Add initial project structure and documentation

README.md

@@ -0,0 +1,33 @@
+# homelab-ansible
+
+Ansible playbook to align my homelab VMs — Alpine & Debian.
+
+## Roles
+
+| #   | Role      | Purpose                                                       |
+| --- | --------- | ------------------------------------------------------------- |
+| 1   | `ufw`     | Install UFW, deny incoming by default, allow only Tailscale   |
+| 2   | `repos`   | Set Alpine repos to `edge`                                    |
+| 3   | `upgrade` | Upgrade all packages (handles Tailscale SSH drops gracefully) |
+
+## Usage
+
+```sh
+# Full playbook
+ansible-playbook homelab.yml
+
+# Single role
+ansible-playbook homelab.yml --tags ufw
+
+# Dry-run
+ansible-playbook homelab.yml --check --diff
+```
+
+## Inventory
+
+- `inventory/tailscale_inventory.py` — dynamic inventory from local `tailscale status`, filtered by `tag:homelab`
+- `inventory/static_groups.yml` — static group assignments (Alpine vs Debian)
+
+## Vars
+
+Per-role defaults live in `roles/*/defaults/main.yml`. Per-group overrides in `group_vars/`.