Clean up hosts, roles

flock.yml

@@ -1,24 +1,29 @@
 ---
-- hosts: all
+- hosts: all:!technitium.local
   roles:
-    - role: setup_base_system
     - role: lifeofguenter.resolvconf
       vars:
         resolv_nameservers:
           - 10.0.1.111
-    - role: hifis.toolkit.unattended_upgrades
-      become: true
-    - role: hussainweb.chezmoi
-      vars:
-        chezmoi_init_url: https://git.fern.garden/fern/dots
 
-- hosts: all
+- hosts: technitium.local
   roles:
-    - role: install_standard_packages
+    - role: lifeofguenter.resolvconf
+      vars:
+        resolv_nameservers:
+          - 10.0.1.1
 
 - hosts: all
   roles:
     - role: setup_user
+    - role: setup_sshd
+    - role: setup_base_system
+    - role: hifis.toolkit.unattended_upgrades
+      become: true
+    - role: install_standard_packages
+    - role: hussainweb.chezmoi
+      vars:
+        chezmoi_init_url: https://git.fern.garden/fern/dots
 
 - hosts: virtual_machines
   roles:
@@ -31,54 +36,15 @@
       vars:
         docker_users:
           - fern
-
-- hosts: nfs_servers
-  roles:
-    - role: setup_nfs_server
-    - role: geerlingguy.nfs
-      vars:
-        nfs_exports: [
-          "/export/film 10.0.1.0/24(rw,subtree_check,insecure,all_squash,anonuid=1000,anongid=1800)",
-          "/export/tv 10.0.1.0/24(rw,subtree_check,insecure,all_squash,anonuid=1000,anongid=1800)",
-          "/export/misc 10.0.1.0/24(rw,subtree_check,insecure,all_squash,anonuid=1000,anongid=1800)",
-        ]
-
-- hosts: nfs_clients
-  roles:
-    - role: setup_nfs_client
-
-- hosts: jellyfin.local
-  roles:
-    - role: tomhesse.jellyfin
-  tasks:
-    - name: Ensure Jellyfin user is a member of the media group
-      become: yes
-      tags:
-        - media_group
-      ansible.builtin.user:
-        name: jellyfin
-        groups: media
-        append: yes
+        docker_daemon_options:
+          metrics-addr: 0.0.0.0:9323
+          live-restore: true
+          default-address-pools:
+          - base: 172.20.0.0/16
+            size: 24
+          - base: 172.21.0.0/16
+            size: 24
 
 - hosts: weebill.local
-  tasks:
-    - name: Install Webone dependencies
-      ansible.builtin.apt:
-        deb: https://packages.microsoft.com/config/debian/12/packages-microsoft-prod.deb
-    - name: Install Webone
-      ansible.builtin.apt:
-        update_cache: yes
-        deb: https://github.com/atauenis/webone/releases/download/v0.17.4/webone.0.17.4.linux-arm64.deb
-
-- hosts: stash.local
-  tasks:
-    - name: Add user to render group
-      become: yes
-      ansible.builtin.user:
-        name: fern
-        groups: render
-        append: yes
-
-- hosts: all
   roles:
-    - role: setup_sshd
+    - role: install_software_webone