---
  - hosts: dnsmasq
    roles:
      - { role: mgrote.dnsmasq_adblocker, tags: "dns", become: true }