From fe12200394969b9a872e5770e345ab4d4e9018c3 Mon Sep 17 00:00:00 2001
From: Sangelo <contact@sangelo.space>
Date: Tue, 23 Jan 2024 15:18:28 +0100
Subject: [PATCH] Install sudo on hosts using common.secure role

---
 roles/secure/tasks/main.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/roles/secure/tasks/main.yml b/roles/secure/tasks/main.yml
index 7f40fcc..51043c1 100644
--- a/roles/secure/tasks/main.yml
+++ b/roles/secure/tasks/main.yml
@@ -56,6 +56,12 @@
     comment: 'Allow HTTP'
   when: common_firewall_http and common_firewall_enable
 
+- name: Install sudo
+  ansible.builtin.apt:
+    pkg: sudo
+    update_cache: true
+    state: present
+
 - name: Configure SSH to disallow passwords
   ansible.builtin.lineinfile:
     path: /etc/ssh/sshd_config