diff --git a/all.yml b/all.yml
index fa5b7a0..5dd0f25 100644
--- a/all.yml
+++ b/all.yml
@@ -27,10 +27,10 @@
     - { role: grog.management-user, tags: user }
     - { role: willshersystems.sshd, tags: ssh }
     - { role: GROG.package, tags: package }
-    - { role: robertdebock.fail2ban, tags: ban }
+    - { role: robertdebock.fail2ban, tags: ban, when: "{{ install_fail2ban|default('false') }}"}
     - { role: nickhammond.logrotate, tags: log }
     - { role: geerlingguy.pip, tags: pip }
-    - { role: geerlingguy.docker, tags: docker }
+    - { role: geerlingguy.docker, tags: docker, when: "{{ install_docker|default('false') }}" }
 
   tasks:
 
diff --git a/group_vars/controller.yml b/group_vars/controller.yml
index 7491963..20fcd0a 100644
--- a/group_vars/controller.yml
+++ b/group_vars/controller.yml
@@ -1,5 +1,8 @@
 ---
 
+install_docker: true
+install_fail2ban: true
+
 package_list:
   - name: python3-pip
   - name: proxychains