---
# Setup Let's Encrypt SSL Certificates via Traefik
# Wrapper Playbook for traefik role ssl tasks
- hosts: production
  gather_facts: yes
  become: no
  vars:
    # ssl_domains and acme_email are defined in group_vars/production.yml
    # Can be overridden via -e flag if needed
    traefik_ssl_domains: "{{ ssl_domains | default([gitea_domain, app_domain]) }}"
  tasks:
    - name: Include traefik ssl tasks
      ansible.builtin.include_role:
        name: traefik
        tasks_from: ssl
  tags:
    - traefik
    - ssl
    - certificates