From 0d9e5052abdee89e1944e8629cfade7f5ea76ae6 Mon Sep 17 00:00:00 2001
From: irl <iain@learmonth.me>
Date: Mon, 22 Dec 2025 11:06:35 +0000
Subject: [PATCH] feat(services): rename playbook to just services

---
 playbooks/{core_services.yml => services.yml} | 33 ++++++++++++++++++-
 1 file changed, 32 insertions(+), 1 deletion(-)
 rename playbooks/{core_services.yml => services.yml} (57%)

diff --git a/playbooks/core_services.yml b/playbooks/services.yml
similarity index 57%
rename from playbooks/core_services.yml
rename to playbooks/services.yml
index b579d96..c06a62f 100644
--- a/playbooks/core_services.yml
+++ b/playbooks/services.yml
@@ -2,7 +2,6 @@
 - name: Deploy and update the FreeIPA servers
   hosts:
     - ipaservers
-  become: true  # Required by FreeIPA roles
   vars:
     # Required for FreeIPA setup
     baseline_epel_packages_allowed:
@@ -16,6 +15,7 @@
       - python3-acme
       - python3-zipp
       - python3-pyOpenSSL
+      - node-exporter
     rhel9cis_dns_server: true
     rhel9cis_httpd_server: true
     # TODO: Restricted umask breaks FreeIPA roles
@@ -23,9 +23,14 @@
     rhel9cis_rule_5_4_3_3: false
   roles:
     - role: sr2c.core.baseline
+      baseline_epel_packages_allowed:
+        - node-exporter
       tags: bootstrap
     - role: sr2c.core.freeipa
+      become: true
       tags: freeipa
+    - role: sr2c.core.node_exporter
+      tags: prometheus
 
 - name: Deploy and update the Keycloak server
   hosts:
@@ -33,16 +38,42 @@
   become: true
   roles:
     - role: sr2c.core.baseline
+      baseline_epel_packages_allowed:
+        - node-exporter
       tags: bootstrap
     - role: freeipa.ansible_freeipa.ipaclient
       state: present
       tags: bootstrap
     - role: sr2c.core.podman_keycloak
       tags: keycloak
+    - role: sr2c.core.node_exporter
+      tags: prometheus
+
+- name: Deploy and update the Prometheus server
+  hosts:
+    - prometheus
+  roles:
+    - role: sr2c.core.baseline
+      vars:
+        baseline_epel_packages_allowed:
+          - node-exporter
+      tags: bootstrap
+    - role: freeipa.ansible_freeipa.ipaclient
+      become: true
+      state: present
+      tags: bootstrap
+    - role: sr2c.core.node_exporter
+      tags: prometheus
+    - role: sr2c.core.podman_prometheus
+      tags: prometheus
 
 - name: Baseline for generic servers (manual or externally managed application deployment)
   hosts:
     - generic
   roles:
     - role: sr2c.core.baseline
+      baseline_epel_packages_allowed:
+        - node-exporter
       tags: bootstrap
+    - role: sr2c.core.node_exporter
+      tags: prometheus