---
- hosts: all
  become: true
  roles:
    - common
    - util
    - sudo
    - hostsfile
    - { role:  vm_guest, when: "ansible_virtualization_type is defined" }
    - grub
    - certs
    - rsyslog
    - users
    - network
    - dns
    - firewall
    - openssh
    - wireguard
    - chrony
    - unattended-upgrades
    - postfix
    - aide
    - telegraf
    - restic
    - node_exporter
    - blackbox_exporter
    - mtail
    - supervisor
- hosts: minecraft_servers
  become: true
  roles:
    - minecraft
- hosts: jump_servers
  become: true
  roles:
    - go
    - dl
- hosts: git_servers
  become: true
  roles:
    - nginx
    - certbot
    - gitea
- hosts: stats_servers
  become: true
  roles:
    - nginx
    - certbot
    - influxdb
    - grafana
- hosts: monitor_servers
  become: true
  roles:
    - nginx
    - role: prometheus
      tags:
        - prometheus
        - monitoring
    - alertmanager
    - blackbox_exporter
    - pushgateway
    - role: karma
      tags:
        - monitoring
    - role: kthxbye
      tags:
        - monitoring
    - role: thanos
      tags:
        - thanos
        - monitoring
- hosts: name_servers
  become: true
  roles:
    - nsd

# vim:ft=yaml.ansible: