---
# Not `always`: that would also fire under unrelated tags of the calling
# playbook (e.g. --tags wong_disk). Every tag of this role carries it instead.
- name: Preflight
  ansible.builtin.import_tasks: preflight.yml
  tags: [obsidian, obsidian_user, obsidian_install, obsidian_layout, obsidian_service, obsidian_verify]

- name: Service account
  ansible.builtin.import_tasks: user.yml
  tags: [obsidian_user]

- name: Client
  ansible.builtin.import_tasks: install.yml
  tags: [obsidian_install]

- name: Vault layout
  ansible.builtin.import_tasks: layout.yml
  tags: [obsidian_layout]

- name: Service
  ansible.builtin.import_tasks: service.yml
  tags: [obsidian_service]

- name: Verify
  ansible.builtin.import_tasks: verify.yml
  when: obsidian_headless_verify | bool
  tags: [obsidian_verify]