#!/usr/bin/env ansible-playbook
---
- hosts:
    - infra
    - isp
  roles:
    - firewall
...