add tags to roles in playbooks; scope vaults

ansible/playbooks/nbgw.yml

@@ -1,13 +1,15 @@
 ---
 - hosts: nbgw
+  roles:
+    - role: common
       vars_files:
         - ../group_vars/all/vault_common.yml
-    - ../host_vars/nbgw.yml
-  roles:
-    - common
+      tags: [common]
     - netbird
     - role: pkg
       vars:
         pkgs_to_install: "{{ nbgw.pkgs.install }}"
-    - headscale
+      tags: [pkg]
+    - role: headscale
+      tags: [headscale]
 ...

ansible/playbooks/nebula.yml

@@ -6,5 +6,7 @@
     - role: user
       vars:
         user: "{{ users.testpcmt }}"
-    - gitea
+      tags: [user]
+    - role: gitea
+      tags: [gitea]
 ...

ansible/playbooks/surtur.yml

@@ -3,12 +3,17 @@
   # connection: local
   vars_files:
     - nothingatall
-    - ../group_vars/all/vault_common.yml
     - ../group_vars/surtur/vault_surtur.yml
   roles:
-    - common
+    - role: common
+      tags: [common]
+      vars_files:
+        - ../group_vars/all/vault_common.yml
     # - rand
-    - configs
-    - flathub
+    - role: configs
+      tags: [configs]
+    - role: flathub
+      tags: [flathub]
     - role: tailscale
       become: true
+      tags: [tailscale]