## Workflow

### Setup

- Install dependencies (Python requirements, Node deps for docs, Ansible collections):

```bash
make bootstrap
```

- Edit vault secrets:

```bash
make edit-group-vault
```

### Validate (safe, local)

- Syntax checks:

```bash
make test-syntax
```

- Lint:

```bash
make lint
```

### Common apply flows

- **Servers baseline** (services + qa + ansible + tailscale):

```bash
make servers
make servers GROUP=services
make servers HOST=jellyfin
```

- **Workstations baseline** (dev + desktop + local; desktop apps only on `desktop` group):

```bash
make workstations
make workstations GROUP=dev
make apps
```

### Proxmox app projects

End-to-end:

```bash
make app PROJECT=projectA
```

Provision only / configure only:

```bash
make app-provision PROJECT=projectA
make app-configure PROJECT=projectA
```

Inspect Proxmox guests:

```bash
make proxmox-info PROJECT=projectA
make proxmox-info ALL=true
make proxmox-info TYPE=lxc
```

### Safety checks

- Prefer `--check --diff` first:

```bash
make check
```

### Debugging

```bash
make debug
make verbose
```