- name: Deploy Matrix + Nginx + Static Site with TLS
  hosts: matrix_servers
  become: yes
  vars:
    synapse_db_pass: "{{ vault_synapse_db_pass }}"
    certbot_email: "{{ vault_certbot_email | default('admin@example.com') }}"

  tasks:
    - name: Setup common dependencies
      import_role:
        name: common

    - name: Deploy Nginx + Static Site + TLS (with Certbot)
      import_role:
        name: nginx-proxy

    - name: Deploy Synapse (PostgreSQL + containers)
      import_role:
        name: matrix-synapse