updates

playbooks/deploy-apps.yml

@@ -1,7 +1,16 @@
 ---
-# Phase 2: CI-triggered app deployment (stub)
-- name: Deploy application to webservers
+# Phase 2: CI-triggered app deployment.
+#
+# Runs against all webservers; each host deploys only the apps listed in its
+# host_apps. Deploy exactly one app+env at a pinned ref via extra-vars:
+#
+#   ansible-playbook playbooks/deploy-apps.yml \
+#     -e app=company_site -e app_env=prod -e app_ref=<sha>
+#
+# Or redeploy everything on master by omitting app/app_env/app_ref.
+- name: Deploy applications
   hosts: webservers
   become: true
   roles:
     - app-deploy
+    - web-static

playbooks/site.yml

@@ -6,3 +6,6 @@
     - common
     - ufw
     - docker
+    - nodejs
+    - gitea-key
+    - tianji