---
- name: Run example SCE playbook
  hosts: sce-targets
  become: true
  roles:
    - wingelaar.sce.install
    - role: wingelaar.sce.firewall_nft
      vars:
        firewall_nft_port_mapping:
          - "80:8080"
          - "22:2222"
    - role: wingelaar.sce.podman_certbot
      vars:
        podman_certbot_domains: git.example.com
        podman_certbot_email: certbot@example.com
    - wingelaar.sce.podman_certbot_root_transfer
    - role: wingelaar.sce.nginx
      vars:
        nginx_htpasswd: super_secure_password
        nginx_sites:
          - name: git.example.com
            port: 3000
    - role: wingelaar.sce.podman_forgejo