Assumes: - ALl: - OS (Debian) has been installed and IPs have been configured in hosts.cfg - Host is already trusted via ssh and can be ssh'd into using keys - Passwordless sudo is enabled for the user ansible uses - Wireguard hosts: - Secure boot is disabled (wireguard is an unsigned module) - Wireguard is configured on 10.200.0.0/24; See https://wiki.debian.org/Wireguard - ZFS server: - ZFS is configured with a volume at /bigdata for sharing - Media server: - Create /media-vtluug folder - Remote: - joe/pew users have been created