- name: Web Application Firewalls (config)
  hosts: waf
  vars_files:
    - "vars/common.yml"
    - "vars/secrets.yml"
  vars:
    caddy_debug: true
    caddy_config_only: true
    caddy_consul: true
    caddy_consul_delegate_to: "waf1"
    caddy_consul_admin_token: "{{ secrets.consul.bootstrap_secret }}"
    caddy_consul_aes_key: "{{ secrets.caddy.storage_consul_aes_key }}"
    caddy_sites: "{{ common.sites }}"
  roles:
    - "caddy"
  tags:
    - "waf"