configure service hosts too, and move ansible-pull tasks to 'base'