Allow passwordless sudo for ssh login user

initial-setup.yml

@@ -26,6 +26,13 @@
         append: yes
         groups:
           - sudo
+    - name: allow passwordless sudo for new user
+      template:
+        src: etc/sudoers.d/ssh_user.j2
+        dest: /etc/sudoers.d/{{ ssh_user }}
+        owner: root
+        group: root
+        mode: 0440
     - name: add authorized key to SSH login user
       authorized_key:
         key: "{{ item }}"

templates/etc/sudoers.d/ssh_user.j2

@@ -0,0 +1 @@
+{{ ssh_user }} ALL=(ALL) NOPASSWD:ALL