---
# Playbook: servers.yml
# Purpose: Baseline configuration for servers (no desktop apps, no IDE install)
# Targets: services + qa + ansible + tailscale (override with -e target_group=...)
# Tags: maintenance, base, security, user, ssh, shell, docker, monitoring
# Usage:
#   ansible-playbook -i inventories/production playbooks/servers.yml
#   ansible-playbook -i inventories/production playbooks/servers.yml -e target_group=services
#   ansible-playbook -i inventories/production playbooks/servers.yml --limit jellyfin

- name: Configure servers baseline
  hosts: "{{ target_group | default('services:qa:ansible:tailscale') }}"
  become: true

  roles:
    - {role: maintenance, tags: ['maintenance']}
    - {role: base, tags: ['base', 'security']}
    - {role: user, tags: ['user']}
    - {role: ssh, tags: ['ssh', 'security']}
    - {role: shell, tags: ['shell']}
    - {role: docker, tags: ['docker']}
    - {role: monitoring_server, tags: ['monitoring']}

  tasks:
    - name: Display completion message
      ansible.builtin.debug:
        msg: "Server baseline configuration completed successfully!"