---
# ansible/setup.yml
# Base host setup: baseline packages, Docker, the deploy user and its key
#
#   ansible-playbook -i inventory/hosts.yml setup.yml --ask-become-pass

- name: Base host setup
  hosts: vps
  become: yes
  become_method: doas

  roles:
    - bootstrap
    - docker
    - appuser

  post_tasks:
    - name: Confirm deploy user can reach Docker
      ansible.builtin.command: docker info
      become_user: "{{ deploy_user }}"
      changed_when: false
      register: docker_check

    - name: Show Docker status
      ansible.builtin.debug:
        msg: "Docker is reachable by {{ deploy_user }}"
      when: docker_check.rc == 0