Install sudo on hosts using common.secure role

roles/secure/tasks/main.yml

@@ -56,6 +56,12 @@
     comment: 'Allow HTTP'
   when: common_firewall_http and common_firewall_enable
 
+- name: Install sudo
+  ansible.builtin.apt:
+    pkg: sudo
+    update_cache: true
+    state: present
+
 - name: Configure SSH to disallow passwords
   ansible.builtin.lineinfile:
     path: /etc/ssh/sshd_config