update.sh in roles should update all, if not, hopefully logical. Example run: ansible-playbook site.yml -u zadam.horsewood -k