Usage: stratum ansible <action>   (module type: setting)

Ansible the Stratum way: this computer as a managed node, a pull client
and/or a controller - each role on or off.

Roles:
  toggles roles                          the roles and their state
  set roles [managed] [pull] [controller]  exactly these roles on

Managed node (a controller manages this computer):
  managed key list | add <key|-> | remove <n>   controller keys (user ansible)
  managed allow <addr> | deny <addr>   keys work only from these addresses
  managed firewall                     allow SSH from them in stratum-firewall

Pull (ansible-pull from a git repository, by a timer):
  pull set <git url> [branch] [playbook]   default: main, local.yml
  pull mode apply|check                apply, or only show what would change
  pull schedule hourly|daily|off
  pull run [--check]                   now

Controller (/srv/stratum/ansible):
  controller key                       public key for the managed nodes
  hosts                                the inventory as a tree
  ping [pattern]                       are the hosts reachable?
  playbooks                            list
  playbook-add <name> [file|-]         add (syntax checked first)
  run <playbook> [--check] [--limit <hosts>]
  adhoc <pattern> <module> [args]      e.g. adhoc web ansible.builtin.shell "uptime"
  galaxy                               install roles from requirements.yml
  vault set | remove                   ansible-vault password (stdin)

  runs [n]                             the last runs: ok / changed / failed
  help                                 show this help

Files: /etc/stratum/ansible.conf, /srv/stratum/ansible (inventory.ini,
playbooks/, roles/, ansible.cfg), /var/log/stratum-ansible
Example playbooks: /usr/lib/stratum/ansible/examples
