- hosts: external
  roles:
    - sshd
    - ufw
    - role: docker
      when: server_hostname in ['mainframe']