---
# Deploy repo-owned Compose declarations (compose/<project>/compose.yml) to
# inventory hosts. Non-secret source; server-local .env provides the values.
# Gated: apply requires compose_deploy_confirm=true; --check is a read-only
# diff + validation. See runbooks/ansible-operations.md.
- name: Deploy repo-owned Compose declarations
  hosts: docker_hosts
  become: true
  gather_facts: false
  serial: 1
  roles:
    - role: compose_deploy
      tags: [compose, deploy, mutating]