00_core.yml

---
- include_tasks: utils/once/flag.yml

- name: "🧩 load docker, db and proxy for {{ application_id }}"
  include_role:
    name: sys-stk-full
  vars:
    compose_handlers_flush: true
    webserver_location_extra_configuration: "{{ SEMAPHORE_LOCATION_CONFIGURATION }}"
    webserver_extra_configuration: "{{ SEMAPHORE_OIDC_LOGIN_LOCATION }}"

- name: "🧑‍💼 Run the Semaphore account operations on the stack host"
  when: IS_STACK_HOST | bool
  block:
    - name: "👤 Provision the external OIDC administrator in Semaphore"
      include_tasks: 01_oidc.yml
      when: SEMAPHORE_OIDC_ENABLED | bool

    - name: "🔑 Carry the break-glass password into Semaphore on every deploy"
      include_tasks: 02_breakglass.yml