get_password.sh

@@ -1,8 +1,3 @@
 #!/bin/sh
 
-PASSFILE="/srv/secrets/ansible_vault_pass"
+pass ansible-vault
-if [ -f "$PASSFILE" ]; then
-    doas cat "$PASSFILE"
-else
-    pass ansible-vault
-fi

roles/users/tasks/main.yml

@@ -4,11 +4,6 @@
     name: deploy
     gid: 700
 
-- name: create group 'media'
-  group:
-    name: deploy
-    gid: 701
-
 - name: determine available groups
   getent:
     database: group