#!/usr/bin/env bash
set -e

PLAYBOOK="$1"

if [ -z "$PLAYBOOK" ]; then
  echo "Usage: run <provisioning|initialization|compliance>"
  exit 1
fi

ANSIBLE_DIR="/path/to/iac/ansible"
VENV="$HOME/ansible-modern"
SSH_KEY="$HOME/.ssh/auto"
VAULT_FILE="$ANSIBLE_DIR/.vault_pass.txt"

# Decide inventory based on playbook
case "$PLAYBOOK" in
  initialization)
    INVENTORY="$ANSIBLE_DIR/inventory_initialization.yml"
    ;;
  provisioning|compliance)
    INVENTORY="$ANSIBLE_DIR/inventory.yml"
    ;;
  *)
    echo "Unknown playbook: $PLAYBOOK"
    exit 1
    ;;
esac

cd "$ANSIBLE_DIR"

exec "$VENV/bin/ansible-playbook" \
  -i "$INVENTORY" \
  "playbooks/${PLAYBOOK}.yml" \
  --vault-password-file "$VAULT_FILE"