---
- name: restart docker with tls
  ansible.builtin.systemd:
    name: docker
    state: restarted
    daemon_reload: true

# Phase 4.1 — these restart the whole per-host compose wrapper unit (no per-container systemd
# units exist in this project's convention, see the `platform`/`lab-host` roles), which is
# heavier than a surgical single-container restart but consistent with how every other
# config-changed-so-restart-the-stack case is already handled here.
- name: restart lab-router
  ansible.builtin.systemd:
    name: rootnode-lab-host.service
    state: restarted
  when: inventory_hostname in groups['lab_host']

- name: restart gateway
  ansible.builtin.systemd:
    name: rootnode-platform.service
    state: restarted
  when: inventory_hostname in groups['platform']