---
- name: "📁 Create sys-svc-compose dirs (with parents) for '{{ application_id }}'"
  file:
    path: "{{ item.value }}"
    state: directory
    mode: "0755"
  with_dict: "{{ lookup('container', application_id, 'directories') }}"

- name: "🛡️ Ensure PHP hardening assets are installed"
  ansible.builtin.include_role:
    name: sys-svc-compose-php

- name: "📂 Include git-repo based installation routines for '{{ application_id }}'."
  include_tasks: "03_repository.yml"
  when: compose_repository_pull | bool

- name: "📂 Include file management routines for '{{ application_id }}'."
  include_tasks: "04_files.yml"

- name: "✅ Ensure CA trust assets are installed (only when needed)"
  ansible.builtin.include_role:
    name: sys-svc-compose-ca