From 9eb3e446affab589bcfba7f8bf18a73977bca1ce Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jakub=20=C5=BD=C3=A1=C4=8Dek?= <jakub@zacekj.cz>
Date: Tue, 26 May 2026 17:43:39 +0200
Subject: [PATCH] Wire FreeIPA enrolment into setup_linux

Reachable via --tags sssd; reuses the existing freeipa_client role
via relative path from the umbrella playbook.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 setup_linux.yml | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/setup_linux.yml b/setup_linux.yml
index ded2a0f..e5bd233 100644
--- a/setup_linux.yml
+++ b/setup_linux.yml
@@ -104,7 +104,19 @@
         name: "{{ inventory_hostname }}"
 
 # ==============================
-# FOURTH PLAY: BACKUP
+# FOURTH PLAY: FREEIPA / SSSD
+# ==============================
+
+- name: FreeIPA client setup
+  hosts: all
+  become: true
+  tags: never,sssd
+
+  roles:
+    - role: initial_install/roles/freeipa_client
+
+# ==============================
+# FIFTH PLAY: BACKUP
 # ==============================
 
 - import_playbook: backup.yml
\ No newline at end of file