From b07ed72a92852a8da35d86f52db98f7160b361fb Mon Sep 17 00:00:00 2001 From: counterweight Date: Fri, 11 Sep 2026 23:03:25 +0200 Subject: [PATCH] caddy: add a [caddy] role group and target it MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit services/caddy_playbook.yml was the one play still targeting a location group (vps) rather than a role group. The two coincide today — vps is exactly vipy, watchtower and spacey, the three hosts with /etc/caddy/sites-enabled — but adding a fourth VPS that does not run Caddy would have silently pulled it into the play. [caddy:children] is edge + monitoring + vpn_control. Verified the play selects the same three machines before and after. Co-Authored-By: Claude Opus 5 (1M context) --- ansible/inventory.ini | 8 +++++++- ansible/services/caddy_playbook.yml | 2 +- 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/ansible/inventory.ini b/ansible/inventory.ini index a061637..4643dbb 100644 --- a/ansible/inventory.ini +++ b/ansible/inventory.ini @@ -58,4 +58,10 @@ localhost [managed:children] vps nodito_host -nodito_vms \ No newline at end of file +nodito_vms + +# Hosts that run Caddy and therefore have /etc/caddy/sites-enabled. +[caddy:children] +edge +monitoring +vpn_control diff --git a/ansible/services/caddy_playbook.yml b/ansible/services/caddy_playbook.yml index de98c8f..29e74b2 100644 --- a/ansible/services/caddy_playbook.yml +++ b/ansible/services/caddy_playbook.yml @@ -1,5 +1,5 @@ - name: Install and configure Caddy on Debian 12 - hosts: vps + hosts: caddy become: yes tasks: