conflux plan
Show what would change without applying anything.
conflux plan <playbook.yml> [flags]| Flag | Description |
|---|---|
--inventory | Path to an inventory file |
--limit | Restrict to a host or group name |
--diff | Show full file diffs, not just changed/unchanged |
-v, --verbose | Print module-level debug output |
conflux apply
Apply a playbook to one or more hosts.
conflux apply <playbook.yml> [flags]| Flag | Description |
|---|---|
--inventory | Path to an inventory file |
--limit | Restrict to a host or group name |
--yes | Skip the confirmation prompt |
--parallel N | Apply to N hosts concurrently (default 5) |
conflux state
Inspect or clear the local state manifest for a host.
conflux state show <host>
conflux state clear <host> --module package.nginxconflux vault
Encrypt secrets inline in playbooks using age under the hood.
conflux vault encrypt "db_password: hunter2"!vault |
age1yubikey1qwt5...(truncated)...Paste the resulting block directly into a playbook in place of a plaintext value; Conflux decrypts it at apply time using the key configured in ~/.config/conflux/vault.key.
Global flags
| Flag | Description |
|---|---|
--config | Path to conflux.toml |
--log-level | debug, info, warn, error |
--no-color | Disable ANSI output |