---
# site.yml — apply full standard state to all hosts
# Run via: make deploy PLAYBOOK=site
# NOTE: `base` is only partially built (its `firewall` concern; see STATUS.md) and the
# `docker_host` role does not exist yet, so this playbook applies base's firewall but is
# incomplete until `docker_host` is created.

- name: Apply base configuration to all hosts
  hosts: all
  become: true
  roles:
    - role: base
      tags: [base]

- name: Configure Docker hosts
  hosts: docker_hosts
  become: true
  roles:
    - role: docker_host
      tags: [docker_host]