Fix deployment user permissions

roles/artemis/tasks/users.yml

@@ -21,9 +21,7 @@
     comment: "{{ artemis_deployment_user_comment }}"
     state: present
     uid: "{{ artemis_deployment_user_uid }}"
-    group: "{{ artemis_user_group }}"
-    groups: "sudo{% if use_docker %},docker{% endif %}"
-    append: yes
+    groups: "{% if use_docker %}docker{% endif %}"
   when: (artemis_create_deployment_user | bool)
 
 - name: Ensure (limited) sudo privileges for user {{ artemis_deployment_user_name }}

roles/artemis/templates/artemis_deployment_sudoers.j2

@@ -1,10 +1,16 @@
 {{ artemis_deployment_user_name }}  ALL=(ALL) NOPASSWD: /bin/systemctl start artemis
+{{ artemis_deployment_user_name }}  ALL=(ALL) NOPASSWD: systemctl start artemis
 {{ artemis_deployment_user_name }}  ALL=(ALL) NOPASSWD: /bin/systemctl stop artemis
+{{ artemis_deployment_user_name }}  ALL=(ALL) NOPASSWD: systemctl stop artemis
 {{ artemis_deployment_user_name }}  ALL=(ALL) NOPASSWD: {{ artemis_working_directory }}/artemis-backup.sh
 
 # Whitelist commands for `artemis-server-cli deploy`
 {{ artemis_deployment_user_name }}  ALL=(ALL) NOPASSWD: /usr/bin/mv /home/{{ artemis_deployment_user_name }}/artemis.war.new {{ artemis_working_directory }}/artemis.war.new
+{{ artemis_deployment_user_name }}  ALL=(ALL) NOPASSWD: mv /home/{{ artemis_deployment_user_name }}/artemis.war.new {{ artemis_working_directory }}/artemis.war.new
 {{ artemis_deployment_user_name }}  ALL=(ALL) NOPASSWD: /usr/bin/rm {{ artemis_working_directory }}/artemis.war.old
+{{ artemis_deployment_user_name }}  ALL=(ALL) NOPASSWD: rm {{ artemis_working_directory }}/artemis.war.old
 {{ artemis_deployment_user_name }}  ALL=(ALL) NOPASSWD: /usr/bin/mv {{ artemis_working_directory }}/artemis.war {{ artemis_working_directory }}/artemis.war.old
+{{ artemis_deployment_user_name }}  ALL=(ALL) NOPASSWD: mv {{ artemis_working_directory }}/artemis.war {{ artemis_working_directory }}/artemis.war.old
 {{ artemis_deployment_user_name }}  ALL=(ALL) NOPASSWD: /usr/bin/mv {{ artemis_working_directory }}/artemis.war.new {{ artemis_working_directory }}/artemis.war
-{{ artemis_deployment_user_name }}  ALL=(ALL) NOPASSWD: /usr/bin/bash {{ artemis_working_directory }}/artemis-docker.sh *
+{{ artemis_deployment_user_name }}  ALL=(ALL) NOPASSWD: mv {{ artemis_working_directory }}/artemis.war.new {{ artemis_working_directory }}/artemis.war
+{{ artemis_deployment_user_name }}  ALL=(ALL) NOPASSWD: /usr/bin/bash {{ artemis_working_directory }}/artemis-docker.sh restart *