---
# heleos platform — host baseline (Phase 1)
# Usage:
#   ansible-galaxy collection install -r requirements.yml
#   ansible-playbook site.yml
#
# Roles run in dependency order: base packages → ZFS pool/datasets → Docker
# (data-root on ZFS) → firewall → SSH hardening.
- name: heleos host baseline
  hosts: hosting
  become: true
  roles:
    - role: base
      tags: [base]
    - role: zfs
      tags: [zfs]
    - role: docker
      tags: [docker]
    - role: firewall
      tags: [firewall]
    - role: ssh_hardening
      tags: [ssh]
    - role: backup
      tags: [backup]