- name: Deploy common services
  hosts: all
  roles:
    - common
    - pydis-mtls

- name: Deploy services to Netcup nodes
  hosts: netcup
  roles:
    - pydis-users
    - certbot
    - alloy
    - nftables
    - prometheus-node-exporter
    - wireguard
    - fail2ban
    - podman
    - unattended-upgrades

- name: Deploy mailservers
  hosts: mail
  roles:
    - opendkim
    - opendmarc
    - postfix

- name: Deploy our monitoring stack
  hosts: monitoring
  roles:
    - prometheus
    - prometheus-blackbox-exporter

- name: Deploy nginx to hosts
  hosts: nginx
  roles:
    - nginx
    - nginx-geoip
    - nginx-cloudflare-mtls

- name: Deploy our PostgreSQL database hosts
  hosts: databases
  roles:
    - postgres
    - prometheus-postgres-exporter

- name: Deploy our LDAP server environment to the LDAP host
  hosts: ldap
  roles:
    - ldap