- hosts: restic
  roles:
  - role: trustca
    ca: dch-root-ca-r2
    tags:
    - trustca
    - dch-root-ca
  - role: restic
    tags:
    - restic