- hosts: all
  become: true
  vars_files:
    - ../inventory/group_vars/all.yaml
    - ../inventory/group_vars/secrets.sops.yaml
  roles:
    - role: base
    - role: sops_agent
    # - role: wireguard   # enable if you configure WireGuard variables