diff --git a/playbooks/zm.yml b/playbooks/zm.yml
index a12f103..12c108a 100644
--- a/playbooks/zm.yml
+++ b/playbooks/zm.yml
@@ -22,15 +22,36 @@
 
   roles:
     - base
-    - dhcpd
     - mod_auth_gssapi
     - role: kerberos/keytab
       keytab: /etc/httpd/httpd.keytab
       principals: HTTP/zm.foo.sh@FOO.SH
       group: apache
-    - zoneminder
 
   tasks:
+    - name: run handlers to get interfaces configured
+      meta: flush_handlers
+
+    - name: copy dns zone files
+      copy:
+        dest: "/var/lib/unbound/{{ item }}"
+        src: "/srv/dns/{{ item }}"
+        mode: 0644
+        owner: root
+        group: "{{ ansible_wheel }}"
+      notify: restart unbound
+      with_items:
+        - 26.20.172.in-addr.arpa
+        - cam.foo.sh
+    - import_role:
+        name: unbound
+
+    - include_role:
+        name: "{{ item }}"
+      with_items:
+        - dhcpd
+        - zoneminder
+
     - name: install extra packages for debugging
       package:
         name: rtmpdump
@@ -56,17 +77,3 @@
         path: /etc/chrony.conf
         regexp: "^#?allow .*"
         line: "allow 172.20.26.0/24"
-
-    - name: copy dns zone files
-      copy:
-        dest: "/var/lib/unbound/{{ item }}"
-        src: "/srv/dns/{{ item }}"
-        mode: 0644
-        owner: root
-        group: "{{ ansible_wheel }}"
-      notify: restart unbound
-      with_items:
-        - 26.20.172.in-addr.arpa
-        - cam.foo.sh
-    - import_role:
-        name: unbound