moved narwhal to doas

hosts.yml

@@ -61,7 +61,7 @@ all:
       ansible_user: ansible
       ansible_port: 22
       ansible_python_interpreter: /usr/bin/python3
-      ansible_become_method: sudo
+      ansible_become_method: doas
 
     fugu:
       ansible_host: fugu

roles/wheel/tasks/debian.yml

@@ -0,0 +1,11 @@
+---
+- name: install doas
+  apt:
+    name: doas
+
+- name: copy doas config
+  copy:
+    src: doas.conf
+    dest: /etc/doas.conf
+    owner: root
+    mode: '0644'

roles/wheel/tasks/main.yml

@@ -20,6 +20,6 @@
   include_tasks: openbsd.yml
   when: ansible_distribution == "OpenBSD"
 
-- name: setup with sudo
+- name: 'debian-specific things'
-  include_tasks: sudo.yml
+  include_tasks: debian.yml
   when: ansible_distribution in ["Debian", "Ubuntu"]

roles/wheel/tasks/sudo.yml

@@ -1,12 +0,0 @@
----
-- name: install sudo
-  apt:
-    name: sudo
-  when: ansible_distribution in ["Debian", "Ubuntu"]
-
-- name: allow wheel sudo without password
-  copy:
-    dest: /etc/sudoers.d/wheel
-    content: "%wheel ALL=(ALL) NOPASSWD: ALL"
-    mode: '0440'
-    owner: root