From 0123b208cd0ecba8fbb1aab09965ef2c2bcd2753 Mon Sep 17 00:00:00 2001
From: alessandrovitali <mail@alessandrovitali.net>
Date: Mon, 20 Jul 2026 18:37:57 +0200
Subject: [PATCH] refactor: configure passwordless sudo on group-level

---
 roles/users/tasks/main.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/roles/users/tasks/main.yml b/roles/users/tasks/main.yml
index 65980f9..e356963 100644
--- a/roles/users/tasks/main.yml
+++ b/roles/users/tasks/main.yml
@@ -15,10 +15,10 @@
     key: "{{ sysadmin_public_ssh_key }}"
   become: true
 
-- name: Allow passwordless sudo to sysadmin user
+- name: Allow passwordless sudo for the sudo group
   ansible.builtin.copy:
-    dest: /etc/sudoers.d/{{ sysadmin_user }}
-    content: "{{ sysadmin_user }} ALL=(ALL) NOPASSWD: ALL"
+    dest: /etc/sudoers.d/sudo-nopasswd
+    content: "%sudo ALL=(ALL) NOPASSWD: ALL"
     mode: "0440"
     validate: /usr/sbin/visudo -cf %s
   become: true