---
# Master playbook — runs every role against its target group.
# Always use --check --diff on first run against production hosts.
# Use --limit <host_pattern> to target a subset.
#
# Examples:
#   ansible-playbook site.yml --check --diff                    # dry-run everything
#   ansible-playbook site.yml --limit pve1.sweet.home           # production proxmox only
#   ansible-playbook site.yml --limit proxmox --tags ssh        # only SSH tasks on all PVE nodes

- import_playbook: proxmox.yml
- import_playbook: freeipa.yml
- import_playbook: raspi.yml