---
- name: All hosts
  hosts: all 
  remote_user: root
  roles:
    - ad
    - resolv_conf
    - ssh
    - ssh_keys
  vars:
    ssh_key_files:
      - { user: 'alice', file: '../../../company/pubkeys/alice.pubkeys' }

- name: Webservers
  hosts: webservers
  remote_user: root
  roles:
    - fail2ban