- name: setup public dashboards server
  hosts: dashboards.archlinux.org
  remote_user: root
  roles:
    - { role: firewalld }
    - { role: wireguard }
    - { role: common }
    - { role: sshd }
    - { role: root_ssh }
    - { role: hardening }
    - { role: borg_client, tags: ["borg"], when: "'borg_clients' in group_names" }
    - { role: prometheus, prometheus_receive_only: true }
    - { role: prometheus_exporters }
    - { role: promtail }
    - { role: certbot }
    - { role: nginx }
    - { role: grafana, grafana_anonymous_access: true, grafana_domain: 'dashboards.archlinux.org' }
    - { role: fail2ban }
