tools/roles/hashicorp_vault/tasks/new_root_token.yml

@@ -2,7 +2,7 @@
   include_tasks: vault_cmd.yml
   vars:
     vault_cmd: '{{ item.cmd }}'
-    vault_cmd_output_var: '{{ item.save }}'
+    vault_cmd_output_var: '{{ item.save | default(false) }}'
     vault_cmd_json_attr: '{{ item.json_attr | default("") }}'
     vault_cmd_can_fail: '{{ item.can_fail | default(false) }}'
 

ansible/arcodange/factory/roles/gitea_token/tasks/main.yml

@@ -25,7 +25,7 @@
     - name: replace token
       when:
         - gitea_token_delete or gitea_api_token_cmd.rc != 0
-        - gitea_token_delete or "'access token name has been used already' in gitea_api_token_cmd.stderr"
+        - gitea_token_delete or ('access token name has been used already' in gitea_api_token_cmd.stderr)
         - gitea_token_delete or gitea_token_replace
         - gitea_api_token is defined
       block: