- hosts: "!disabled" roles: - users - base-repos # Run base-server seperately so that the update apt cache handler in base-repos # fires before we run base-server - hosts: "!disabled" roles: - base-server - hosts: "puppet:!disabled" roles: - disable-puppet-agent - hosts: "!ci-backup:!disabled" roles: - exim