- name: Deploy common services
  hosts: all
  roles:
    - common
    - ufw
    - prometheus-node-exporter
    - wireguard
    - fail2ban
    - podman

- name: Deploy our monitoring stack
  hosts: lovelace
  roles:
    - prometheus

- name: Deploy nginx & certbot to hosts
  hosts: nginx
  roles:
    - certbot
    - nginx
    - nginx-geoip
    - nginx-ufw
    - nginx-cloudflare-mtls

- name: Deploy our PostgreSQL database hosts
  hosts: lovelace
  roles:
    - postgres