---

# ansible/provision.yml

# Run once to fully provision the VPS.

#

# Usage:

#   ansible-playbook -i inventory/hosts.yml provision.yml --ask-become-pass

#

# What it does (in order):

#   1. bootstrap  — adds baseline packages

#   2. docker     — installs Docker Engine + Compose plugin

#   3. appuser    — creates the deploy user, copies the SSH key

#   4. directories — creates /srv/app/production

#   5. TODO: Add nginx + compose here as well

- name: Provision server

  hosts: vps

  become: yes

  become_method: doas

  roles:

    - bootstrap

    - docker

    - appuser

    - directories

  post_tasks:

    - name: Confirm deploy user can reach Docker

      ansible.builtin.command: docker info

      become_user: "{{ deploy_user }}"

      changed_when: false

      register: docker_check

    - name: Show Docker status

      ansible.builtin.debug:

        msg: "Docker is reachable by {{ deploy_user }}"

      when: docker_check.rc == 0