---
# Intentionally targets only services with approved local dump/data sources.
# Set restic_enabled=true only after selecting a backend and provisioning the
# root-only repository config directly on each target.
- name: Deploy controlled Restic timers
  hosts:
    - vaultwarden
    - powerdns
  become: true
  gather_facts: false
  roles:
    - role: restic
      tags: [restic, backup]