- hosts: all:!jail vars: ansible_become: True roles: - sudo - users - package_manager - zrepl - zsh - network - sshd - base - firewall - cpu - ntp - build - graphics - gpg - fonts - alacritty - sway - emacs - firefox - devfs - ssh_client - sshfs - jail - fuse - autofs - exfat - bhyve - media - kubernetes - google_cloud_sdk - ansible - wireguard - hosts: nat_dhcp:homeserver_nat_dhcp vars: ansible_become: True roles: - jail_nat_dhcp