Technitium working

roles/sudoers/tasks/main.yml

@@ -46,7 +46,7 @@
     name: "{{ sudoers_user }}"
     state: present
 
-- name: Add sudoers entry
+- name: Add sudoers entries
   community.general.sudoers:
     commands:
       - ALL
@@ -54,12 +54,19 @@
       - '!fqdn' # Ensures using shortname only when assessing hostname in sudo rule
     group: sudo
     host: "{{ inventory_hostname_short }}"
-    name: sudo_group
-    nopassword: false
-    runas: root
+    name: sudo_{{ item.name }}
+    nopassword: "{{ item.nopassword }}"
+    runas: "{{ item.name }}"
     state: present
     sudoers_path: "/etc/sudoers.d"
     validation: required
+  loop:
+    - name: root
+      nopassword: false
+    - name: "{{ unprivileged_user }}"
+      nopassword: true
+  loop_control:
+    label: "{{ item.name }}"
 
 - name: Remove default sudoers file
   ansible.builtin.file: