# Use include_role instead of roles: so that we can late-bind the roles list
- include_role:
    name: iptables
- include_role:
    name: install-ansible-roles
- include_role:
    name: puppet-install
- include_role:
    name: disable-puppet-agent

- name: Run puppet module install
  delegate_to: localhost
  run_once: true
  command:
    cmd: bash install_modules.sh
    chdir: /etc/puppet

- include_role:
    name: puppet