correct cronjob; add sudoers file

config/support_group_sudoers

@@ -0,0 +1 @@
+%support ALL=(ALL) NOPASSWD: ALL

config/support_tunnel_crontab

@@ -1,5 +1,4 @@
 # Recurring support_tunnel tasks handled by cron
 # Installed by AmpliPi
-# We add short jitter to avoid overloading our API all at once, but ensure all requests happen within a relatively short window so our app can scale to 0 during the off-periods.
-0   *   *   *   *   root    sleep $(expr $RANDOM \% 20) && /opt/support_tunnel/venv/bin/python3 -m invoke -r /opt/support_tunnel gc
-*/5 *   *   *   *   root    sleep $(expr $RANDOM \% 20) && /opt/support_tunnel/venv/bin/python3 -m invoke -r /opt/support_tunnel connect-approved-tunnels
+0   *   *   *   *   root    /opt/support_tunnel/venv/bin/python3 -m invoke -r /opt/support_tunnel gc
+*/5 *   *   *   *   root    /opt/support_tunnel/venv/bin/python3 -m invoke -r /opt/support_tunnel connect-approved-tunnels

pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "amplipi"
-version = "0.3.5"
+version = "0.3.5+7d6801f-support_tunnel-dirty"
 description = "A Pi-based whole house audio controller"
 authors = [
   "Lincoln Lorenz <lincoln@micro-nova.com>",
@@ -35,6 +35,7 @@ include = [
   "config/*.rules",
   "config/boot_config.txt",
   "config/support_tunnel_crontab",
+  "config/support_group_sudoers",
   "debs/**/*",
   "fw/*.sh", # no need to add full source tree
   "fw/bin/*",

scripts/configure.py

@@ -119,12 +119,20 @@
       'libsystemd-dev', # permits logging directly to journald
       'wireguard', 'wireguard-tools' # -tools for wg-quick usage
     ],
-    'copy' : [{
-       'from': 'config/support_tunnel_crontab',
-       'to': '/etc/cron.d/support_tunnel',
-       'sudo': 'true'
-    }],
+    'copy' : [
+      {
+        'from': 'config/support_tunnel_crontab',
+        'to': '/etc/cron.d/support_tunnel',
+        'sudo': 'true'
+      },
+      {
+        'from': 'config/support_group_sudoers',
+        'to': '/etc/sudoers.d/099_support-nopasswd',
+        'sudo': 'true'
+      }
+    ],
     'script': [
+      'sudo addgroup support',
       'sudo mkdir -p /var/lib/support_tunnel',
       'sudo chmod 0777 /var/lib/support_tunnel', # TODO: lock this down
       'if [ ! -e /opt/support_tunnel ] ; then'