Ensure we deploy Gitea before anything else

Would be kind of embarassing if a later role got caught because it tried to access a git repo that didn't exist

ec2.yml

@@ -29,6 +29,29 @@
     acme_version: 2
     acme_webroot: "/var/www/acme"
   roles:
+    - role: gitea
+      vars: 
+        gitea_mysql_password: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          62353264353465316661353738666161313036373761666163663733656461316536636334386335
+          6161386630663739363439383237343065333239613134610a383036373735326536386464343164
+          31346337636665356630336234306534646362386663633734353166373761316139313734306630
+          3364306566323666310a323034303434613237643665643637633430353437316339356463646331
+          33353062343164396465326365653561626363343961326363633231303736316436643935646161
+          3933353234613430373930663832643934613233383635613433
+        gitea_app_name: "9iron Gitea"
+        gitea_root_directory: "/cold/gitea-repositories/"
+        gitea_url: "git.9iron.club"
+        gitea_webroot: "/var/www/gitea"
+        gitea_admin_username: "salt"
+        gitea_admin_email: "rehashedsalt@cock.li"
+        gitea_admin_password: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          35613039646236306236363930353231303331633765303039373736626666666530323433356466
+          3062633166313332643039613561303431613735396339650a376664373137643439303465376365
+          35313266376539366134343562626164616666306338343538663361393964626565303331383234
+          3565646664333966650a323530356664366262653763363439613534303764366436376634373639
+          62303264653836656162366362316461656363353539343632616462626231643632
     - role: redirect
       vars:
         redirect_from: "9iron.club"
@@ -56,29 +79,6 @@
         nextcloud_tarbz2: "https://download.nextcloud.com/server/releases/nextcloud-18.0.0.tar.bz2"
         nextcloud_url: "nc.9iron.club"
         nextcloud_webroot: "/var/www/nextcloud"
-    - role: gitea
-      vars: 
-        gitea_mysql_password: !vault |
-          $ANSIBLE_VAULT;1.1;AES256
-          62353264353465316661353738666161313036373761666163663733656461316536636334386335
-          6161386630663739363439383237343065333239613134610a383036373735326536386464343164
-          31346337636665356630336234306534646362386663633734353166373761316139313734306630
-          3364306566323666310a323034303434613237643665643637633430353437316339356463646331
-          33353062343164396465326365653561626363343961326363633231303736316436643935646161
-          3933353234613430373930663832643934613233383635613433
-        gitea_app_name: "9iron Gitea"
-        gitea_root_directory: "/cold/gitea-repositories/"
-        gitea_url: "git.9iron.club"
-        gitea_webroot: "/var/www/gitea"
-        gitea_admin_username: "salt"
-        gitea_admin_email: "rehashedsalt@cock.li"
-        gitea_admin_password: !vault |
-          $ANSIBLE_VAULT;1.1;AES256
-          35613039646236306236363930353231303331633765303039373736626666666530323433356466
-          3062633166313332643039613561303431613735396339650a376664373137643439303465376365
-          35313266376539366134343562626164616666306338343538663361393964626565303331383234
-          3565646664333966650a323530356664366262653763363439613534303764366436376634373639
-          62303264653836656162366362316461656363353539343632616462626231643632
 - hosts: tag_ansiblehost_true
   roles:
     - ansiblehost