Initial commit.

tar-valon_config_deploy.yml

@@ -0,0 +1,45 @@
+---
+- name: Deploy Docker Service Configurations (Mirrored & Vault-ready)
+  hosts:
+    - rinoa
+    - rikku
+    - benedikta
+  gather_facts: false
+
+  vars:
+    # template_base_path and vault_addr from group_vars/all.yml
+    # appdata_base_path, secrets_path, vault_token_cleaned from host_vars/<host>.yml
+
+  tasks:
+    - name: Set vault token from environment
+      ansible.builtin.set_fact:
+        vault_token_cleaned: "{{ lookup('env', vault_token_env_var) }}"
+
+    - name: Find all files for this host
+      ansible.builtin.find:
+        paths: "{{ template_base_path }}/{{ inventory_hostname }}"
+        recurse: yes
+      register: host_files
+      delegate_to: localhost
+      run_once: true
+
+    - name: Deploy Jinja2 templates (skip unchanged)
+      ansible.builtin.template:
+        src: "{{ item.path }}"
+        dest: "{{ appdata_base_path }}/{{ item.path | community.general.relpath(template_base_path + '/' + inventory_hostname) | regex_replace('\\.j2$', '') }}"
+        mode: '0644'
+      loop: "{{ host_files.files }}"
+      loop_control:
+        label: "{{ item.path }}"
+      when: item.path.endswith('.j2')
+
+    - name: Deploy static files (skip unchanged)
+      ansible.builtin.copy:
+        src: "{{ item.path }}"
+        dest: "{{ appdata_base_path }}/{{ item.path | community.general.relpath(template_base_path + '/' + inventory_hostname) }}"
+        mode: '0644'
+        remote_src: no
+      loop: "{{ host_files.files }}"
+      loop_control:
+        label: "{{ item.path }}"
+      when: not item.path.endswith('.j2')