---
- name: Provision all hosts with Docker
  hosts: ci:target
  become: true
  roles:
    - docker

- name: Provision ci host with Zot registry
  hosts: ci
  become: true
  roles:
    - zot

- name: Provision ci host with reverse proxy and TLS
  hosts: ci
  become: true
  roles:
    - reverse_proxy

- name: Provision ci host with Woodpecker CI
  hosts: ci
  become: true
  roles:
    - woodpecker

- name: Authorize deploy pipeline SSH key on target host
  hosts: target
  become: true
  roles:
    - deploy_ssh