- hosts: all
  roles:
    - role: wireguard
      tags: role_wireguard

- hosts: servers
  roles:
    - role: sshd
      tags: role_sshd
    - role: prometheus
      tags: role_prometheus

- hosts: dc0
  roles:
    - role: pf
      tags: role_pf
    - role: relayd
      tags: role_relayd
    - role: acme
      tags: role_acme

- hosts: stack0
  roles:
    - role: nfsd
      tags: role_nfsd

- hosts: stack0-*
  roles:
    - role: nfsclient
      tags: role_nfsclient

- hosts: stack0-dc1
  roles:
    - role: grafana
      tags: role_grafana

- hosts: stack0-dev0,stack0-dc1
  roles:
    - role: cgit
      tags: role_cgit

- hosts: servers
  roles:
    - role: httpd
      tags: role_httpd

- hosts: stack0
  roles:
    - role: vmm
      tags: role_vmm