- create/update ansible role to (create|start|stop|pause|resume|snapshot|revert) default (admin|ctf|students) vms - add route to call the role - update request schema with tailscale config flags (auth key, hostname, etc.) - add JSON response (later step)