Move "all" configuration into its own playbook

playbooks/all.yml

@@ -0,0 +1,37 @@
+#!/usr/bin/env ansible-playbook
+# vim:ft=ansible:
+---
+# Preambulatory system configuration
+- hosts: all
+  tasks:
+    - name: collect service facts
+      service_facts:
+      tags: [ always ]
+  roles:
+    - role: common
+      tags: [ common ]
+    - role: adminuser
+      tags: [ adminuser, common ]
+    - role: docker
+      tags: [ docker, common, skip-pull ]
+    - role: motd
+      vars:
+        motd_watch_services_extra:
+          - docker
+          - kubelet
+          - postgresql
+      tags: [ motd, common ]
+    - role: sshd
+      vars:
+        sshd:
+          AcceptEnv: "LANG LC_*"
+          ChallengeResponseAuthentication: no
+          Compression: yes
+          PasswordAuthentication: no
+          PermitRootLogin: no
+          PrintMotd: no
+          PubkeyAuthentication: yes
+          Subsystem: "sftp  /usr/lib/openssh/sftp-server"
+          UsePAM: yes
+          X11Forwarding: no
+      tags: [ sshd, common ]

site.yml

@@ -2,41 +2,7 @@
 # vim:ft=ansible:
 ---
   # Preambulatory system configuration
-- hosts: all
+- import_playbook: playbooks/all.yml
-  tasks:
-    - name: collect service facts
-      service_facts:
-      tags: [ always ]
-  roles:
-    - role: common
-      tags: [ common ]
-    - role: adminuser
-      tags: [ adminuser, common ]
-    - role: docker
-      tags: [ docker, common, skip-pull ]
-    - role: motd
-      vars:
-        motd_watch_services_extra:
-          - apache2
-          - docker
-          - kubelet
-          - php7.4-fpm
-          - postgresql
-      tags: [ motd, common ]
-    - role: sshd
-      vars:
-        sshd:
-          AcceptEnv: "LANG LC_*"
-          ChallengeResponseAuthentication: no
-          Compression: yes
-          PasswordAuthentication: no
-          PermitRootLogin: no
-          PrintMotd: no
-          PubkeyAuthentication: yes
-          Subsystem: "sftp  /usr/lib/openssh/sftp-server"
-          UsePAM: yes
-          X11Forwarding: no
-      tags: [ sshd, common ]
   # Manufacturer configuration
 - import_playbook: playbooks/manufacturers_raspi.yml
 - import_playbook: playbooks/manufacturers_s76.yml