formalize the ansible roles