---
# Phase 2: CI-triggered app deployment.
#
# Runs against all webservers; each host deploys only enabled apps listed in
# its host_apps (enabled: false is skipped). Deploy exactly one app+env at a
# pinned ref via extra-vars:
#
#   ansible-playbook playbooks/deploy-apps.yml \
#     -e app=company_site -e app_env=prod -e app_ref=<sha>
#
# Or redeploy everything on master by omitting app/app_env/app_ref.
- name: Deploy applications
  hosts: webservers
  become: true
  roles:
    - app-deploy
    - web-static