play: tag roles, "all" hosts

play.yml

@@ -1,17 +1,20 @@
 ---
-- hosts: "{{ target | default('all') }}" # target inventory group, default all
+# vim: ft=yaml.ansible
-  gather_facts: yes
+- name: Deploy basics
+  hosts: all  # reminder: '--limit'
+  gather_facts: true
   vars:
-#    auto_update: "true"  # would configure dnf-automatic
+    #  auto_update: "true"  # would configure dnf-automatic
-#    hardened_ssh_port: "1181" # tcp is assumed in selinux/firewalld allowance
+    #  hardened_ssh_port: "1181" # tcp is assumed in selinux/firewalld allowance
-    URL_PUBKEYS: "https://github.com/joshlay.keys" # https://github.com/user.keys
   roles:
-    - {role: btrfs}  # sets up scrubbing
+    - {role: custom-facts, tags: ['facts', 'custom-facts']}
-    - {role: bootstrap}
+    # - {role: btrfs, tags: ['btrfs']}  # sets up scrubbing
-    - {role: tuned}
+    - {role: bootstrap, tags: ['boot', 'bootstrap']}
-    - {role: install-packages}
+    - {role: grub, tags: ['grub']}
-    - {role: update-packages} # depends on 'is_atomic' in bootstrap
+    - {role: tuned, tags: ['tuned']}
-    - {role: fedora-upgrade} # consider renaming to dist-upgrade / supporting more than fedora
+    - {role: install-packages, tags: ['pkgs', 'install', 'install-pkgs']}
-    - {role: create-user}  # this should always follow packages; they often provide groups the user may want to join
+    - {role: update-packages, tags: ['pkgs', 'install', 'update-pkgs']}
-    - {role: hardening}
+    # - {role: fedora-upgrade}  # replacing w/ 'dist-upgrade', supporting more than fedora
-    - {role: docker}
+    - {role: create-user, tags: ['user']}  # should follow package-installing roles; provide groups the user may want to join
+    - {role: hardening, tags: ['harden', 'hardening']}
+#    - {role: docker}