diff --git a/roles/users/tasks/main.yml b/roles/users/tasks/main.yml index 65980f9..e356963 100644 --- a/roles/users/tasks/main.yml +++ b/roles/users/tasks/main.yml @@ -15,10 +15,10 @@ key: "{{ sysadmin_public_ssh_key }}" become: true -- name: Allow passwordless sudo to sysadmin user +- name: Allow passwordless sudo for the sudo group ansible.builtin.copy: - dest: /etc/sudoers.d/{{ sysadmin_user }} - content: "{{ sysadmin_user }} ALL=(ALL) NOPASSWD: ALL" + dest: /etc/sudoers.d/sudo-nopasswd + content: "%sudo ALL=(ALL) NOPASSWD: ALL" mode: "0440" validate: /usr/sbin/visudo -cf %s become: true