plugin: ansible.builtin.constructed strict: true groups: vpn: >- group_names | intersect(['embassy']) | length == 1 or group_names | intersect(['moirai']) | length == 1 vpn_server: group_names | intersect(['embassy']) | length == 1 vpn_client: group_names | intersect(['moirai']) | length == 1