- Introduce generate_country_blocks.py to fetch IP ranges by country - Update group_vars/servers.yml with country blocking settings - Add country_block snippet to Caddyfile and apply to all sites - Create Ansible tasks for automated IP range generation and integration - Add documentation for configuring and managing country blocking
Ansible Configuration
1Password Integration
This Ansible configuration includes a custom lookup plugin for fetching secrets from 1Password. The 1Password CLI must be installed and authenticated on the machine running Ansible.
See 1Password Integration Readme
Prerequisites
- Install 1Password CLI
- Sign in to 1Password using
op signin
- Service account should be properly configured
Finding Vault IDs
To find your vault ID:
op vault list
For more information, see the 1Password CLI documentation.