X-Git-Url: https://git.ralfj.de/ansible.git/blobdiff_plain/88cc8cf7fedf35cd51c29dcadac94f288c08b22b..7fdacc01ac7ea0c81a80951bf1d6f70d885fb63d:/site.yml

diff --git a/site.yml b/site.yml
index 0d82190..1483ba9 100644
--- a/site.yml
+++ b/site.yml
@@ -1,3 +1,12 @@
+# Dependencies are "expressed" by the hosts file, e.g.
+# ```
+# [letsencrypt:children]
+# apache
+# email
+# ```
+# I tried using role dependencies but that doesn't interact well with tags:
+# When restricting to a tag, its dependencies still get played.
+
 - hosts: all
   gather_facts: no
   pre_tasks:
@@ -6,14 +15,31 @@
   - base
   tags: base
 
+- hosts: unbound
+  gather_facts: no
+  roles:
+  - unbound
+  tags: unbound
+
 - hosts: letsencrypt
   gather_facts: no
   roles:
   - letsencrypt
   tags: letsencrypt
 
-# FIXME make this a role, or several
-- import_playbook: email.yml
+- hosts: email
+  # depends: letsencrypt, unbound
+  gather_facts: no
+  roles:
+  - email
+  tags: email
+
+- hosts: journalwatch
+  # depends: email
+  gather_facts: no
+  roles:
+  - journalwatch
+  tags: journalwatch
 
 - hosts: bind
   gather_facts: no
@@ -21,13 +47,23 @@
   - bind
   tags: bind
 
+- hosts: etherpad
+  gather_facts: no
+  roles:
+  - etherpad
+  tags: etherpad
+
 - hosts: prosody
+  # depends: letsencrypt
   gather_facts: no
+  pre_tasks:
+  - setup:
   roles:
   - prosody
   tags: prosody
 
 - hosts: apache
+  # depends: letsencrypt
   gather_facts: no
   roles:
   - apache