---
# Kedge site bootstrap playbook.
# Provisions infrastructure for Kedge deployment at a new site.

- name: Apply base hardening to all nodes
  hosts: all
  become: true
  roles:
    - base-hardening

- name: Bootstrap WireGuard mesh
  hosts: all
  become: true
  roles:
    - wireguard-bootstrap

- name: Deploy Headscale coordinator
  hosts: cloud_anchor
  become: true
  roles:
    - headscale

- name: Bootstrap k3s clusters
  hosts: all
  become: true
  roles:
    - k3s-bootstrap

- name: Deploy monitoring stack
  hosts: all
  become: true
  roles:
    - monitoring