- hosts: "!disabled" roles: - users - base-repos # Split into two plays so that the update apt cache handler fires # before we run base-server - hosts: "!disabled" roles: - base-server - role: exim aliases: root: "{{ ','.join(sysadmins|default([])) }}"