diff --git a/deploy b/deploy
deleted file mode 100755
index 0cce26c..0000000
--- a/deploy
+++ /dev/null
@@ -1,7 +0,0 @@
-#!/bin/sh
-
-ansible-playbook \
-    --inventory hosts.yml \
-    --vault-password-file get_password.sh \
-    "$@" \
-    deploy.yml
diff --git a/flake.nix b/flake.nix
index 852925b..1efb06e 100644
--- a/flake.nix
+++ b/flake.nix
@@ -9,10 +9,11 @@
       in {
         devShell = pkgs.mkShell {
           nativeBuildInputs = [
-            pkgs.bashInteractive
             pkgs.ansible
-            pkgs.ansible-lint
             pkgs.ansible-doctor
+            pkgs.ansible-lint
+            pkgs.bashInteractive
+            pkgs.just
           ];
           buildInputs = [ ];
         };
diff --git a/justfile b/justfile
new file mode 100644
index 0000000..4111ba5
--- /dev/null
+++ b/justfile
@@ -0,0 +1,9 @@
+#!/usr/bin/env -S just --justfile
+
+deploy HOST *ARGS:
+    ansible-playbook \
+        --inventory hosts.yml \
+        --vault-password-file get_password.sh \
+        --limit {{HOST}} \
+        {{ARGS}} \
+        deploy.yml