compose restart reuses the existing container config; up -d recreates from compose.yml, picking up changes like renamed CLI flags.
Parallel execution across hosts, handler-based restart on change, role-aware paths via group_vars. Connects over WireGuard with dedicated inventory and SSH key.