diff --git a/group_vars/all/plain.yml b/group_vars/all/plain.yml
index 651d21d..d3229b0 100644
--- a/group_vars/all/plain.yml
+++ b/group_vars/all/plain.yml
@@ -26,6 +26,7 @@ ssh_ciphers:
 ssh_permit_root_login: 'yes'
 
 docker_enabled: true
+docker_config_enabled: true
 traefik_enabled: true
 filebeat_enabled: true
 node_exporter_enabled: true
diff --git a/group_vars/stage_ext/plain.yml b/group_vars/stage_ext/plain.yml
new file mode 100644
index 0000000..294479d
--- /dev/null
+++ b/group_vars/stage_ext/plain.yml
@@ -0,0 +1,14 @@
+---
+
+stage: "ext"
+
+docker_enabled: true
+docker_config_enabled: false
+traefik_enabled: true
+filebeat_enabled: false
+node_exporter_enabled: false
+
+# TODO read configuration with hetzner rest api
+shared_service_network: "10.2.0.0/16"
+
+shared_service_hosts: []
diff --git a/group_vars/stage_ext/vault.yml b/group_vars/stage_ext/vault.yml
new file mode 100644
index 0000000..5aaf2f4
--- /dev/null
+++ b/group_vars/stage_ext/vault.yml
@@ -0,0 +1,12 @@
+$ANSIBLE_VAULT;1.1;AES256
+64326238383766653335313732626562616331346131366635383838313236326237303935326139
+6561363534383736643263623365663836363365373231350a353435376562393538373438313066
+39366236313634366566623835353265623663356434353534626239353432656438626332393734
+3663333131643335380a363662616436616538383533336363303837653139623139316664353634
+61646238383335656361373837643536653865343833636564633731386138333165343866393737
+35366265363061636664663138366561333938353134323835303765366537306137343839313866
+65396539343234656264333234373934313432393630313336666238643932626261383234383838
+64313538666437623664326433633932353266386163396139643938613532363937623462633532
+30613964643039373361653732333865656132373263646335656431303466636233353635323763
+36333863666330326332663765393837623165646265623064363830313237306430646663343465
+363831623364653236323637386139313732
diff --git a/host_vars/ext-bdev-demo01-01.yml b/host_vars/ext-bdev-demo01-01.yml
new file mode 100644
index 0000000..3fab387
--- /dev/null
+++ b/host_vars/ext-bdev-demo01-01.yml
@@ -0,0 +1,5 @@
+---
+
+hetzner_server_labels: "stage={{ stage }} service=connect tenant=bdev"
+
+hetzner_server_type: cx31
diff --git a/roles/common/tasks/main.yml b/roles/common/tasks/main.yml
index 01c401b..02f4fc4 100644
--- a/roles/common/tasks/main.yml
+++ b/roles/common/tasks/main.yml
@@ -103,7 +103,9 @@
     group: '{{ item }}'
     mode: 0600
   loop: '{{ smardigo_plattform_users }}'
-  when: docker_enabled
+  when:
+    - docker_enabled
+    - docker_config_enabled
   tags:
     - users
     - config
@@ -175,7 +177,9 @@
     owner: 'root'
     group: 'root'
     mode: 0600
-  when: docker_enabled
+  when:
+    - docker_enabled
+    - docker_config_enabled
   tags:
     - config
 
diff --git a/stage-ext b/stage-ext
new file mode 100644
index 0000000..f733031
--- /dev/null
+++ b/stage-ext
@@ -0,0 +1,11 @@
+[bdev]
+ext-bdev-demo01-01
+
+[stage_ext:children]
+bdev
+
+[all:children]
+stage_ext
+
+[hcloud:children]
+stage_ext