- hosts: workers
  remote_user: root
  become: yes
  roles:
    - sane_debian_system
    - comfortable
    - unix_users
    - ick-worker
  vars:
    verify_tls: yes

- hosts: ick
  remote_user: root
  become: yes
  roles:
    - sane_debian_system
    - comfortable
    - letsencrypt
    - haproxy
    - qvisqve
    - ick-controller
    - ick-artifact-store
    - apt_repository
    - ick-notifier
  vars:
    hostname: ick

    verify_tls: no
    letsencrypt: no