Initial repo structure — playbook skeletons, roles, client template inventory

playbooks/linux_patch.yml

@@ -0,0 +1,9 @@
+---
+- name: Linux patching
+  hosts: linux_hosts
+  gather_facts: true
+  roles:
+    - snapshot
+    - preflight
+    - linux_patch
+    - report

playbooks/site_maintenance.yml

@@ -0,0 +1,7 @@
+---
+# Master wrapper — runs full maintenance sequence
+# This is the single template to schedule in Semaphore per client
+- import_playbook: snapshot_pre.yml
+- import_playbook: site_preflight.yml
+- import_playbook: linux_patch.yml
+- import_playbook: windows_patch.yml

playbooks/site_preflight.yml

@@ -0,0 +1,6 @@
+---
+- name: Pre-flight safety checks
+  hosts: all
+  gather_facts: true
+  roles:
+    - preflight

playbooks/snapshot_pre.yml

@@ -0,0 +1,6 @@
+---
+- name: Pre-patch snapshot
+  hosts: all
+  gather_facts: true
+  roles:
+    - snapshot

playbooks/snapshot_verify.yml

@@ -0,0 +1,8 @@
+---
+- name: Verify snapshot exists
+  hosts: all
+  gather_facts: false
+  tasks:
+    - name: Placeholder - snapshot verification tasks
+      ansible.builtin.debug:
+        msg: "Snapshot verification to be implemented"

playbooks/windows_patch.yml

@@ -0,0 +1,8 @@
+---
+- name: Windows patching
+  hosts: windows_hosts
+  gather_facts: true
+  roles:
+    - preflight
+    - windows_patch
+    - report