- hosts: "!disabled"
  roles:
    - users
    - base-repos

# Run base-server seperately so that the update apt cache handler in base-repos
# fires before we run base-server
- hosts: "!disabled"
  roles:
    - base-server
    - timezone
    - unbound

- hosts: nodepool-launcher:nodepool-builder:bridge.openstack.org:!disabled
  strategy: free
  roles:
    - configure-openstacksdk

- hosts: "puppet:!disabled"
  roles:
    - puppet-install
    - disable-puppet-agent

- hosts: "!ci-backup:!disabled"
  roles:
    - exim
    - iptables
    - snmpd