---
# Security hardening establishes secure foundation before web services
# - import_playbook: playbooks/security.yml

- name: Deploy Core Infrastructure
  hosts: arch-vps
  become: yes
  gather_facts: yes
  
  roles:
    # # Infrastructure services
    # - role: postgresql
    #   tags: ['postgresql', 'infrastructure', 'database']
    # # - role: caddy
    # #   tags: ['caddy', 'infrastructure', 'web']
    # 
    # Application services  
    - role: gitea
      tags: ['gitea', 'git', 'development']
    # - role: sigvild-gallery
    #   tags: ['sigvild', 'gallery', 'wedding']