- hosts: all:!jail:!vm:!server
  vars:
    ansible_become: True
  roles:
    - sudo
    - doas
    - users
    # - package_manager
    # - zfs
    # - zrepl
    # - zsh
    # - network
    # - sshd
    # - base
    # - firewall
    # - cpu
    # - ntp
    # - nvme
    # - hosts
    # - build
    # - sound
    # - graphics
    # - gpg
    # - fonts
    # - alacritty
    # - sway
    # - emacs
    # - firefox
    # - devfs
    # - ssh_client
    # - sshfs
    # - jail
    # - fuse
    # - autofs
    # - exfat
    # - bhyve
    # - bluetooth
    # - media
    # - kubernetes
    # - google_cloud_sdk
    # - ansible
    # - wireguard
    # - portshaker
    # - poudriere
    # - android
    # - latex
    # - pyenv
    # - webcam
    # - docker
    # - vscode
    - javascript

- hosts: nat_dhcp:homeserver_nat_dhcp:mrmanager_nat_dhcp
  vars:
    ansible_become: True
  roles:
    - jail_nat_dhcp

- hosts: poudriereodo:poudrieremrmanager
  vars:
    ansible_become: True
  roles:
    - sudo # for poudboot script
    - fstab
    - portshaker
    - poudriere
    - poudrierenginx

- hosts: mrmanager
  vars:
    ansible_become: True
  roles:
    - sudo
    - doas
    - users
    - package_manager
    - zfs
    - zrepl
    - zsh
    - network
    - sshd
    - base
    - firewall
    - cpu
    - ntp
    - nvme
    - hosts
    - build
    - devfs
    - jail
    - bhyve
    - wireguard
    - plainmacs
    - mrmanager

- hosts: admin_git:public_dns
  vars:
    ansible_become: True
  roles:
    - sudo
    - doas
    - users

- hosts: public_dns
  vars:
    ansible_become: True
  roles:
    - sudo
    - doas
    - users
    - public_dns