- hosts: 'codesearch:!disabled'
  name: "codesearch: run puppet on codesearch"
  strategy: free
  roles:
    - iptables
    - sync-project-config
    - pip3
    - name: run-puppet
      manifest: /opt/system-config/production/manifests/codesearch.pp