Configure passwordless sudo for wheel group.

2022-10-09 23:14:55 -04:00 · 2022-10-09 23:14:55 -04:00 · a6e60cef85
commit a6e60cef85
parent ade7fd30f4
5 changed files with 24 additions and 1 deletions
--- a/ansible/environments/home/host_vars/homeserver
+++ b/ansible/environments/home/host_vars/homeserver
@ -1 +1 @@
-os_flavor: "FreeBSD"
+os_flavor: "freebsd"
--- a/ansible/roles/sudo/files/wheel
+++ b/ansible/roles/sudo/files/wheel
@ -0,0 +1 @@
+%wheel ALL=(ALL:ALL) NOPASSWD: ALL
--- a/ansible/roles/sudo/tasks/freebsd.yaml
+++ b/ansible/roles/sudo/tasks/freebsd.yaml
@ -0,0 +1,8 @@
+- name: Configure sudoers
+  copy:
+    src: files/wheel
+    dest: /usr/local/etc/sudoers.d/wheel
+    mode: 0440
+    owner: root
+    group: wheel
+    validate: "visudo -cf %s"
--- a/ansible/roles/sudo/tasks/linux.yaml
+++ b/ansible/roles/sudo/tasks/linux.yaml
@ -0,0 +1,8 @@
+- name: Configure sudoers
+  copy:
+    src: files/wheel
+    dest: /etc/sudoers.d/wheel
+    mode: 0440
+    owner: root
+    group: root
+    validate: "visudo -cf %s"
--- a/ansible/roles/sudo/tasks/main.yaml
+++ b/ansible/roles/sudo/tasks/main.yaml
@ -3,3 +3,9 @@
    name:
      - sudo
    state: present
+
+- include: tasks/freebsd.yaml
+  when: 'os_flavor == "freebsd"'
+
+- include: tasks/linux.yaml
+  when: 'os_flavor == "linux"'