---
- name: Deploy all services
  hosts: services_hosts
  become: true

  pre_tasks:
    - name: Load vault vars if present
      include_vars:
        file: ../secrets/vault.yml
      ignore_errors: true

  roles:
    - docker
    - fail2ban
    - traefik
    - lldap
    - authelia
    - exporters
    - prometheus
    - loki
    - grafana
    - forgejo
    - watchtower
    - role: airflow
      when: deploy_airflow | default(false)
    - role: spark
      when: deploy_spark | default(false)