Roles

The Ansible roles that make up ops/my-server/ — each page below is generated from that role's own README.md (see docs/hooks/sync_readmes.py), so it stays in sync with the source of truth instead of drifting into a second copy.

• Backend Website — nginx HTTPS vhost + reverse proxy for a backend process.
• Create SSH Key — provisions a dedicated deploy keypair.
• Docs Site — builds and serves the mkdocs documentation site.
• FastAPI Backend — deploys and runs a FastAPI app under systemd.
• GitHub Token — reads the shared GitHub PAT, used by every role that clones a private repo.
• pgAdmin — pgAdmin4 in Docker, reverse-proxied with TLS.
• Postgres Backup — daily pg_dump/ pg_dumpall backups via a systemd timer.
• React Frontend — builds and serves a static Node.js frontend.
• Register SSL — issues/renews Let's Encrypt certificates.
• Setup Base User — creates the operational Linux user.
• Setup Packages — base OS packages and baseline nginx state.

See Deployment for how these roles are composed into the backend and frontend playbooks.