diff --git a/ansible/group_vars/environment_name_oasys_national_reporting_development.yml b/ansible/group_vars/environment_name_oasys_national_reporting_development.yml
new file mode 100644
index 000000000..ed97d539c
--- /dev/null
+++ b/ansible/group_vars/environment_name_oasys_national_reporting_development.yml
@@ -0,0 +1 @@
+---
diff --git a/ansible/group_vars/environment_name_oasys_national_reporting_preproduction.yml b/ansible/group_vars/environment_name_oasys_national_reporting_preproduction.yml
new file mode 100644
index 000000000..ed97d539c
--- /dev/null
+++ b/ansible/group_vars/environment_name_oasys_national_reporting_preproduction.yml
@@ -0,0 +1 @@
+---
diff --git a/ansible/group_vars/environment_name_oasys_national_reporting_production.yml b/ansible/group_vars/environment_name_oasys_national_reporting_production.yml
new file mode 100644
index 000000000..ed97d539c
--- /dev/null
+++ b/ansible/group_vars/environment_name_oasys_national_reporting_production.yml
@@ -0,0 +1 @@
+---
diff --git a/ansible/group_vars/environment_name_oasys_national_reporting_test.yml b/ansible/group_vars/environment_name_oasys_national_reporting_test.yml
new file mode 100644
index 000000000..ed97d539c
--- /dev/null
+++ b/ansible/group_vars/environment_name_oasys_national_reporting_test.yml
@@ -0,0 +1 @@
+---
diff --git a/ansible/group_vars/server_type_onr_boe.yml b/ansible/group_vars/server_type_onr_boe.yml
new file mode 100644
index 000000000..e4ff39c0e
--- /dev/null
+++ b/ansible/group_vars/server_type_onr_boe.yml
@@ -0,0 +1,3 @@
+---
+ansible_python_interpreter: /usr/local/bin/python3.6
+# FIXME: this is a rhel 6.9 instance so 'packages' role may not work the same way
diff --git a/ansible/group_vars/server_type_onr_web.yml b/ansible/group_vars/server_type_onr_web.yml
new file mode 100644
index 000000000..aa9e037ce
--- /dev/null
+++ b/ansible/group_vars/server_type_onr_web.yml
@@ -0,0 +1,81 @@
+---
+ansible_python_interpreter: /usr/bin/python3.9
+
+# TODO: Users and Disks roles need checking versus what we're actually deploying
+# FIXME: ncr-tomcat role probably needs to be either made 'generic' or we need an onr-tomcat role
+
+# users_and_groups_system:
+#   - name: oracle
+#     group: oinstall
+#     groups:
+#       - dba
+#       - wheel
+#   - name: bobj
+#     group: binstall
+#     groups:
+#       - dba
+#       - sapsys
+
+server_type_roles_list:
+  #  - users-and-groups
+  - sudoers
+  - get-ec2-facts
+  - set-ec2-hostname
+  - domain-search
+  - disable-ipv6
+  - disable-firewall
+  - time
+  - packages
+  - message-of-the-day
+  - amazon-ssm-agent
+  - amazon-cli
+  - ansible-script
+  - epel
+  #  - disks
+  #  - ncr-tomcat >> change to onr-tomcat, can't entirely re-use this
+  - collectd
+  - amazon-cloudwatch-agent
+  - amazon-cloudwatch-agent-collectd
+  - collectd-service-metrics
+
+roles_list: "{{ (ami_roles_list | default([]) | difference(server_type_roles_list | default([]))) + (server_type_roles_list | default([])) }}"
+
+packages_yum_install:
+  - nano
+  - vim
+  - make
+  - libstdc++.i686
+  - libstdc++.x86_64
+  - glibc.i686
+  - glibc.x86_64
+  - libX11.i686
+  - libX11.x86_64
+  - libXext.i686
+  - libXext.x86_64
+  - expat.i686
+  - expat.x86_64
+  - libxcrypt.i686
+  - libgcc.i686
+  - libgcc.x86_64
+  - libnsl.i686
+  - libXcursor.i686
+  - libXcursor.x86_64
+  - libXrender.i686
+  - libXrender.x86_64
+  - libXfixes.i686
+  - libXfixes.x86_64
+  - libxcb.i686
+  - libxcb.x86_64
+  - libXau.i686
+  - libXau.x86_64
+  - xz-libs.i686
+# disks_mount:
+#   - ebs_device_name: /dev/sdb
+#     dir: /u01
+#     fstype: xfs
+#   - ebs_device_name: /dev/sdc
+#     dir: /u02
+#     fstype: xfs
+#   - ebs_device_name: /dev/sds
+#     dir: swap
+#     fstype: swap