tezos-remote-signer-bootstrap.yaml

---
# Boostrap remote signer to have tezos as sudoer
- hosts: tezos-remote-signer
  become: true
  tasks:
    - name: Make sure we have a 'wheel' group
      group:
        name: wheel
        state: present

    - name: Allow 'wheel' group to have passwordless sudo
      lineinfile:
        dest: /etc/sudoers
        state: present
        regexp: '^%wheel'
        line: '%wheel ALL=(ALL) NOPASSWD: ALL'
        validate: 'visudo -cf %s'

    - name: Add tezos user
      user:
        name: tezos
        shell: /bin/bash
        comment: Tezos Remote Signer
        group: wheel

    - name: Update all packages to their latest version
      apt:
        name: "*"
        state: latest