---
# ansible/deploy.yml
# Publishes the nginx vhost (two-phase around the ACME certificate)
#
#   ansible-playbook -i inventory/hosts.yml deploy.yml --ask-become-pass

- name: Configure nginx
  hosts: vps
  become: yes
  become_method: doas
  # Reload even if an earlier task failed, so a late failure cannot leave the
  # vhost changed but nginx still serving the old config
  force_handlers: true
  vars_files:
    - vars/vhosts.yml

  roles:
    - nginx