diff --git a/deploy.yml b/deploy.yml
index 04af19e..415bc41 100644
--- a/deploy.yml
+++ b/deploy.yml
@@ -36,7 +36,6 @@
   become: true
   roles:
     - cryptoraid
-  tags: raid
 
 - name: mounts
   hosts:
@@ -98,7 +97,22 @@
       pikvm
   roles:
     - gopass
-  tags: gopass
+
+- name: setup DAGs
+  become: true
+  hosts:
+    - pikvm
+  roles:
+    - dags
+  tags: dags
+
+- name: set up pikvm's ssl certs
+  hosts:
+    - pikvm
+  become: true
+  hosts: pikvm
+  vars:
+    domain: monotremata.xyz
 
 - name: lbu commit
   hosts:
diff --git a/hosts.yml b/hosts.yml
index 3507e9c..cb70514 100644
--- a/hosts.yml
+++ b/hosts.yml
@@ -8,6 +8,8 @@ all:
       ansible_port: 22
       ansible_python_interpreter: /usr/bin/python3
       ansible_become_method: doas
+      dags:
+        - acme_rsync
 
     snitch:
       ansible_host: snitch