diff --git a/roles/base/tasks/sudo.yml b/roles/base/tasks/sudo.yml
index e69de29..623f160 100644
--- a/roles/base/tasks/sudo.yml
+++ b/roles/base/tasks/sudo.yml
@@ -0,0 +1,8 @@
+---
+- name: Allow deploy sudo without password
+  ansible.builtin.copy:
+    dest: /etc/sudoers.d/deploy
+    content: "deploy ALL=(ALL) NOPASSWD:ALL"
+    owner: root
+    group: root
+    mode: '0440'
\ No newline at end of file