---
- name: FreeIPA server provisioning
  hosts: freeipa
  become: true
  gather_facts: true

  pre_tasks:
    - name: Confirm Rocky Linux 9
      ansible.builtin.assert:
        that:
          - ansible_distribution == "Rocky"
          - ansible_distribution_major_version == "9"
        fail_msg: "FreeIPA role targets Rocky Linux 9 only."
      tags: always

  roles:
    - role: freeipa
      tags: freeipa