- hosts: localhost
  roles:
    - { role: proxmox, tags: proxmox }

- hosts: managed
  gather_facts: false
  roles:
    - { role: users, tags: users }
    - { role: basics, tags: basics }

- hosts: dns
  roles:
    - { role: dns, tags: dns }

- hosts: docker
  roles:
    - { role: docker, tags: docker }

- hosts: grafana
  roles:
    - { role: grafana, tags: [ never, grafana ] }

- hosts: mail
  roles:
    - { role: mail, tags: [ never, mail ] }

- hosts: backup
  roles:
    - { role: backup, tags: backup }

- hosts: acme
  roles:
    - role: certbot-dns
      tags: acme
  vars:
    cert:
      name: "{{ acme_domain|default(inventory_hostname) }}"
      alias: "{{ acme_alias|default(cname|default([])) }}"
      renewal_hook: "{{ renewal_hook }}"