machine_setup/ansible/playbook.yaml

- hosts: all:!jail
  vars:
    ansible_become: True
  roles:
    # - sudo
    - users
    # - package_manager
    # - zrepl
    # - zsh
    # - network
    # - sshd
    # - base
    - firewall
    # - cpu
    # - ntp
    # - hosts
    # - build
    # - sound
    # - graphics
    # - gpg
    # - fonts
    # - alacritty
    # - sway
    # - emacs
    # - firefox
    # - devfs
    # - ssh_client
    # - sshfs
    # - jail
    # - fuse
    # - autofs
    # - exfat
    - bhyve
    # - media
    # - kubernetes
    # - google_cloud_sdk
    # - ansible
    # - wireguard
    # - portshaker
    - poudriere

- hosts: nat_dhcp:homeserver_nat_dhcp
  vars:
    ansible_become: True
  roles:
    - jail_nat_dhcp