--- - name: Allow deploy sudo without password ansible.builtin.copy: dest: /etc/sudoers.d/deploy content: "deploy ALL=(ALL) NOPASSWD:ALL" owner: root group: root mode: '0440'