style(infra): strictly enforce YAML 1.2 true/false booleans and trim whitespace to appease CI linters

quantDIY · quantDIY · commit ac24a8918e6e · 2026-03-03T14:07:34.000-05:00
diff --git a/QuanuX-Infra/ansible/01-mesh-bootstrap.yml b/QuanuX-Infra/ansible/01-mesh-bootstrap.yml
@@ -1,15 +1,15 @@
 ---
 - name: Panopticon Genesis - Bootstrap NATS JetStream Mesh
   hosts: panopticon_buffer
-  become: yes
+  become: true
   tasks:
     - name: Update apt cache and install dependencies
       apt:
         name:
           - curl
           - unzip
         state: present
-        update_cache: yes
+        update_cache: true
 
     - name: Download NATS Server
       get_url:
@@ -20,13 +20,13 @@
       unarchive:
         src: /tmp/nats-server.zip
         dest: /tmp
-        remote_src: yes
+        remote_src: true
 
     - name: Install NATS Server Binary
       copy:
         src: /tmp/nats-server-v2.10.11-linux-amd64/nats-server
         dest: /usr/local/bin/nats-server
-        remote_src: yes
+        remote_src: true
         mode: '0755'
 
     - name: Ensure NATS config directory exists
@@ -48,7 +48,7 @@
           # Bind exclusively to the internal VPC Network
           host: "{{ hostvars[inventory_hostname]['internal_ip'] | default('10.10.10.2') }}"
           port: 4222
-          
+
           # Enable persistent storage JetStream
           jetstream {
               store_dir: /var/lib/nats/jetstream
@@ -77,10 +77,10 @@
 
     - name: Reload SystemD to accept NATS
       systemd:
-        daemon_reload: yes
+        daemon_reload: true
 
     - name: Enable and restart NATS Server
       systemd:
         name: nats-server
         state: restarted
-        enabled: yes
+        enabled: true
diff --git a/QuanuX-Infra/ansible/02-panopticon-observability.yml b/QuanuX-Infra/ansible/02-panopticon-observability.yml
@@ -1,14 +1,14 @@
 ---
 - name: Panopticon Genesis - Install Observability Stack (OpenSearch Ledger)
   hosts: panopticon_ledger
-  become: yes
+  become: true
   tasks:
     - name: Increase vm.max_map_count for OpenSearch requirement
       sysctl:
         name: vm.max_map_count
         value: '262144'
         state: present
-        reload: yes
+        reload: true
 
     - name: Install dependencies for APT repositories
       apt:
@@ -17,7 +17,7 @@
           - gnupg
           - curl
         state: present
-        update_cache: yes
+        update_cache: true
 
     - name: Add OpenSearch GPG key
       apt_key:
@@ -34,7 +34,7 @@
         name:
           - opensearch
         state: present
-        update_cache: yes
+        update_cache: true
       environment:
         OPENSEARCH_INITIAL_ADMIN_PASSWORD: "QuanuxMasterPassword123!"
 
@@ -49,7 +49,7 @@
         path: /etc/opensearch/opensearch.yml
         regexp: '^#?discovery\.type:'
         line: "discovery.type: single-node"
-        
+
     - name: Disable OpenSearch security plugin internally
       lineinfile:
         path: /etc/opensearch/opensearch.yml
@@ -59,12 +59,12 @@
     - name: Enable and restart OpenSearch service
       systemd:
         name: opensearch
-        enabled: yes
+        enabled: true
         state: restarted
 
 - name: Panopticon Genesis - Install Observability Stack (ValKey Buffer & Python Shadow)
   hosts: panopticon_buffer
-  become: yes
+  become: true
   tasks:
     - name: Install dependencies for APT repositories
       apt:
@@ -73,14 +73,14 @@
           - gnupg
           - curl
         state: present
-        update_cache: yes
+        update_cache: true
 
     - name: Install Native ValKey
       apt:
         name:
           - valkey-server
         state: present
-        update_cache: yes
+        update_cache: true
 
     - name: Configure ValKey network bind
       lineinfile:
@@ -91,7 +91,7 @@
     - name: Enable and restart ValKey service
       systemd:
         name: valkey-server
-        enabled: yes
+        enabled: true
         state: restarted
 
     - name: Install Python 3 VENV and PIP natively
@@ -100,7 +100,7 @@
           - python3-venv
           - python3-pip
         state: present
-        update_cache: yes
+        update_cache: true
 
     - name: Ensure QuanuX base directory exists for Shadow Node
       file:
@@ -113,7 +113,7 @@
       args:
         creates: /opt/quanux/shadow_env/bin/activate
 
-    - name: Install Observability Python packages 
+    - name: Install Observability Python packages
       pip:
         name:
           - opensearch-py
diff --git a/QuanuX-Infra/ansible/03a-habitat-equip.yml b/QuanuX-Infra/ansible/03a-habitat-equip.yml
@@ -1,7 +1,7 @@
 ---
 - name: Operation Control Plane - Equip Edge Habitats
   hosts: edge_nodes
-  become: yes
+  become: true
 
   vars:
     # Extract Panopticon IP dynamically from the Terraform inventory
@@ -10,7 +10,7 @@
   tasks:
     - name: Update APT cache
       apt:
-        update_cache: yes
+        update_cache: true
 
     - name: Ensure /etc/quanux directory exists
       file:
@@ -50,7 +50,7 @@
       unarchive:
         src: /tmp/nats.c.tar.gz
         dest: /tmp
-        remote_src: yes
+        remote_src: true
 
     - name: Compile and Install NATS C Client via CMake
       shell: |
@@ -72,7 +72,7 @@
       unarchive:
         src: https://github.com/duckdb/duckdb/releases/download/v0.10.0/libduckdb-linux-amd64.zip
         dest: /tmp/duckdb
-        remote_src: yes
+        remote_src: true
       args:
         creates: /tmp/duckdb/duckdb.h
 
@@ -86,7 +86,7 @@
       copy:
         src: "/tmp/duckdb/{{ item }}"
         dest: "/usr/local/include/duckdb/{{ item }}"
-        remote_src: yes
+        remote_src: true
       with_items:
         - duckdb.h
         - duckdb.hpp
@@ -95,7 +95,7 @@
       copy:
         src: "/tmp/duckdb/libduckdb.so"
         dest: "/usr/local/lib/libduckdb.so"
-        remote_src: yes
+        remote_src: true
 
     - name: Refresh dynamic linker cache (ldconfig)
       command: ldconfig
diff --git a/QuanuX-Infra/ansible/03b-nest-drop.yml b/QuanuX-Infra/ansible/03b-nest-drop.yml
@@ -1,7 +1,7 @@
 ---
 - name: Operation Control Plane - Drop Sovereign Nests
   hosts: edge_nodes
-  become: yes
+  become: true
 
   vars:
     quanux_src_dir: "/opt/quanux/src"
@@ -49,7 +49,7 @@
       copy:
         src: "{{ quanux_build_dir }}/QuanuX-Spreader/cpp/quanux_spreader"
         dest: "{{ quanux_install_dir }}/quanux_spreader"
-        remote_src: yes
+        remote_src: true
         mode: '0755'
 
     - name: Create quanux-engine.service systemd file
@@ -67,7 +67,7 @@
           RestartSec=3
           LimitNOFILE=65535
           LimitCORE=infinity
-          
+
           # The Nest STRICTLY binds to the pre-rendered OS Habitat soil
           # If this file is missing, the C++ binary intentionally crashes.
           EnvironmentFile=/etc/quanux/habitat.env
@@ -78,10 +78,10 @@
 
     - name: Reload SystemD to ingest the Sovereign Engine service
       systemd:
-        daemon_reload: yes
+        daemon_reload: true
 
     - name: Enable and start the Sovereign Engine
       systemd:
         name: quanux-engine
-        enabled: yes
+        enabled: true
         state: restarted
