-redo of some roles, particularly GUI -modifications to support working from a "Raspbian Lite" install
add smb credentials all credentials/secrets will eventually go into vault. this is not a huge security concern since none of this is production