| name | ansible-stuff |
| description | Use when working in the private Ansible repository at `~/devel/private/pschmitt/ansible-stuff.git`, especially for playbooks, roles, inventory, OpenWrt setup, SOPS-backed vars, Ansible linting, or flake/dev-shell maintenance. Read `references/conventions.md` before editing and run Ansible tools through the Nix dev shell. |
Ansible Stuff
Use this skill for work in the ansible-stuff.git repository.
Quick start
- Work from:
cd ~/devel/private/pschmitt/ansible-stuff.git
- Read
references/conventions.md before making changes.
- Use the flake-provided dev shell for all Ansible tooling:
nix develop
- For one-shot commands, prefer:
nix develop --command ansible-lint
Workflow
- Inspect
AGENTS.md, flake.nix, and the relevant playbook or role before
editing.
- Keep changes narrow and preserve existing Ansible structure unless the task
requires a larger refactor.
- Treat inventory, host vars, group vars, and SOPS-encrypted files carefully.
- Validate focused changes with
nix develop --command ansible-lint <path>
when practical.
- Use
nix flake check after changing flake.nix, flake.lock, or dev-shell
behavior.
Reference map
references/conventions.md: Repository path, dev-shell rules, validation
commands, and local Ansible conventions.
Safety rules
- Do not rely on ambient
ansible, ansible-lint, or Python packages outside
the dev shell.
- Never commit decrypted secrets, temporary secret files, or credential output.
- Expect unrelated local changes in this repo and do not revert them unless the
user explicitly asks.
