- hosts: spine-*
roles:
- spine
- hosts: leaf-*
- leaf
- hosts: exit-*
- exit
- hosts: access-*, sw-*
gather_facts: false
- access
- hosts: fw-*
- firewall
- hosts: zid
- certbot_dns
- firewall_master