```
# Ubuntu/Debian
sudo apt update && sudo apt install ansible -y

# macOS (with Homebrew)
brew install ansible

# Fedora/RHEL/CentOS
sudo dnf install ansible-core
```

```
ansible-galaxy collection install containers.podman
```
```
ssh-keygen -t ed25519 -C "matrix-deploy"
# Press Enter to save default: ~/.ssh/id_ed25519
```
```
ssh-copy-id deploy@matrix.example.com
# Replace with your actual server IP/hostname & user
```
## Deployment ##
```
# Just re-run (idempotent):
ansible-playbook playbook.yml --ask-vault-pass

# Or re-run only nginx role (if you changed site/Nginx)
ansible-playbook playbook.yml --tags nginx-proxy --ask-vault-pass
```