---
# Put a common configuration on all servers
- hosts: all,!unifi
  roles:
    - baseconfig
    - basesecurity

# Plug LDAP on all servers
- hosts: all,!unifi
  roles:
    - ldap-client

# Clone LDAP on local geographic location
# DON'T DO THIS AS IT RECREATES THE REPLICA
# - hosts: ldap-replica
#   roles:
#     - ldap-replica