- hosts: all
  roles:
    - base
    - role: geerlingguy.ntp
      become: true
      vars:
        ntp_timezone: Europe/London
        ntp_manage_config: true
    - role: realorangeone.reflector
      when: ansible_os_family == 'Archlinux'

- hosts: casey
  roles:
    - gateway
    - nebula

- hosts:
    - walker
    - grimes
    - pve-docker
  roles:
    - role: geerlingguy.docker
      become: true
      vars:
        docker_install_compose: false  # This role installs the binary directly, which is kinda nasty
        docker_package: "{{ 'docker-ce' if ansible_os_family == 'Debian' else 'docker' }}"
        docker_users:
          - "{{ user }}"
    - docker_cleanup
    - traefik

# ZFS Hosts
- hosts:
    - walker
    - pve
  roles:
    - zfs

- hosts:
    - grimes
  roles:
    - plausible
    - duplicati
    - pages
    - upload

- hosts: pve-docker
  roles:
    - pve_docker
    - grafana
    - gitlab
    - gitea
    - duplicati
    - yourls

- hosts: walker
  roles:
    - contessa
    - duplicati
    - gitlab_pages
    - deluge

- hosts: ingress
  roles:
    - ingress

- hosts: pve
  roles:
    - role: proxmox-nag-removal
      become: true
    - pve