deploy.yml

---

- hosts: integrity
  become: true
  gather_facts: true
  roles:
    - sshkey_update
    - hypha.common.provision_ssh_keys
    - hypha.common.harden_ssh
    - hypha.common.setup
    - hypha.common.unattended_upgrades
    - geerlingguy.docker # Docker before Firewall
    - hypha.common.firewall
    - hypha.common.node_exporter
    - hypha.common.prometheus_exporter_addnode
    - hypha.common.nginx
    - hypha.common.ssl
    - hypha.common.nodejs
    - nfs
    - authsign
    - integrity-backend
    - integrity-preprocessor
    - rclone
#    - promtail
    - pass

- hosts: browsertrix
  become: true
  gather_facts: true
  roles:    
    - hypha.common.provision_ssh_keys
    - hypha.common.harden_ssh
    - hypha.common.setup
    - hypha.common.unattended_upgrades
    - hypha.common.node_exporter
    - hypha.common.prometheus_exporter_addnode
    - hypha.common.nginx
    - hypha.common.ssl
    - geerlingguy.docker
    - hypha.common.firewall
    - browsertrix
    - integrity-preprocessor
    - hypha.common.prometheus_exporter_docker
    #- promtail
    - nfs
    - pass
  
- hosts: bot
  become: true
  gather_facts: true
  roles:
    - sshkey_update
    - hypha.common.provision_ssh_keys
    - hypha.common.harden_ssh
    - hypha.common.setup
    - hypha.common.unattended_upgrades
    - geerlingguy.docker # Docker before Firewall
    - hypha.common.firewall
    - hypha.common.node_exporter
    - hypha.common.prometheus_exporter_addnode
    - hypha.common.nginx
    - hypha.common.ssl
    - slack_archive_bot
    - telegram_archive_bot
    - signal_bot
    - integrity-preprocessor
    - hypha.common.prometheus_exporter_docker
#    - promtail
    - nfs
    - pass