update..

host_vars/web0.warenform.de.yml

@@ -142,6 +142,28 @@ ssh_keypair_backup_client:
 #
 # see: roles/common/tasks/vars
 
+sudoers_file_user_aliases:
+   - name: WEB_USER
+     entry: 'webadmin, axel, chris'
+   - name: MAIN_USER
+     entry: 'sysadm, axel, chris'
+
+sudoers_file_cmnd_aliases:
+  - name: REBOOT
+    entry: '/sbin/reboot'
+  - name: MANAGE_SERVICE
+    entry: '/usr/bin/systemctl'
+
+sudoers_file_user_privileges:
+  - name: MAIN_USER
+    entry: ALL = REBOOT, MANAGE_SERVICE
+  - name: WEB_USER
+    entry: ALL = MANAGE_SERVICE
+
+
+
+
+
 
 # ---
 # vars used by roles/common/tasks/caching-nameserver.yml