---
# Ansible collection dependencies
# Pin versions. Update with: make collections
#
# Policy: add a collection only when a task in a committed role actively uses
# a module from it. Never pre-emptively include collections.
# All roles are written locally — no Galaxy roles.

collections:
  # Ansible-team maintained. Fills genuine ansible.builtin gaps:
  # authorized_key, sysctl, acl.
  - name: ansible.posix
    version: ">=1.5.0"

  # community.general — gandi_livedns (public_dns role manages wingu.me at Gandi
  # LiveDNS). PAT auth requires >= 9.0.0.
  - name: community.general
    version: ">=9.0.0"

  # community.docker — docker_image (build the Caddy image on-host) + docker_compose_v2
  # (reverse_proxy role).
  - name: community.docker
    version: ">=3.0.0"