Add fresh server bootstrap script

bootstrap.sh

@@ -0,0 +1,42 @@
+#!/bin/bash
+
+set -e
+
+REPO_URL="https://gitea.romerozone.top/robert/ansible_pull_master.git"
+
+echo "=== Ansible Pull Bootstrap ==="
+echo
+
+if [ "$EUID" -ne 0 ]; then
+    echo "Please run this script with sudo:"
+    echo "  sudo ./bootstrap.sh"
+    exit 1
+fi
+
+echo "Installing required packages..."
+apt update
+apt install -y git ansible
+
+echo
+read -rsp "Enter Ansible Vault password: " VAULT_PASSWORD
+echo
+
+printf '%s\n' "$VAULT_PASSWORD" > /root/.ansible_vault_password
+chmod 600 /root/.ansible_vault_password
+unset VAULT_PASSWORD
+
+mkdir -p /etc/ansible
+
+cat > /etc/ansible/ansible.cfg <<'EOF'
+[defaults]
+vault_password_file = /root/.ansible_vault_password
+EOF
+
+echo
+echo "Running initial Ansible Pull..."
+echo
+
+ansible-pull -U "$REPO_URL" local.yml
+
+echo
+echo "=== Bootstrap complete ==="