diff --git a/roles/base/tasks/core.yml b/roles/base/tasks/core.yml index ceeda15..e245b86 100644 --- a/roles/base/tasks/core.yml +++ b/roles/base/tasks/core.yml @@ -35,6 +35,14 @@ tags: - ssh +- name: "*** SUDO Configuration ***" + include_tasks: + file: core_sudo.yml + apply: + tags: sudo + tags: + - sudo + - name: "*** Generate Self-Signed Cert ***" include_tasks: file: core_cert.yml diff --git a/roles/base/tasks/core_sudo.yml b/roles/base/tasks/core_sudo.yml new file mode 100644 index 0000000..420b265 --- /dev/null +++ b/roles/base/tasks/core_sudo.yml @@ -0,0 +1,10 @@ +--- +# file: roles/base/tasks/core_sudo.yml + +- name: Enabled passwordless sudo + lineinfile: + path: /etc/sudoers + state: present + regexp: '^%wheel' + line: '%wheel ALL=(ALL) NOPASSWD: ALL' + validate: 'visudo -cf %s'