- hosts: "afs-db-server:!disabled"
  name: "AFS: configure db servers"
  strategy: free
  roles:
    - openafs-db-server

- hosts: "afs-file-server:!disabled"
  name: "Configure AFS file server"
  roles:
    - openafs-file-server

- hosts: "mirror-update:!disabled"
  name: "Create key for remote vos release"
  tasks:
    # Note done as root because all the update scripts run as root
    - name: Create vos release keypair
      openssh_keypair:
        path: /root/.ssh/id_vos_release
        type: ed25519
      register: vos_release_keypair

# Note: relies on vos_release_keypair installed to mirror above
- hosts: "afs-file-server:!disabled"
  name: "Allow remote vos_release"
  roles:
    - vos-release