- hosts: all
  become: true
  roles:
    - firewall

- hosts: SiteA,SiteB
  become: true
  roles:
    - nginx_site

- hosts: proxy
  become: true
  roles:
    - ssl_certificate
    - nginx_proxy