feat: Swapped tofu init scripting for ansible scripting

ansible/group_vars/all.yml

@@ -0,0 +1,14 @@
+---
+# Keep in sync with infra/variables.tf's var.deploy_user (default "deploy") -
+# the two aren't wired together automatically, since Ansible no longer reads
+# any Terraform state or output.
+deploy_user: deploy
+ansible_user: "{{ deploy_user }}"
+ansible_ssh_private_key_file: "{{ lookup('env', 'ANSIBLE_SSH_PRIVATE_KEY_FILE') | default('~/.ssh/id_ed25519', true) }}"
+
+# Used by the deploy role to look up each host's data volume directly from the
+# Hetzner API (hcloud_volume_info) rather than from Terraform state/outputs.
+hcloud_token: "{{ lookup('env', 'HCLOUD_TOKEN') }}"
+
+# Repo root's services/ directory, relative to wherever a playbook lives under ansible/playbooks/.
+services_root: "{{ playbook_dir }}/../../services"

ansible/group_vars/role_dev.yml

@@ -0,0 +1,7 @@
+---
+service_group: dev
+
+# Number of Gitea Actions runner containers rendered into
+# services/dev/Runners/docker-compose.yml by the deploy role - see
+# roles/deploy/templates/runners-docker-compose.yml.j2.
+dev_runner_count: 3

ansible/group_vars/role_prod.yml

@@ -0,0 +1,2 @@
+---
+service_group: prod

ansible/group_vars/role_vpn.yml

@@ -0,0 +1,2 @@
+---
+service_group: vpn