From f0c46ec051a36f6179419b2075ec7f41540e6770 Mon Sep 17 00:00:00 2001
From: Eric Meehan <eric@eom.dev>
Date: Mon, 26 Oct 2026 18:58:02 -0400
Subject: [PATCH] Deploy

---
 playbooks/deploy-friend.yml | 35 ++++++++++++++++++-----------------
 1 file changed, 18 insertions(+), 17 deletions(-)

diff --git a/playbooks/deploy-friend.yml b/playbooks/deploy-friend.yml
index 8bb676e..f4e6278 100755
--- a/playbooks/deploy-friend.yml
+++ b/playbooks/deploy-friend.yml
@@ -1,14 +1,15 @@
 ---
-# Supply friend_owncast_hostname and friend_owncast_cluster_issuer in inventory
+# Supply kritomas_owncast_hostname and kritomas_owncast_cluster_issuer in inventory
 # or an external vars file. Do not guess a domain or reuse eom.dev's ingress.
-- name: Deploy an isolated Owncast instance for a friend
-  hosts: localhost
-  connection: local
-  gather_facts: false
+- name: Deploy an isolated Owncast instance for a kritomas
+  hosts: alpha-control-plane
+  become: true
+  vars_files:
+    - ../secrets.yaml
   vars:
-    owncast_namespace: owncast-friend
-    owncast_name: owncast-friend
-    owncast_pvc_name: owncast-friend
+    owncast_namespace: owncast-kritomas
+    owncast_name: owncast-kritomas
+    owncast_pvc_name: owncast-kritomas
     owncast_image: owncast/owncast:0.3.0
     owncast_storage_size: 128Gi
     owncast_resources:
@@ -17,21 +18,21 @@
     owncast_service_type: LoadBalancer
     owncast_external_traffic_policy: Local
     owncast_ingress_enabled: true
-    owncast_hostname: "{{ friend_owncast_hostname | default('') }}"
+    owncast_hostname: kritomas.eom.dev
     owncast_ingress_class: nginx
     owncast_tls_enabled: true
-    owncast_cluster_issuer: "{{ friend_owncast_cluster_issuer | default('') }}"
-    owncast_tls_secret_name: owncast-friend
+    owncast_cluster_issuer: ca-issuer
+    owncast_tls_secret_name: owncast-kritomas
     owncast_onion_enabled: false
   pre_tasks:
-    - name: Require friend-specific settings before changing the cluster
+    - name: Require kritomas-specific settings before changing the cluster
       ansible.builtin.assert:
         that:
-          - friend_owncast_hostname | default('') | length > 0
-          - friend_owncast_hostname | default('') != 'owncast.eom.dev'
-          - friend_owncast_cluster_issuer | default('') | length > 0
+          - kritomas_owncast_hostname | default('') | length > 0
+          - kritomas_owncast_hostname | default('') != 'owncast.eom.dev'
+          - kritomas_owncast_cluster_issuer | default('') | length > 0
           - owncast_namespace != 'owncast'
           - owncast_hostname != 'owncast.eom.dev'
-        fail_msg: Supply friend_owncast_hostname and friend_owncast_cluster_issuer for a separate instance.
+        fail_msg: Supply kritomas_owncast_hostname and kritomas_owncast_cluster_issuer for a separate instance.
   roles:
-    - ansible-role-owncast
\ No newline at end of file
+    - ansible-role-owncast