I ensure that my home lab has clients on my internal network, which are responsive and not exposed externally.

Variables are kept in the host_vars or group_vars folder usually. Defining everything in playbook is not recommended. This is just an example. - hosts: servers vars: roles: - role: dns dns_servers: - ...