Use sudoers module

roles/common/tasks/users.yml

@@ -17,10 +17,11 @@
     exclusive: true
   loop: "{{ users }}"
 
-- name: Allow passwordless sudo to 'sudo' group
+- name: Allow passwordless sudo
-  ansible.builtin.lineinfile:
+  community.general.sudoers:
-    path: /etc/sudoers
+    name: passwordless
-    regexp: '^%sudo ALL='
+    group: sudo
-    line: '%sudo ALL=(ALL:ALL) NOPASSWD: ALL'
+    host: ALL
-    validate: /usr/sbin/visudo -cf %s
+    commands: ALL
+    nopassword: true
     state: present