---
- name: Add configured user accounts to passwordless sudoers.
  lineinfile:
    dest: /etc/sudoers
    regexp: "^{{ item }}"
    line: "{{ item }} ALL=(ALL) NOPASSWD: ALL"
    state: present
    validate: "visudo -cf %s"
    mode: 0644
  loop: "{{ security_sudoers_passwordless }}"
  when: security_sudoers_passwordless | length > 0

- name: Add configured user accounts to passworded sudoers.
  lineinfile:
    dest: /etc/sudoers
    regexp: "^{{ item }}"
    line: "{{ item }} ALL=(ALL) ALL"
    state: present
    validate: "visudo -cf %s"
    mode: 0644
  loop: "{{ security_sudoers_passworded }}"
  when: security_sudoers_passworded | length > 0