---
# Full rollout: base setup on all hosts, then AWX and GitLab in parallel groups.
# Full run: ansible-playbook playbooks/site.yml --ask-vault-pass

- name: Base setup for all hosts
  hosts: awx_servers:gitlab_servers
  become: true
  roles:
    - role: common

- name: Install and configure AWX (via k3s)
  hosts: awx_servers
  become: true
  vars_files:
    - ../vault/secrets.yml
  roles:
    - role: k3s_install
    - role: awx_operator

- name: Install and configure GitLab
  hosts: gitlab_servers
  become: true
  vars_files:
    - ../vault/secrets.yml
  roles:
    - role: gitlab_install