roles/users/tasks/main.yml

@@ -15,10 +15,10 @@
     key: "{{ sysadmin_public_ssh_key }}"
   become: true
 
-- name: Allow passwordless sudo to sysadmin user
+- name: Allow passwordless sudo for the sudo group
   ansible.builtin.copy:
-    dest: /etc/sudoers.d/{{ sysadmin_user }}
+    dest: /etc/sudoers.d/sudo-nopasswd
-    content: "{{ sysadmin_user }} ALL=(ALL) NOPASSWD: ALL"
+    content: "%sudo ALL=(ALL) NOPASSWD: ALL"
     mode: "0440"
     validate: /usr/sbin/visudo -cf %s
   become: true