diff --git a/ansible/infra/01_user_and_access_setup_playbook.yml b/ansible/infra/01_user_and_access_setup_playbook.yml
index 13e5149..c6eed18 100644
--- a/ansible/infra/01_user_and_access_setup_playbook.yml
+++ b/ansible/infra/01_user_and_access_setup_playbook.yml
@@ -1,5 +1,5 @@
 - name: Secure Debian
-  hosts: all
+  hosts: managed
   vars_files:
     - ../infra_vars.yml
   become: true
diff --git a/ansible/infra/02_firewall_and_fail2ban_playbook.yml b/ansible/infra/02_firewall_and_fail2ban_playbook.yml
index e83cbcb..9f37c70 100644
--- a/ansible/infra/02_firewall_and_fail2ban_playbook.yml
+++ b/ansible/infra/02_firewall_and_fail2ban_playbook.yml
@@ -1,5 +1,5 @@
 - name: Secure Debian
-  hosts: all
+  hosts: managed
   vars_files:
     - ../infra_vars.yml
   become: true
diff --git a/ansible/infra/410_disk_usage_alerts.yml b/ansible/infra/410_disk_usage_alerts.yml
index de02f53..7905cf3 100644
--- a/ansible/infra/410_disk_usage_alerts.yml
+++ b/ansible/infra/410_disk_usage_alerts.yml
@@ -1,5 +1,5 @@
 - name: Deploy Disk Usage Monitoring
-  hosts: all
+  hosts: managed
   become: yes
   vars_files:
     - ../infra_vars.yml
diff --git a/ansible/infra/420_system_healthcheck.yml b/ansible/infra/420_system_healthcheck.yml
index 2580ff0..5a45ce1 100644
--- a/ansible/infra/420_system_healthcheck.yml
+++ b/ansible/infra/420_system_healthcheck.yml
@@ -1,5 +1,5 @@
 - name: Deploy System Healthcheck Monitoring
-  hosts: all
+  hosts: managed
   become: yes
   vars_files:
     - ../infra_vars.yml
diff --git a/ansible/infra/900_install_rsync.yml b/ansible/infra/900_install_rsync.yml
index c0b7318..6c6b10e 100644
--- a/ansible/infra/900_install_rsync.yml
+++ b/ansible/infra/900_install_rsync.yml
@@ -1,5 +1,5 @@
 - name: Install rsync
-  hosts: all
+  hosts: managed
   vars_files:
     - ../infra_vars.yml
   become: true
diff --git a/ansible/infra/910_docker_playbook.yml b/ansible/infra/910_docker_playbook.yml
index f137b6a..62b7147 100644
--- a/ansible/infra/910_docker_playbook.yml
+++ b/ansible/infra/910_docker_playbook.yml
@@ -1,5 +1,5 @@
 - name: Install Docker and Docker Compose on Debian 12
-  hosts: all
+  hosts: managed
 
   become: yes
   tasks:
diff --git a/ansible/infra/920_join_headscale_mesh.yml b/ansible/infra/920_join_headscale_mesh.yml
index 8d06d44..5b5e4ce 100644
--- a/ansible/infra/920_join_headscale_mesh.yml
+++ b/ansible/infra/920_join_headscale_mesh.yml
@@ -1,5 +1,5 @@
 - name: Join machine to headscale mesh network
-  hosts: all
+  hosts: managed
   become: yes
   vars_files:
     - ../infra_vars.yml
diff --git a/ansible/inventory.ini b/ansible/inventory.ini
index 3d6c209..a061637 100644
--- a/ansible/inventory.ini
+++ b/ansible/inventory.ini
@@ -23,3 +23,39 @@ localhost ansible_connection=local ansible_user=counterweight gpg_recipient=coun
 [arbret]
 prd-arbret ansible_host=167.99.242.62 ansible_user=counterweight ansible_port=22 ansible_ssh_private_key_file=~/.ssh/counterganzua
 
+[edge]
+vipy
+
+[monitoring]
+watchtower
+
+[vpn_control]
+spacey
+
+[hypervisor]
+nodito
+
+[bitcoin]
+knots_box_local
+
+[electrum]
+fulcrum_box_local
+
+[mempool]
+mempool_box_local
+
+[memos]
+memos_box_local
+
+[ci_runner]
+forgejo_runner_local
+
+[control]
+localhost
+
+# Every machine Ansible may configure as a server.
+# Deliberately EXCLUDES [control] (your laptop) and [arbret].
+[managed:children]
+vps
+nodito_host
+nodito_vms
\ No newline at end of file