---
- hosts: all
  strategy: free
  roles:
    - { role : monitoring-client, tags : [ "monitoring", "monitoring-client", "client"] }
    - { role : sshd-config,       tags : [ "sshd" ] }
    - { role : rsyslog, 	      tags : [ "rsyslog" ] }
    - { role : monitoring-influx, tags : [ "influx" ] }
    - { role : base,              tags : [ "base" ] }
    - { role : zabbix-agent,      tags : [ "zabbix-agent" ] }
    - { role : iptables,          tags : [ "iptables" ] }

- hosts: opensearch
  strategy: free
  roles: 
    - { role : opensearch,        tags : [ "opensearch" ] }

- hosts: signal
  strategy: free
  roles:
    - { role : signal, tags : [ "signal" ] }

- hosts: all
  strategy: free
  roles:
    - { role : filebeat, tags : [ "filebeat" ] }

- hosts: mail
  strategy: free
  roles:
    - { role : mail, tags : [ "mail" ] }

- hosts: backup
  strategy: free
  roles:
    - { role : backup-vm, tags : [ "backup" ] }

- hosts: kube1
  strategy: free
  roles:
    - { role : docker-deployments, tags : [ "docker", "kube1" ] }

- hosts: usermanagement
  strategy: free
  roles:
    - { role : usermanagement, tags : [ "users", "keycloak" ] }

- hosts: monitoring
  strategy: free
  roles:
    - { role : monitoring-master, tags : [ "monitoring-master", "icinga", "grafana" ] }

- hosts: paperless
  strategy: free
  roles:
    - { role : paperless, tags : [ "paperless" ] }

- hosts: vpn
  strategy: free
  roles:
    - { role : openvpn, tags : [ "openvpn", "vpn", "certificate-manager" ] }

- hosts: timetracking
  strategy: free
  roles:
    - { role : timetracking, tags : [ "timetracking", "kamai" ] }

- hosts: harbor-registry
  strategy: free
  roles:
    - { role : harbor-registry, tags : [ "harbor" ] }

- hosts: nextcloud ths
  strategy: free
  roles:
    - { role: nextcloud, tags: ["nextcloud"] }

#- hosts: kube2
#  strategy: free
#  roles:
#    - { role: kubernetes-base, tags: ["kubernetes"] }