- name: Deploy listmonk
  hosts: alpha-control-plane
  become: true
  vars_files:
    - ../secrets.yaml
  roles:
    - role: ericomeehan.listmonk
      # listmonk_admin_password and listmonk_smtp_password come from Vault as-is.
      vars:
        listmonk_db_password: "{{ listmonk_postgresql_password }}"
        listmonk_oidc_client_secret: "{{ listmonk_dex_client_secret }}"
        # Same value as LISTMONK_API_TOKEN in the www "membership" Secret.
        listmonk_api_token: "{{ listmonk_membership_api_token }}"