#!/usr/bin/env ansible-playbook --- - hosts: routeurs_vm !routeur-gulp.cachan-adm.crans.org roles: - logall - hosts: routeur-gulp.cachan-adm.crans.org roles: - logall-cachan - hosts: firewall vars: service: "{{ glob_service_firewall | default({}) | combine(loc_service_firewall | default({})) }}" roles: - sysctl-forwarding - nftables - service