# Documentation — `reference-ansible` Entry point for this repository's in-depth documentation. The [`demo-gymburgdorf`](../inventories/demo-gymburgdorf/) inventory serves as a running example throughout. > **Demo-only.** All role defaults (passwords, tokens, RPC secrets) are > insecure and intended exclusively for demo setups. See > [secrets.md § Demo-Only-Defaults](secrets.md#demo-only-defaults--must-be-overridden). ## Table of contents | Document | Content | | --- | --- | | [getting_started.md](getting_started.md) | Prerequisites (access, tools), first deploy step by step | | [operations.md](operations.md) | Setup, prerequisites, deploy flow, smoke test, known gaps | | [secrets.md](secrets.md) | OpenBao login, secret lookup pattern, demo-only defaults, threat boundaries | | [inventories.md](inventories.md) | Repository layout, roles origin, inventory topology, new-tenant walkthrough | | [ansible.md](ansible.md) | Playbooks (`site.yml`), per-service parameters, variable cheat sheet | | [testing.md](testing.md) | Static checks, inventory resolution, smoke test/dry run before the deploy | ## Quick links - **First time here?** → [getting_started.md](getting_started.md) - **Create a new tenant** → [inventories.md § Walkthrough](inventories.md#walkthrough-creating-a-new-demo-tenant) - **Which variable goes where?** → [ansible.md § Variable cheat sheet](ansible.md#variable-cheatsheet) - **Store a secret in Bao** → [secrets.md § Secret pattern](secrets.md#secret-pattern-bao-lookup) - **Run a deploy** → [operations.md § Deploy](operations.md#deploy)