# --------------------------------------------------------------
# Ansible inventory - servers to harden
# Usage: ansible-playbook -i inventory.ini site.yml -k
# --------------------------------------------------------------

[servers]
# Replace YOUR_SSH_PASSWORD with the real password. Keep the file
# out of git / chmod 600 it, or encrypt with ansible-vault:
#   ansible-vault encrypt inventory.ini
stoat-demo ansible_host=stoat-demo ansible_user=fedora ansible_ssh_pass=VjocLlmw6faSdM

[servers:vars]
# Elevate privileges (the playbook already sets become: true,
# but this allows per-group override if needed)
ansible_become=yes
ansible_become_method=sudo