ansible improvements

frank/ansible/hosts

@@ -8,11 +8,12 @@ pkl2 ansible_host="clair" var_file=vars/devices/pkl2.yml
 pkl3 ansible_host="clair" var_file=vars/devices/pkl3.yml
 pkl4 ansible_host="clair" var_file=vars/devices/pkl4.yml
 moz1 ansible_host="clair" var_file=vars/devices/moz1.yml
-moz2 ansible_host="clair" var_file=vars/devices/moz2.yml
+; moz2 ansible_host="clair" var_file=vars/devices/moz2.yml
 mhl1 ansible_host="clair" var_file=vars/devices/mhl1.yml
 mhl2 ansible_host="clair" var_file=vars/devices/mhl2.yml
 mhl3 ansible_host="clair" var_file=vars/devices/mhl3.yml
 mhl4 ansible_host="clair" var_file=vars/devices/mhl4.yml
 chd1 ansible_host="clair" var_file=vars/devices/chd1.yml
 chd2 ansible_host="clair" var_file=vars/devices/chd2.yml
-tan-home ansible-host="tan-home" var_file=vars/devices/tan-home.yml
+tan-home ansible_host=tan-home ansible_user=barker var_file=vars/devices/tan-home.yml
+mozimo-backup ansible_host=10.1.113.5 ansible_user=barker var_file=vars/devices/moz2.yml

frank/ansible/prepare-device.yml

@@ -16,6 +16,7 @@
 
   roles:
     - common
+    - wheel
     - zsh
     - docker
     - netbird_client

frank/ansible/roles/wheel/tasks/main.yml

@@ -0,0 +1,18 @@
+---
+- name: Ensure group wheel exists
+  ansible.builtin.group:
+    name: wheel
+    state: present
+
+- name: Allow wheel group to have passwordless sudo
+  ansible.builtin.copy:
+    content: "%wheel ALL=(ALL) NOPASSWD: ALL"
+    dest: /etc/sudoers.d/wheel
+    mode: "0440"
+    validate: "/usr/sbin/visudo -cf %s"
+
+- name: Adding user to group wheel
+  ansible.builtin.user:
+    name: "{{ user }}"
+    groups: wheel
+    append: true

frank/ansible/vars/devices/chd1.yml

@@ -1,7 +1,5 @@
 ---
-hostname: chd1
+hostname: chd-bar
-ssh_port: 22341
+user: barker
-user: pi
+queue_name: chd-bar
-queue_name: moz-elante
 printer_port: "/dev/usb/lp0"
-ip_address: 10.3.4.1

frank/ansible/vars/devices/moz2.yml

@@ -1,6 +1,5 @@
 ---
-hostname: moz2
+hostname: mozimo-backup
-ssh_port: 22542
+user: barker
-user: vari
+queue_name: mozimo-backup
-queue_name: moz-elante
 printer_port: "/dev/usb/lp0"