---
# Phase 2: CI-triggered app deployment.
#
# Runs against all webservers; each host deploys only the apps listed in its
# host_apps. Deploy exactly one app+env at a pinned ref via extra-vars:
#
#   ansible-playbook playbooks/deploy-apps.yml \
#     -e app=company_site -e app_env=prod -e app_ref=<sha>
#
# Or redeploy everything on master by omitting app/app_env/app_ref.
- name: Deploy applications
  hosts: webservers
  become: true
  roles:
    - app-deploy
    - web-static