- hosts: "mirror-update:!disabled"
  name: "Configure mirror-update"
  roles:
    - role: iptables
    - role: kerberos-client
    - role: openafs-client
      openafs_client_cache_size: "{{ afs_client_cache_size | default(10000000) }}" # 10GiB
    - role: mirror-update