---
- name: Deploy Wikideck
  hosts: localhost
  connection: local
  gather_facts: false
  roles:
    - role: wikideck
      vars:
        # Replace with your published, scanned image; preferably use @sha256:...
        wikideck_image: registry.example.com/games/wikideck:1.0.0
        # Replace with real compatible testnet peers. No bootnodes are supplied.
        wikideck_peers:
          - https://peer-a.example.org
          - https://peer-b.example.org
        wikideck_ingress_enabled: true
        wikideck_ingress_host: wikideck.example.com
        wikideck_public_origin: https://wikideck.example.com
        wikideck_ingress_class_name: nginx
        wikideck_ingress_annotations:
          cert-manager.io/cluster-issuer: letsencrypt-prod
          nginx.ingress.kubernetes.io/ssl-redirect: "true"
        wikideck_network_policy_ingress_from:
          - namespaceSelector:
              matchLabels:
                kubernetes.io/metadata.name: ingress-nginx