Use groups to manage sudo access rather than editing sudoers file

2022-01-22 20:01:07 +00:00 · 2022-01-22 20:01:07 +00:00 · 106a89d72f
commit 106a89d72f
parent 7e6e630808
1 changed files with 4 additions and 3 deletions
--- a/ansible/roles/base/tasks/user.yml
+++ b/ansible/roles/base/tasks/user.yml
@ -8,7 +8,8 @@
  become: true

 - name: Give user sudo access
-  lineinfile:
-    path: /etc/sudoers
-    line: "{{ user }} ALL=(ALL) ALL"
+  user:
+    name: "{{ user }}"
+    groups: "{{ 'sudo' if ansible_os_family == 'Debian' else 'wheel' }}"
+    append: true
  become: true