---
# site.yml — apply full standard state to all hosts
# Run via: make deploy PLAYBOOK=site
# NOTE: `base` is only partially built (its `firewall` concern; see STATUS.md) and
# `docker_host` is scaffolded but has no tasks yet, so this playbook applies base's
# firewall but is otherwise incomplete until those roles gain content.

- name: Apply base configuration to all hosts
  hosts: all
  become: true
  roles:
    - role: base
      tags: [base]

- name: Configure Docker hosts
  hosts: docker_hosts
  become: true
  roles:
    - role: docker_host
      tags: [docker_host]