---

- hosts: all
  roles:
    - role: wireguard

- hosts: servers
  roles:
    - role: sshd

- hosts: servers:!dc0
  roles:
    - role: prometheus
    - role: loki

- hosts: dc0
  roles:
    - role: pf
    - role: relayd
    - role: acme
    - role: cgit
    - role: znc
    # internal git user and directory - different than the public one for cgit
    - role: git
      git_dir: /data/git-internal
      git_user: git-internal

- hosts: stack0
  roles:
    - role: nfsd

- hosts: stack0-*
  roles:
    - role: nfsclient

- hosts: stack0-dc1
  roles:
    - role: grafana

- hosts: stack0-dev0,stack0-dc1
  roles:
    - role: cgit

- hosts: stack0-cld0
  roles:
    - role: miniflux

- hosts: servers
  roles:
    - role: httpd

- hosts: stack0
  roles:
    - role: vmm