---
- hosts: all:!workstation_host_windows
  become: true
  pre_tasks:
    - name: Load local vault variables when available
      tags: [always]
      ansible.builtin.include_vars:
        file: "{{ playbook_dir }}/../secrets/vault.yml"
      when: lookup('ansible.builtin.fileglob', playbook_dir + '/../secrets/vault.yml', errors='ignore', wantlist=True) | length > 0

    - name: Load machine-local vault variables when available
      tags: [always]
      ansible.builtin.include_vars:
        file: "{{ playbook_dir }}/../secrets/vault.local.yml"
      when: lookup('ansible.builtin.fileglob', playbook_dir + '/../secrets/vault.local.yml', errors='ignore', wantlist=True) | length > 0

  roles:
    - dotfiles_common

- hosts: void
  become: true

  roles:
    - packages_void
    - services_runit
    - profile_desktop_common
    - profile_desktop_i3
    - profile_desktop_sway
    - profile_desktop_hyprland
    - profile_desktop_host

- hosts: workstation_dev_ubuntu
  become: true

  roles:
    - packages_ubuntu
    - services_systemd
    - profile_workstation_dev_common

- hosts: workstation_host_linux
  become: true

  roles:
    - profile_workstation_gnome

- hosts: workstation_dev_wsl
  become: true

  roles:
    - packages_ubuntu
    - services_systemd
    - profile_workstation_dev_common
    - profile_workstation_dev_wsl

- hosts: workstation_host_windows
  gather_facts: false

  pre_tasks:
    - name: Load local vault variables when available
      tags: [always]
      ansible.builtin.include_vars:
        file: "{{ playbook_dir }}/../secrets/vault.yml"
      when: lookup('ansible.builtin.fileglob', playbook_dir + '/../secrets/vault.yml', errors='ignore', wantlist=True) | length > 0

    - name: Load machine-local vault variables when available
      tags: [always]
      ansible.builtin.include_vars:
        file: "{{ playbook_dir }}/../secrets/vault.local.yml"
      when: lookup('ansible.builtin.fileglob', playbook_dir + '/../secrets/vault.local.yml', errors='ignore', wantlist=True) | length > 0

    - name: Ensure Windows PSRP connection settings are defined
      tags: [always]
      ansible.builtin.assert:
        that:
          - (ansible_host | default('') | length) > 0
          - (ansible_user | default('') | length) > 0
        fail_msg: >-
          Define windows_psrp_host and windows_psrp_user via extra vars, secrets/vault.yml,
          or secrets/vault.local.yml
          before running the workstation_host_windows play.

  roles:
    - profile_workstation_host_windows

- hosts: ubuntu_server
  become: true

  roles:
    - packages_ubuntu
    - services_systemd
    - profile_server