---
- name: load provisioner facts
  hosts: external
  gather_facts: false
  tasks:
    - name: include provisioner role
      ansible.builtin.include_role:
        name: nullified.infrastructure.provisioner
        tasks_from: load_facts.yml
        apply:
          tags: [always]
      tags: [always]

- name: setup external infrastructure
  hosts: external
  gather_facts: false
  tasks:
    - name: include security role
      ansible.builtin.include_role:
        name: nullified.infrastructure.security
        apply:
          tags: [security]
      tags: [security, firewall]
    - name: include common role
      ansible.builtin.include_role:
        name: nullified.infrastructure.common
        apply:
          tags: [common]
      tags: [common]

- name: setup servers
  hosts: external:&server
  tasks:
    - name: include server role
      ansible.builtin.include_role:
        name: nullified.infrastructure.server
        apply:
          tags: [server]
      tags: [server]

- name: setup web servers
  hosts: external:&webserver
  tasks:
    - name: include nginx role
      ansible.builtin.include_role:
        name: nullified.infrastructure.nginx
        apply:
          tags: [webserver]
      tags: [webserver, webserver-config, webserver-sites, webserver-streams]

- name: setup deluge instances
  hosts: external:&deluge
  tasks:
    - name: include deluge role
      ansible.builtin.include_role:
        name: nullified.infrastructure.deluge
        apply:
          tags: [deluge]
      tags: [deluge]

- name: setup valkey instances
  hosts: external:&valkey
  tasks:
    - name: include valkey role
      ansible.builtin.include_role:
        name: nullified.infrastructure.valkey
        apply:
          tags: [valkey]
      tags: [valkey]