Set-OPS/roles/sudo_ansible/tasks/main.yml

---
- name: S'assurer que le groupe sudo existe
  ansible.builtin.group:
    name: sudo
    state: present

- name: S'assurer que le compte technique existe
  ansible.builtin.user:
    name: "{{ sudo_ansible_admin_user }}"
    shell: /bin/bash
    groups: sudo
    append: true
    create_home: true
    state: present

- name: Déployer sudo NOPASSWD pour le compte technique
  ansible.builtin.template:
    src: 90-ansible.j2
    dest: "/etc/sudoers.d/90-{{ sudo_ansible_admin_user }}"
    owner: root
    group: root
    mode: "0440"
    validate: "visudo -cf %s"