From 12ebe13899b44122739418e96f0422ef15b28330 Mon Sep 17 00:00:00 2001
From: clarkzjw <i@jinwei.me>
Date: Fri, 13 Jan 2023 13:48:39 -0800
Subject: ansible: setup

---
 clarkzjw.ca/config/atlas/roles/init/tasks/main.yaml | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 clarkzjw.ca/config/atlas/roles/init/tasks/main.yaml

(limited to 'clarkzjw.ca/config/atlas/roles')

diff --git a/clarkzjw.ca/config/atlas/roles/init/tasks/main.yaml b/clarkzjw.ca/config/atlas/roles/init/tasks/main.yaml
new file mode 100644
index 0000000..35284bd
--- /dev/null
+++ b/clarkzjw.ca/config/atlas/roles/init/tasks/main.yaml
@@ -0,0 +1,21 @@
+- name: Make sure we have a 'wheel' group
+  group:
+    name: wheel
+    state: present
+  become_user: root
+
+- name: Allow 'wheel' group to have passwordless sudo
+  become_user: root
+  lineinfile:
+    dest: /etc/sudoers
+    state: present
+    regexp: '^%wheel'
+    line: '%wheel ALL=(ALL) NOPASSWD: ALL'
+    validate: visudo -cf %s
+
+- name: Add sudoers users to wheel group
+  become_user: root
+  user:
+    name: clarkzjw
+    groups: wheel
+    append: yes
-- 
cgit v1.2.3