prevent SMTP smuggling

[ansible.git] / site.yml

diff --git a/site.yml b/site.yml
index 32c2a20ead38a9cdd9120e1ba6a0853ca2132f54..d503df387bc67c2d98a51316b364ddb5036a1622 100644 (file)
--- a/site.yml
+++ b/site.yml
@@ -1,3 +1,13 @@
+# Dependencies are "expressed" by the hosts file, e.g.
+# ```
+# [email:children]
+# journalwatch
+# [letsencrypt:children]
+# prosody
+# ```
+# I tried using role dependencies but that doesn't interact well with tags:
+# When restricting to a tag, its dependencies still get played.
+
 - hosts: all
   gather_facts: no
   pre_tasks:
@@ -6,6 +16,12 @@
   - base
   tags: base
 
+- hosts: unbound
+  gather_facts: no
+  roles:
+  - unbound
+  tags: unbound
+
 - hosts: letsencrypt
   gather_facts: no
   roles:
@@ -19,6 +35,7 @@
   tags: email
 
 - hosts: journalwatch
+  # depends: email
   gather_facts: no
   roles:
   - journalwatch
@@ -37,7 +54,10 @@
   tags: etherpad
 
 - hosts: prosody
+  # depends: letsencrypt
   gather_facts: no
+  pre_tasks:
+  - setup:
   roles:
   - prosody
   tags: prosody