ansible-role-users/templates/sudoers

{% if user.sudoers is defined %}
{{ user.sudoers }}
{% else %}
{{ user.username }} ALL=(ALL) {% if user.sudo == 'nopasswd' %}NOPASSWD:{% endif %}ALL
{% endif %}