---
- name: Upgrade Arch systems
  hosts: firewall
  roles:
    - arch_update
    - dotfiles

- name: Process any reboots
  hosts: "firewall, !control"
  roles:
    - reboot