diff --git a/.gitignore b/.gitignore
index 061b691..9dd7ed4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -14,4 +14,37 @@
 /.idea/
 # Ansible
 /collections/ansible_collections/
-.vagrant/
+/.vagrant/bundler/global.sol
+/.vagrant/machines/backend/libvirt/action_provision
+/.vagrant/machines/backend/libvirt/box_meta
+/.vagrant/machines/backend/libvirt/created_networks
+/.vagrant/machines/backend/libvirt/creator_uid
+/.vagrant/machines/backend/libvirt/id
+/.vagrant/machines/backend/libvirt/index_uuid
+/.vagrant/machines/backend/libvirt/private_key
+/.vagrant/machines/backend/libvirt/synced_folders
+/.vagrant/machines/backend/libvirt/vagrant_cwd
+/.vagrant/machines/backend2/libvirt/action_provision
+/.vagrant/machines/backend2/libvirt/box_meta
+/.vagrant/machines/backend2/libvirt/created_networks
+/.vagrant/machines/backend2/libvirt/creator_uid
+/.vagrant/machines/backend2/libvirt/id
+/.vagrant/machines/backend2/libvirt/index_uuid
+/.vagrant/machines/backend2/libvirt/private_key
+/.vagrant/machines/backend2/libvirt/synced_folders
+/.vagrant/machines/backend2/libvirt/vagrant_cwd
+/.vagrant/machines/dmz/libvirt/logs/ssh-forwarding-*_8080-192.168.121.139_80.log
+/.vagrant/machines/dmz/libvirt/logs/ssh-forwarding-*_8443-192.168.121.139_443.log
+/.vagrant/machines/dmz/libvirt/pids/ssh_8080.pid
+/.vagrant/machines/dmz/libvirt/pids/ssh_8443.pid
+/.vagrant/machines/dmz/libvirt/action_provision
+/.vagrant/machines/dmz/libvirt/box_meta
+/.vagrant/machines/dmz/libvirt/created_networks
+/.vagrant/machines/dmz/libvirt/creator_uid
+/.vagrant/machines/dmz/libvirt/id
+/.vagrant/machines/dmz/libvirt/index_uuid
+/.vagrant/machines/dmz/libvirt/private_key
+/.vagrant/machines/dmz/libvirt/synced_folders
+/.vagrant/machines/dmz/libvirt/vagrant_cwd
+/.vagrant/provisioners/ansible/inventory/vagrant_ansible_inventory
+/.vagrant/rgloader/loader.rb
diff --git a/playbooks/site.yml b/playbooks/site.yml
index 99773a1..ffbb9c4 100644
--- a/playbooks/site.yml
+++ b/playbooks/site.yml
@@ -5,8 +5,8 @@
   roles:
     - digitalboard.core.base
 
-- name: Configure reverse proxies
-  hosts: traefik_servers
+- name: Configure reverse proxy on application servers
+  hosts: traefik_servers_backend
   become: yes
   roles:
     - digitalboard.core.traefik
@@ -39,4 +39,10 @@
   hosts: authentik_servers
   become: yes
   roles:
-    - digitalboard.core.authentik
\ No newline at end of file
+    - digitalboard.core.authentik
+
+- name: Configure reverse proxy on DMZ servers
+  hosts: traefik_servers_dmz
+  become: yes
+  roles:
+    - digitalboard.core.traefik