Continuous deployment Python script

.gitignore

@@ -1,7 +1,17 @@
 qemu/
 virtualbox-iso/
 vmware-iso/
-
+packer_plugins/
+ansible/collections
+ansible/roles/galaxyproject*
+ansible/roles/geerlingguy*
+ansible/roles/influxdata*
+ansible/roles/usegalaxy-eu.a*
+ansible/roles/usegalaxy_eu.*
+ansible/roles/usegalaxy-eu.c*
+ansible/roles/usegalaxy-eu.d*
+ansible/roles/usegalaxy-eu.f*
+ansible/roles/usegalaxy-eu.t*
 # Created by https://www.gitignore.io/api/packer
 
 ### Packer ###

ansible/internal.yml

@@ -5,17 +5,19 @@
   vars_files:
     - "group_vars/all.yml"
     - "group_vars/condor.yml"
-    - "secret_group_vars/internal.yml"
   pre_tasks:
+    - name: Include secret vars
+      ansible.builtin.include_vars: "secret_group_vars/internal.yml"
+      when: inventory_hostname in group.internal
     - name: Copy server key into VM temporarily
-      copy:
+      ansible.builtin.copy:
         src: server_ca
         dest: /tmp/server_ca
         owner: root
         group: root
-        mode: 0600
+        mode: "0600"
     - name: Add HostCertificate options
-      lineinfile:
+      ansible.builtin.lineinfile:
         path: /etc/ssh/sshd_config
         regexp: "^HostKey /etc/ssh/ssh_host_{{ item }}_key"
         line: "HostKey /etc/ssh/ssh_host_{{ item }}_key\nHostCertificate /etc/ssh/ssh_host_{{ item }}_key-cert.pub"
@@ -29,6 +31,7 @@
         limit_type: hard
         limit_item: core
         value: 0
+
   roles:
     - usegalaxy_eu.htcondor
     - lock-root