diff --git a/ansible/deploy-controller.sh b/ansible/deploy-controller.sh
index 38c1078..f28ea41 100644
--- a/ansible/deploy-controller.sh
+++ b/ansible/deploy-controller.sh
@@ -3,4 +3,4 @@
 # https://www.tauceti.blog/post/kubernetes-the-not-so-hard-way-with-ansible-wireguard/
 # https://github.com/githubixx/ansible-role-wireguard
 
-TAGS_SKIP=wg_install ansible -i inventory-wireguard -m include_role -a name=githubixx.ansible_role_wireguard wg --limit controller --check
+ansible-playbook -i inventory-wireguard --skip-tags wg-install ./playbook-deploy-controller.yml
diff --git a/ansible/playbook-deploy-controller.yml b/ansible/playbook-deploy-controller.yml
new file mode 100644
index 0000000..0a7ef42
--- /dev/null
+++ b/ansible/playbook-deploy-controller.yml
@@ -0,0 +1,4 @@
+---
+- hosts: controller
+  roles:
+    - githubixx.ansible_role_wireguard