4 Commits

Author	SHA1	Message	Date
n0mad1k	34a3961926	Fix sudo password handling for non-root SSH deployments ... When deploying to existing servers as non-root, Ansible needs become_password for sudo. Now prompts for it during credential gathering and passes it via ansible_become_password in the inventory (file chmod 0600). Blank input = NOPASSWD sudo assumed. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-10 10:52:57 -04:00
n0mad1k	3a909867af	Add per-service instance sizing defaults ... VPN/DNS/Vault → nanode/t3.micro, Matrix → g6-standard-2/t3.medium, Cloud/Media/Email → g6-standard-1/t3.small, All-in-One → g6-standard-2/t3.medium. Previously all services used the same provider-level default (often pulled from c2itall vars), which meant a WireGuard VPN would default to g6-standard-2. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-09 15:49:59 -04:00
n0mad1k	7484a0e034	Phantom v2: dual-mode architecture, security hardening, deployment management ... - Dual-mode operation: standalone + c2itall integrated (env var detection) - SSH keys moved to ~/.ssh/c2deploy_ph-{id} with per-deployment known_hosts - Ansible output streaming with filtered console + full log capture - Deployment management menu: discover, SSH, teardown existing deployments - Cert setup script (setup-cert.sh) deployed to servers for post-DNS LE certs - Matrix hardening: unique secrets, SSRF protection, rate limits, nginx security headers - Base hardening: fail2ban systemd backend (Debian 12), SSH limits, nginx jails - Add-matrix-user helper script deployed to all Matrix servers - .env support for standalone credential storage - Config key rename: deploy_id → deployment_id (with backward compat) - Provider cleanup playbooks for teardown - Test suite with 50 tests Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-09 15:45:24 -04:00
ghost	973cede31f	Initial release: ghost_protocol privacy toolkit	2026-03-04 09:13:16 -05:00