---
  - hosts: all
    roles:
      - { role: mgrote.ntp_chrony_client,
          tags: "ntp",
          when: "not 'ntpserver' in group_names" }
      - { role: mgrote.restic, tags: "restic" }
      - { role: ryandaniels.create_users, tags: "user", become: yes }