diff --git a/README.md b/README.md
index 5420466..9d2e35f 100644
--- a/README.md
+++ b/README.md
@@ -12,8 +12,8 @@ My current setup is [Regolith OS](https://regolith-desktop.com/) which is basica
 
 - Telegram (maybe only possible to download)
 - thunderbird config
-- some kind of tag setup with: bootstrap, update, etc.
 - i3 app shortcuts
+- firefox config? extensions? host own synchronizer?
 
 Would like Ansible Vault to check in keypair for syncthing.
 However, then I would need a password to unlock the vault.
diff --git a/roles/asdf/tasks/main.yml b/roles/asdf/tasks/main.yml
index 82b8456..af13150 100644
--- a/roles/asdf/tasks/main.yml
+++ b/roles/asdf/tasks/main.yml
@@ -2,7 +2,8 @@
   git:
     repo: https://github.com/asdf-vm/asdf.git
     dest: ~/.asdf
-- name: Install Erlang prerequisite APT packages
+  tags: update
+- name: Install prerequisite APT packages
   become: true
   apt:
     pkg:
@@ -22,14 +23,11 @@
       - libxml2-utils
       - libncurses-dev
       - openjdk-11-jdk
+      - unzip
 - name: Install asdf Erlang plugin
   shell:
     cmd: "~/.asdf/bin/asdf plugin add erlang https://github.com/asdf-vm/asdf-erlang.git"
     creates: ~/.asdf/plugins/erlang
-- name: Install Elixir prerequisite APT packages
-  become: true
-  apt:
-    name: unzip
 - name: Install asdf Elixir plugin
   shell:
     cmd: "~/.asdf/bin/asdf plugin-add elixir https://github.com/asdf-vm/asdf-elixir.git"
diff --git a/roles/common/tasks/main.yml b/roles/common/tasks/main.yml
index 089b0de..854efbc 100644
--- a/roles/common/tasks/main.yml
+++ b/roles/common/tasks/main.yml
@@ -6,3 +6,4 @@
     state: latest
     update_cache: yes
     cache_valid_time: 86400 # One day
+  tags: update
diff --git a/roles/signal/tasks/main.yml b/roles/signal/tasks/main.yml
index 3cb3823..c4a63fa 100644
--- a/roles/signal/tasks/main.yml
+++ b/roles/signal/tasks/main.yml
@@ -3,16 +3,19 @@
   get_url:
     url: https://updates.signal.org/desktop/apt/keys.asc
     dest: /etc/apt/trusted.gpg.d/signal.asc
+  tags: update
 - name: Install Signal APT repository
   become: true
   apt_repository:
     repo: "deb [arch=amd64 signed-by=/etc/apt/trusted.gpg.d/signal.asc] https://updates.signal.org/desktop/apt xenial main"
   register: apt_repository
+  tags: update
 - name: Update APT cache
   become: true
   apt:
     update_cache: true
   when: apt_repository.changed
+  tags: update
 - name: Install Signal
   become: true
   apt:
diff --git a/roles/system/files/ssh_config b/roles/system/files/ssh_config
new file mode 100644
index 0000000..24ccf45
--- /dev/null
+++ b/roles/system/files/ssh_config
@@ -0,0 +1,21 @@
+Host brussels
+        HostName brussels.studlab.os3.nl
+        User pkunis
+
+Host github.com
+        HostName github.com
+        User pizzapim
+        IdentitiesOnly yes
+
+Host max
+        HostName max.lan
+        User root
+
+Host lewis
+        HostName lewis.lan
+        User root
+
+Host forgejo
+        HostName git.pim.kunis.nl
+        Port 56287
+        User git
diff --git a/roles/system/tasks/main.yml b/roles/system/tasks/main.yml
index 2e11fbb..f3a846d 100644
--- a/roles/system/tasks/main.yml
+++ b/roles/system/tasks/main.yml
@@ -47,3 +47,13 @@
   apt:
     update_cache: true
   when: apt_repository.changed
+- name: Create ssh config directory
+  file:
+    path: ~/.ssh
+    state: directory
+    mode: 0700
+- name: Copy ssh config
+  copy:
+    src: "{{ role_path }}/files/ssh_config"
+    dest: ~/.ssh/config
+    mode: 0600
diff --git a/roles/virtualbox/tasks/main.yml b/roles/virtualbox/tasks/main.yml
index dff3fa3..b49c81b 100644
--- a/roles/virtualbox/tasks/main.yml
+++ b/roles/virtualbox/tasks/main.yml
@@ -3,16 +3,19 @@
   get_url:
     url: https://www.virtualbox.org/download/oracle_vbox_2016.asc
     dest: /etc/apt/trusted.gpg.d/oracle_vbox_2016.asc
+  tags: update
 - name: Install VirtualBox APT repository
   become: true
   apt_repository:
     repo: "deb [arch=amd64 signed-by=/etc/apt/trusted.gpg.d/oracle_vbox_2016.asc] https://download.virtualbox.org/virtualbox/debian {{ ansible_distribution_release }} contrib"
   register: apt_repository
+  tags: update
 - name: Update APT cache
   become: true
   apt:
     update_cache: true
   when: apt_repository.changed
+  tags: update
 - name: Install VirtualBox
   become: true
   apt:
diff --git a/roles/vscodium/tasks/main.yml b/roles/vscodium/tasks/main.yml
index 374ccce..3926261 100644
--- a/roles/vscodium/tasks/main.yml
+++ b/roles/vscodium/tasks/main.yml
@@ -3,16 +3,19 @@
   get_url:
     url: https://gitlab.com/paulcarroty/vscodium-deb-rpm-repo/raw/master/pub.gpg
     dest: /etc/apt/trusted.gpg.d/vscodium-archive-keyring.asc
+  tags: update
 - name: Install VSCodium APT repository
   become: true
   apt_repository:
     repo: "deb [signed-by=/etc/apt/trusted.gpg.d/vscodium-archive-keyring.asc ] https://download.vscodium.com/debs vscodium main"
   register: apt_repository
+  tags: update
 - name: Update APT cache
   become: true
   apt:
     update_cache: true
   when: apt_repository.changed
+  tags: update
 - name: Install VSCodium
   become: true
   apt: