chore: improvements in .gitignore

.gitignore

@@ -1,3 +1,30 @@
+# General
+.DS_Store
+__MACOSX/
+.AppleDouble
+.LSOverride
+Icon[
+]
+
+# Thumbnails
+._*
+
+# Files that might appear in the root of a volume
+.DocumentRevisions-V100
+.fseventsd
+.Spotlight-V100
+.TemporaryItems
+.Trashes
+.VolumeIcon.icns
+.com.apple.timemachine.donotpresent
+
+# Directories potentially created on remote AFP share
+.AppleDB
+.AppleDesktop
+Network Trash Folder
+Temporary Items
+.apdisk
+
 # Ansible Galaxy roles
 external_roles/*
 

.yamllint.yaml

@@ -0,0 +1,8 @@
+---
+extends: default
+
+ignore: |
+  external_roles/
+
+rules:
+  line-length: disable

containers.yaml

@@ -0,0 +1,23 @@
+---
+- name: Containers
+  hosts: servers
+  gather_facts: true
+  become: true
+  serial: 100%
+
+  pre_tasks:
+    - name: Ensure Docker and K3s are not both enabled
+      assert:
+        that:
+          - not (containers.docker.enabled and containers.k3s.enabled)
+        fail_msg: "Docker and K3s cannot both be enabled at the same time."
+        success_msg: "Configuration is valid."
+
+  roles:
+    - role: geerlingguy.docker
+      when: containers.docker.enabled | bool
+      tags: docker
+
+    - role: k3s.orchestration.k3s_server
+      when: containers.k3s.enabled | bool
+      tags: k3s

roles/common/tasks/cron.yaml

@@ -0,0 +1,9 @@
+---
+- name: Create cron job to prune journald logs with configurable limits
+  ansible.builtin.cron:
+    name: "Prune systemd journal logs ({{ journal_retention_days }} days, {{ journal_max_disk_limit }} disk)"
+    minute: "0"
+    hour: "2"
+    job: "/usr/bin/journalctl --vacuum-time={{ journal_retention_days }}d --vacuum-size={{ journal_max_disk_limit }} > /dev/null 2>&1"
+    user: root
+    state: present