---

# ansible/deploy.yml

# Publishes the nginx vhost (two-phase around the ACME certificate)

#

#   ansible-playbook -i inventory/hosts.yml deploy.yml --ask-become-pass

- name: Configure nginx

  hosts: vps

  become: yes

  become_method: doas

  # Reload even if an earlier task failed, so a late failure cannot leave the

  # vhost changed but nginx still serving the old config

  force_handlers: true

  vars_files:

    - vars/vhosts.yml

  roles:

    - nginx