Initial commit: Ansible playbook for Gitea Act Runner deployment

Automated deployment of act_runner on Ubuntu 20.04+ servers:
- Docker CE installation (DEB822 format)
- Node.js 24.x via NodeSource
- act_runner binary with SHA256 verification
- systemd service with security hardening
- CI: ansible-lint via Gitea Actions

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

inventory/hosts.yml

@@ -0,0 +1,99 @@
+---
+# =============================================================================
+# Ansible Inventory - Gitea Act Runner Servers
+# =============================================================================
+#
+# This file defines which servers the playbook will deploy to.
+# Each host should be reachable via SSH with the specified ansible_user.
+#
+# HOW TO USE:
+#   1. Replace the example hosts with your actual server IPs/hostnames
+#   2. Set the correct SSH user (ansible_user)
+#   3. Optionally override variables per-host
+#
+# Host-specific variables can override group defaults.
+# Example: Different runner names, labels, or capacity per server.
+#
+# EXAMPLE CONFIGURATIONS:
+#
+#   Single server:
+#     all:
+#       hosts:
+#         runner:
+#           ansible_host: 10.0.0.50
+#       vars:
+#         ansible_user: root
+#
+#   Multiple servers with custom names:
+#     all:
+#       hosts:
+#         prod-runner-01:
+#           ansible_host: 10.0.0.50
+#           act_runner_name: "production-01"
+#         prod-runner-02:
+#           ansible_host: 10.0.0.51
+#           act_runner_name: "production-02"
+#       vars:
+#         ansible_user: deploy
+#         ansible_become: true
+#
+# See: https://docs.ansible.com/ansible/latest/inventory_guide/
+# =============================================================================
+
+all:
+  hosts:
+    # -------------------------------------------------------------------------
+    # Define each runner server below
+    # -------------------------------------------------------------------------
+    # The key (e.g., runner-01) is the inventory_hostname.
+    # Replace with your actual server details.
+
+    tralalero-tralala:
+      # IP address or hostname for SSH connection.
+      # REQUIRED: Change this to your server's address.
+      ansible_host: 147.45.100.33
+
+      # Optional: Override runner name for this specific host.
+      # Default: Uses the server's actual hostname (ansible_hostname fact).
+      # Uncomment and modify if you want a custom name in Gitea UI.
+      # act_runner_name: "production-runner-01"
+
+      # Optional: Different labels for this runner.
+      # Default: ["ubuntu-latest:host"] (from role defaults)
+      # Uncomment to customize what jobs this runner can handle.
+      # act_runner_labels:
+      #   - "ubuntu-latest:host"
+      #   - "self-hosted:host"
+
+    # Uncomment and configure additional servers as needed:
+    # runner-02:
+    #   ansible_host: 192.168.1.11
+    #   act_runner_name: "production-runner-02"
+
+  # ---------------------------------------------------------------------------
+  # Variables applied to all hosts in this inventory
+  # ---------------------------------------------------------------------------
+  vars:
+    # SSH user for connecting to servers.
+    # This user must either be root, or have sudo privileges.
+    # REQUIRED: Change this to match your server access.
+    ansible_user: root
+
+    # ---------------------------------------------------------------------------
+    # Alternative: Use a non-root user with sudo
+    # ---------------------------------------------------------------------------
+    # If you connect as a regular user that has sudo access, uncomment these:
+    # ansible_user: deploy
+    # ansible_become: true
+    # ansible_become_method: sudo
+    # ansible_become_password: "{{ vault_sudo_password }}"  # If password required
+
+    # ---------------------------------------------------------------------------
+    # SSH Configuration (optional)
+    # ---------------------------------------------------------------------------
+    # Uncomment if you need to specify SSH key or port:
+    # ansible_ssh_private_key_file: ~/.ssh/id_rsa
+    # ansible_port: 22
+
+    # Disable host key checking for new servers (not recommended for production):
+    # ansible_ssh_common_args: '-o StrictHostKeyChecking=no'