From 64da9e97157245d1e84285c58cdf0b58db9fcee0 Mon Sep 17 00:00:00 2001
From: Hermes Agent service account
 <hermes@carousel-of-progress.local.mk-labs.cloud>
Date: Thu, 17 Sep 2026 22:03:05 -0500
Subject: [PATCH] feat: update baseline_users to include wed, jarvis, and
 rblundon

---
 ansible/roles/linux-baseline/defaults/main.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/ansible/roles/linux-baseline/defaults/main.yml b/ansible/roles/linux-baseline/defaults/main.yml
index f684af2..e06a273 100644
--- a/ansible/roles/linux-baseline/defaults/main.yml
+++ b/ansible/roles/linux-baseline/defaults/main.yml
@@ -65,6 +65,11 @@ baseline_packages_extra: []
 # provisions on every host. Service users (e.g. 'cast' for podman
 # workloads) are created by their respective application roles, not here.
 baseline_users:
+  - name: wed
+    comment: "Default admin user"
+    shell: /bin/bash
+    groups: "{{ baseline_sudo_group }}"
+    sudo_nopasswd: true
   - name: jarvis
     comment: "JARVIS automation account"
     shell: /bin/bash
@@ -72,6 +77,11 @@ baseline_users:
     sudo_nopasswd: true
     ssh_authorized_keys:
       - "{{ jarvis_ssh_public_key }}"
+  - name: rblundon
+    comment: "Ryan Blundon"
+    shell: /bin/bash
+    groups: "{{ baseline_sudo_group }}"
+    sudo_nopasswd: true
 
 # ---------------------------------------------------------------------------
 # SSH hardening