diff --git a/ec2.yml b/ec2.yml
index 1aca4a4..bb5da2c 100755
--- a/ec2.yml
+++ b/ec2.yml
@@ -20,15 +20,16 @@
     acme_directory: "https://acme-v02.api.letsencrypt.org/directory"
     #acme_directory: "https://acme-staging-v02.api.letsencrypt.org/directory"
     acme_version: 2
-    nextcloud_mysql_password: !vault |
+  roles:
+    - role: nextcloud
+      vars:
+        nextcloud_mysql_password: !vault |
           $ANSIBLE_VAULT;1.1;AES256
           37633035633563646266346264333636393931323664313166633133653461646333643731636661
           3966666665396239346662613764353333393038663762340a313236396331623061376462356437
           66373234633939393034353439393465663131303661393164303335336435653734613064663964
           3332313764623133630a393731613236373837316437653265636663666261383135636662373566
           61373135303632336237333836353764646639633735323566346366623766646266
-    nextcloud_tarbz2: "https://download.nextcloud.com/server/releases/nextcloud-18.0.0.tar.bz2"
-    nextcloud_url: "nc.assburgers.club"
-    nextcloud_webroot: "/var/www/nextcloud"
-  roles:
-    - nextcloud
+        nextcloud_tarbz2: "https://download.nextcloud.com/server/releases/nextcloud-18.0.0.tar.bz2"
+        nextcloud_url: "nc.assburgers.club"
+        nextcloud_webroot: "/var/www/nextcloud"