---

# note - this needs to be run on the jenkins vpn ip

- name: Matt-Cloud Jenkins VPN Client
  hosts: all
  become: yes
  
  vars:
    terse_packages: true
    

  roles:
#    - { role: cosmos_init, tags: ['cosmos_init'], vars: {"terse_packages": "true"}, when: not refresh_only | bool }
    - { role: jenkins_vpn, tags: ['jenkins_vpn'] }

...