---
- hosts: all
  vars_files:
    - vars/vault.yml
  roles:
    - role: common
    - role: git
    - role: podman
# SSL certificates are now handled automatically by Caddy
    # - role: ssl  # REMOVED - Caddy handles all certificate management
    - role: github-actions
    # Provisions streams/pipelines/lookup tables over the Graylog REST API, so
    # it can only run when the stack is up -- see graylog_enabled in
    # inventories/home/hosts.yml.
    - role: graylog-config
      when: graylog_enabled | bool
      tags: graylog-config
    - role: ups
      tags: ups