--- - name: Update sudoers for passwordless hosts: unbound_servers become: true gather_facts: true tasks: - name: Update sudoers for passwordless ansible.builtin.lineinfile: path: /etc/sudoers state: present regexp: '^%wheel' line: '%wheel ALL=(ALL) NOPASSWD:ALL' validate: 'visudo -cf %s'