homelab-ansible-lxc-meridian/requirements.yml at 02c2f4ee2d71e32e2d356792d9acb3d7fa24fafe - homelab-ansible-lxc-meridian - Gitea: Git with a cup of tea

cbalders/homelab-ansible-lxc-meridian

Files

T

Your Name 02c2f4ee2d litellm: pull /meridian secrets in-playbook from Infisical (runner-agnostic)

Replaces the deploy.sh env-var hand-off (which only worked locally and would
have made Semaphore write placeholder keys, regressing direct_*) with the
standard in-playbook Infisical pull used by dawarich/mcp/cloudflared:

- site.yml pre_tasks: login via the shared 828d2cc8 machine identity, read
  /meridian as_dict, set_fact litellm_master_key + the openai/gemini keys.
- vars/vault.yml: shared ansible-vault client secret (copied from sibling repo).
- requirements.yml: + infisical.vault.
- deploy.sh: drop the infisical-CLI pulls; add --ask-vault-pass.

Same secret path for Semaphore and local — no per-template env wiring. Deploy
prereqs: attach the ansible-vault password to Semaphore template 27, and ensure
the 828d2cc8 identity can read /meridian (env prod).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-05 13:00:54 -04:00

6 lines

95 B

YAML

Raw Blame History

 ---
 collections:
   - name: community.general
   - name: ansible.posix
   - name: infisical.vault