feat: initial infrastructure baseline

ansible/roles/common/tasks/main.yml

@@ -0,0 +1,21 @@
+---
+- name: Optimize kernel parameters
+  sysctl:
+    name: "{{ item.name }}"
+    value: "{{ item.value }}"
+    state: present
+    reload: yes
+  with_items:
+    - { name: 'vm.swappiness', value: '10' }
+    - { name: 'fs.inotify.max_user_watches', value: '524288' }
+    - { name: 'vm.vfs_cache_pressure', value: '50' }
+  become: yes
+  tags: [optimization, sysctl]
+
+- name: Set logind configuration for faster user logins
+  lineinfile:
+    path: /etc/systemd/logind.conf
+    regexp: '^#?KillUserProcesses='
+    line: 'KillUserProcesses=no'
+  become: yes
+  tags: [systemd, optimization]

ansible/vars/main.yml

@@ -0,0 +1,7 @@
+# mw-pfeddersheim-workstation variables
+system_user: mw
+workspace_root: /home/mw/infrastructure/mw-pfeddersheim-workstation
+os_type: archlinux
+pnpm_version: "25.6.1"
+python_version: "3.14.3"
+php_version: "8.5.3"

ansible/vars/secrets.yml.example

@@ -0,0 +1,4 @@
+# EXAMPLE ONLY - DO NOT PUT REAL SECRETS HERE
+# USE: ansible-vault create ansible/vars/secrets.yml
+# github_token: "your-token-here"
+# smtp_password: "your-password-here"

ansible/workstation.yml

@@ -0,0 +1,13 @@
+---
+- name: Configure mw-pfeddersheim-workstation
+  hosts: localhost
+  connection: local
+  become: true
+  vars_files:
+    - vars/main.yml
+    - vars/secrets.yml
+
+  roles:
+    - common
+    - dev-tools
+    - maintenance