- hosts: "static:!disabled"
  name: "Static webserver"
  roles:
    - role: iptables
    - role: kerberos-client
      kerberos_realm: 'OPENSTACK.ORG'
      kerberos_admin_server: 'kdc.openstack.org'
      kerberos_kdcs:
        - kdc03.openstack.org
        - kdc04.openstack.org
    - role: openafs-client
      openafs_client_cache_size: "{{ afs_client_cache_size | default(50000000) }}" # 50GiB
      openafs_client_cache_directory: '/opt/cache/openafs'
    - role: apache-ua-filter
    - role: static