mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-08 11:46:35 +00:00
sys-svc-compose-ca (required_by web) and sys-ctl-mtn-cert-deploy (required_by web-app-mailu) were skipped at their include sites via a TLS/self_signed `when:`. On a TLS-off node (e.g. .onion) the skipped include_role leaves no role-named TASK block, so the post-deploy required_by validator (cli/meta/roles/services/called) reports the role as "did not execute" and exits 2. Move the applicability decision into each role: an always-run debug marker when not applicable (leaving the non-skip TASK block the validator needs) plus the real CA/cert work gated behind the same condition. Clearnet self_signed nodes still run the real work; TLS-off nodes pass with the marker. Adds sys-svc-compose-ca/vars/main.yml (_compose_ca_applicable SPOT). Also flush the deploy phase-header prints so they stream in order instead of being buffered until after a failure (which misattributed the failing pass). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Deploy 🚀
Run Ansible deploys against a dedicated inventory, a CI container image, or the development matrix that iterates per-role variants.