and I think all the tasks in this file should definitely have the `--deploy` tag, so that a deploy can be run by specifying just this tag (though the entire role doesn't take much longer)