---
# AD realm + user/group sync. Kept separate from site.yml because it writes
# cluster-wide config (/etc/pve/domains.cfg) and needs the bind password.
#
#   ansible-playbook auth.yml -e @../../samba-ad/ansible/group_vars/all/vault.yml
- name: Proxmox AD authentication realm
  hosts: pve
  gather_facts: false
  roles:
    - pve_auth