---

- hosts: all
  roles:
    - role: wireguard
      tags:
        - role_wireguard
        - never

- hosts: servers
  roles:
    - role: sshd
      tags: role_sshd

- hosts: servers:!dc0
  roles:
    - role: prometheus
      tags: role_prometheus
    - role: loki
      tags: role_loki

- hosts: dc0
  roles:
    - role: pf
      tags: role_pf
    - role: relayd
      tags: role_relayd
    - role: acme
      tags: role_acme
    - role: cgit
      tags: role_cgit
    - role: znc
      tags: role_znc
    # internal git user and directory - different than the public one for cgit
    - role: git
      git_dir: /data/git-internal
      git_user: git-internal
      tags: role_git

- hosts: stack0
  roles:
    - role: nfsd
      tags: role_nfsd

- hosts: stack0-*
  roles:
    - role: nfsclient
      tags: role_nfsclient

- hosts: stack0-dc1
  roles:
    - role: grafana
      tags: role_grafana

- hosts: stack0-dev0,stack0-dc1
  roles:
    - role: cgit
      tags: role_cgit

- hosts: stack0-cld0
  roles:
    - role: miniflux
      tags: role_miniflux

- hosts: servers
  roles:
    - role: httpd
      tags: role_httpd

- hosts: stack0
  roles:
    - role: vmm
      tags:
        - role_vmm
        - never