Add task tags for selective playbook execution and fix vault loading

ansible/roles/dotfiles_common/tasks/main.yml

@@ -14,6 +14,7 @@
   loop: "{{ xdg_user_directories | default([]) }}"
 
 - name: Copy common dotfiles
+  tags: [dotfiles, dotfiles:common]
   ansible.builtin.copy:
     src: "{{ playbook_dir }}/../dotfiles/common/{{ item.src }}"
     dest: "{{ user_home }}/{{ item.dest }}"

ansible/roles/packages_void/tasks/main.yml

@@ -1,5 +1,6 @@
 ---
 - name: Install Void nonfree repository if needed
+  tags: [packages]
   community.general.xbps:
     name: void-repo-nonfree
     state: present
@@ -7,16 +8,19 @@
   when: "'void-repo-nonfree' in (host_packages | default([]) + void_packages_base | default([]))"
 
 - name: Refresh XBPS cache after enabling nonfree repository
+  tags: [packages]
   ansible.builtin.command: xbps-install -S
   changed_when: false
   when: "'void-repo-nonfree' in (host_packages | default([]) + void_packages_base | default([]))"
 
 - name: Synchronize and upgrade Void Linux packages
+  tags: [packages]
   community.general.xbps:
     update_cache: true
     upgrade: true
 
 - name: Install packages on Void Linux
+  tags: [packages]
   community.general.xbps:
     name: >-
       {{

ansible/roles/profile_desktop_i3/tasks/main.yml

@@ -1,5 +1,6 @@
 ---
 - name: Ensure config directories exist
+  tags: [dotfiles, dotfiles:desktop]
   ansible.builtin.file:
     path: "{{ item }}"
     state: directory
@@ -37,6 +38,7 @@
     state: present
 
 - name: Copy desktop dotfiles
+  tags: [dotfiles, dotfiles:desktop]
   ansible.builtin.copy:
     src: "{{ playbook_dir }}/../dotfiles/desktop/{{ item.src }}"
     dest: "{{ user_home }}/{{ item.dest }}"
@@ -48,6 +50,7 @@
     label: "{{ item.dest }}"
 
 - name: Render desktop templates with private values
+  tags: [dotfiles, dotfiles:desktop]
   ansible.builtin.template:
     src: "{{ item.src }}"
     dest: "{{ user_home }}/{{ item.dest }}"
@@ -71,6 +74,7 @@
     label: "{{ item.dest }}"
 
 - name: Refresh user font cache
+  tags: [dotfiles, dotfiles:desktop]
   ansible.builtin.command: fc-cache -f
   become_user: "{{ username }}"
   environment:
@@ -78,6 +82,7 @@
   changed_when: false
 
 - name: Ensure .gnupg directory exists
+  tags: [dotfiles, dotfiles:desktop]
   ansible.builtin.file:
     path: "{{ user_home }}/.gnupg"
     state: directory
@@ -86,6 +91,7 @@
     mode: "0700"
 
 - name: Copy gpg-agent.conf
+  tags: [dotfiles, dotfiles:desktop]
   ansible.builtin.copy:
     src: "{{ playbook_dir }}/../dotfiles/desktop/.gnupg/gpg-agent.conf"
     dest: "{{ user_home }}/.gnupg/gpg-agent.conf"
@@ -94,6 +100,7 @@
     mode: "0600"
 
 - name: Ensure local user directories exist
+  tags: [dotfiles, dotfiles:desktop]
   ansible.builtin.file:
     path: "{{ item.path }}"
     state: directory
@@ -111,6 +118,7 @@
       mode: "0755"
 
 - name: Ensure maildir directories exist
+  tags: [dotfiles, dotfiles:desktop]
   ansible.builtin.file:
     path: "{{ item }}"
     state: directory

ansible/site.yml

@@ -9,6 +9,7 @@
   become: true
   pre_tasks:
     - name: Load local vault variables when available
+      tags: [always]
       ansible.builtin.include_vars:
         file: "{{ playbook_dir }}/../secrets/vault.yml"
       when: lookup('ansible.builtin.fileglob', playbook_dir + '/../secrets/vault.yml', errors='ignore') != ''