Also, only those hosts that use ansible-pull should pull the repo to /etc/ansible

playbooks/desktop.yml

@@ -13,6 +13,12 @@
   roles:
     - role: ansible-pull
       tags: [ ansible, desktop ]
+    - role: git
+      vars:
+        git_repos:
+          - repo: "{{ ansible_pull_repo }}"
+            dest: /etc/ansible
+      tags: [ ansible, git, desktop ]
     - role: backup
       vars:
         backup_s3backup_tar_args_extra: h

site.yml

@@ -22,12 +22,6 @@
           UsePAM: yes
           X11Forwarding: no
       tags: [ sshd, common ]
-    - role: git
-      vars:
-        git_repos:
-          - repo: "{{ ansible_pull_repo }}"
-            dest: /etc/ansible
-      tags: [ ansible, git, common ]
   # Import specific playbooks
 - import_playbook: playbooks/db.yml
 - import_playbook: playbooks/web.yml