---
- hosts: all
  roles:
    - { role : monitoring-client, tags : [ "monitoring", "monitoring-client", "client"] }
    - { role : sshd-config,       tags : [ "sshd" ] }
    - { role : rsyslog, 	      tags : [ "rsyslog" ] }
    - { role : monitoring-influx, tags : [ "influx" ] }
    - { role : base,              tags : [ "base" ] }
    - { role : zabbix-agent,      tags : [ "zabbix-agent" ] }
    - { role : iptables,          tags : [ "iptables" ] }

- hosts: web1
  roles:
    - { role : web1, tags : [ "web1" ] }
    - { role : media, tags : [ "media" ] }

- hosts: mail
  roles:
    - { role : mail, tags : [ "mail" ] }

- hosts: backup
  roles:
    - { role : backup-vm, tags : [ "backup" ] }

- hosts: kube1
  roles:
    - { role : docker-deployments, tags : [ "docker", "kube1" ] }

- hosts: usermanagement
  roles:
    - { role : usermanagement, tags : [ "users", "keycloak" ] }

- hosts: monitoring
  roles:
    - { role : monitoring-master, tags : [ "monitoring-master", "icinga", "grafana" ] }

- hosts: paperless
  roles:
    - { role : paperless, tags : [ "paperless" ] }

- hosts: vpn
  roles:
    - { role : openvpn, tags : [ "openvpn", "vpn", "certificate-manager" ] }

- hosts: timetracking
  roles:
    - { role : timetracking, tags : [ "timetracking", "kamai" ] }

- hosts: harbor-registry
  roles:
    - { role : harbor-registry, tags : [ "harbor" ] }

- hosts: nextcloud ths
  roles:
    - { role: nextcloud, tags: ["nextcloud"] }

- hosts: kube2
  roles:
    - { role: kubernetes-base, tags: ["kubernetes"] }