voc.infobeamer-cms: add gpn20 people

bundles/pacman/metadata.py

@@ -5,6 +5,7 @@ defaults = {
             'pacman',
         },
         'no_extract': {
+            'etc/cron.d/0hourly',
             # don't install systemd-homed pam module. It produces a lot of spam in
             # journal about systemd-homed not being active, so just get rid of it.
             # Requires reinstall of systemd package, though

bundles/wireguard/items.py

@@ -18,6 +18,8 @@ for number, (peer, config) in enumerate(sorted(node.metadata.get('wireguard/peer
     files[f'/etc/systemd/network/wg{number}.netdev'] = {
         'content_type': 'mako',
         'source': 'wg.netdev',
+        'owner': 'systemd-network',
+        'mode': '0600',
         'context': {
             'endpoint': config.get('endpoint'),
             'number': number,

bundles/zfs/metadata.py

@@ -49,6 +49,9 @@ defaults = {
         },
     },
     'pacman': {
+        'no_extract': {
+            'etc/sudoers.d/zfs',
+        },
         'packages': {
             'zfs-utils': {
                 'needed_by': {

nodes/kunsi-p14s.py

@@ -71,9 +71,7 @@ nodes['kunsi-p14s'] = {
         },
         'pacman': {
             'no_extract': {
-                'etc/cron.d/0hourly',
                 'etc/sudoers.d/ctdb', # samba junk
-                'etc/sudoers.d/zfs',
             },
             'packages': {
                 # for hardware support

nodes/voc/infobeamer-cms.py

@@ -32,6 +32,10 @@ nodes['voc.infobeamer-cms'] = {
                 'ADMIN_USERS': [
                     'kunsi',
                     'sophieschi',
+
+                    # GPN20
+                    'hexchen',
+                    'twiddau',
                 ],
                 'GITHUB_CLIENT_ID': vault.decrypt('encrypt$gAAAAABiNwHfIu9PYFfJrF7qirn_9vdvvUlEhJnadoNSS5XlCDbI_aMyj21_ZYQxaCkc6_eVX6Cj1jEHZ7Vs6wM-XyQdW0nUOahtqG4uvnYCiM3GFKHW_wQ='),
                 'GITHUB_CLIENT_SECRET': vault.decrypt('encrypt$gAAAAABiNwHtdZC2XQ8IjosL7vsmrxZMwDIM6AD5dUlLo996tJs4qV7KJETHgYYZil2aMzClwhcE6JmxdhARRp7IJQ4rQQibelTNmyYSzj_V4puVpvma7SU0UZkTIG95SdPpoHY--Zba'),