- hosts: all:!jail
  vars:
    ansible_become: True
  roles:
    - sudo
    - users
    - package_manager
    - zrepl
    - zsh
    - network
    - sshd
    - base
    - firewall
    - cpu
    - ntp
    - build
    - graphics
    - gpg
    - fonts
    - alacritty
    - sway
    - emacs
    - firefox
    - devfs
    - ssh_client
    - sshfs
    - jail
    - fuse
    - autofs
    - exfat
    - bhyve
    - media
    - kubernetes
    - google_cloud_sdk

- hosts: nat_dhcp
  vars:
    ansible_become: True
  roles:
    - jail_nat_dhcp