diff --git a/.gitignore b/.gitignore
index 75839df..85cd2b2 100644
--- a/.gitignore
+++ b/.gitignore
@@ -16,3 +16,5 @@
 /collections/ansible_collections/
 .vagrant/
 bao
+
+playbooks/secrets/backend/homarr_secret_encryption_key
diff --git a/inventories/vagrant/hosts.yml b/inventories/vagrant/hosts.yml
index 65bfcc6..3aef682 100644
--- a/inventories/vagrant/hosts.yml
+++ b/inventories/vagrant/hosts.yml
@@ -45,6 +45,10 @@ all:
         backend:
         backend2:
 
+    ds389_servers:
+      hosts:
+        backend:
+
     keycloak_servers:
       hosts:
         backend:
@@ -53,6 +57,10 @@ all:
       hosts:
         backend:
 
+    authentik_outpost_ldap_servers:
+      hosts:
+        backend:
+
     garage_servers:
       hosts:
         backend:
@@ -73,6 +81,10 @@ all:
       hosts:
         backend:
 
+    opencloud_servers:
+      hosts:
+        backend:
+
     opnform_servers:
       hosts:
         backend:
\ No newline at end of file
diff --git a/playbooks/site.yml b/playbooks/site.yml
index d9532f4..fee8445 100644
--- a/playbooks/site.yml
+++ b/playbooks/site.yml
@@ -11,12 +11,24 @@
   roles:
     - digitalboard.core.traefik
 
+- name: Configure reverse proxy on DMZ servers
+  hosts: traefik_servers_dmz
+  become: yes
+  roles:
+    - digitalboard.core.traefik
+
 - name: Deploy httpbin service
   hosts: httpbin_servers
   become: yes
   roles:
     - digitalboard.core.httpbin
 
+- name: Deploy 389ds LDAP service
+  hosts: ds389_servers
+  become: yes
+  roles:
+    - digitalboard.core.389ds
+
 - name: Deploy keycloak service
   hosts: keycloak_servers
   become: yes
@@ -35,26 +47,38 @@
   roles:
     - digitalboard.core.collabora
 
-- name: Deploy nextcloud service
-  hosts: nextcloud_servers
-  become: yes
-  roles:
-    - digitalboard.core.nextcloud
-
 - name: Deploy authentik service
   hosts: authentik_servers
   become: yes
   roles:
     - digitalboard.core.authentik
 
+- name: Deploy authentik LDAP outpost
+  hosts: authentik_outpost_ldap_servers
+  become: yes
+  roles:
+    - digitalboard.core.authentik_outpost_ldap
+
+- name: Deploy nextcloud service
+  hosts: nextcloud_servers
+  become: yes
+  roles:
+    - digitalboard.core.nextcloud
+
+- name: Deploy drawio service
+  hosts: drawio_servers
+  become: yes
+  roles:
+    - digitalboard.core.drawio
+
+- name: Deploy opencloud service
+  hosts: opencloud_servers
+  become: yes
+  roles:
+    - digitalboard.core.opencloud
+
 - name: Deploy homarr service
   hosts: homarr_servers
   become: yes
   roles:
     - digitalboard.core.homarr
-
-- name: Configure reverse proxy on DMZ servers
-  hosts: traefik_servers_dmz
-  become: yes
-  roles:
-    - digitalboard.core.traefik