X-Git-Url: https://git.phdru.name/?a=blobdiff_plain;f=playbooks%2Froles%2Fsudo%2Ftasks%2Fmain.yaml;h=ee444a5a8d625e6d70e0390cb66a50013db74eee;hb=93b859e547bd0f3286b4c3d82338668ebe3b6139;hp=0c8770706194b309ca7edc60dfd915b2af849898;hpb=a9bda62780e49427e8b83479c1ce2c339a62fb49;p=ansible.git

diff --git a/playbooks/roles/sudo/tasks/main.yaml b/playbooks/roles/sudo/tasks/main.yaml
index 0c87707..ee444a5 100644
--- a/playbooks/roles/sudo/tasks/main.yaml
+++ b/playbooks/roles/sudo/tasks/main.yaml
@@ -19,7 +19,9 @@
 - name: Allow passwordless operations for phd
   become: true
   copy:
-    content: 'phd	ALL=(ALL:ALL) NOPASSWD: ALL'
+    content: |
+      Defaults !admin_flag
+      phd	ALL=(ALL:ALL) NOPASSWD: ALL
     dest: /etc/sudoers.d/phd
     owner: root
     group: "{% if ansible_facts.os_family == 'Debian' %}sudo{% elif ansible_facts.os_family == 'RedHat' %}root{% endif %}"