oidc-parent/deployment/01_install_cacert_oidc.yml

---
- name: Install development tools
  hosts: all
  become: false

  roles:
    - prepare_devtools

- name: Setup database
  hosts: pgsqlserver
  become: true

  pre_tasks:

    - name: Install package python3-psycopg2
      ansible.builtin.apt:
        name: python3-psycopg2
        state: present

    # The ACL package is required to run commands as the postgres user
    # See https://docs.ansible.com/ansible-core/2.12/user_guide/become.html#risks-of-becoming-an-unprivileged-user
    - name: Install package acl
      ansible.builtin.apt:
        name: acl
        state: present

  roles:
    - hydra_database

- name: Install authorization server
  hosts: authserver
  become: true

  roles:
    - hydra_server
    - oidc_idp

- name: Install demo application
  hosts: demoserver
  become: true

  roles:
    - oidc_demo_application