---
# ============================================================================
# day0_linux_baseline.yml
# ----------------------------------------------------------------------------
# Applies the mk-labs Linux baseline (linux-baseline role) to one or more
# hosts. Idempotent and safe to re-run.
#
# Usage:
#   ansible-playbook playbooks/day0_linux_baseline.yml
#   ansible-playbook playbooks/day0_linux_baseline.yml -e target=figment
#   ansible-playbook playbooks/day0_linux_baseline.yml -e target=semaphore_server
#
# To trigger an opt-in full system upgrade:
#   ansible-playbook playbooks/day0_linux_baseline.yml \
#     -e target=figment -e 'baseline_features={"full_upgrade": true}'
# ============================================================================

- name: Apply mk-labs Linux baseline
  hosts: "{{ target | default('all') }}"
  become: true
  gather_facts: true
  roles:
    - linux-baseline