###
# sftp
#  used for chrooted sftp-only access (sshd_config.j2)
###
- name: Add SFTP group
  group: name=sftp
  become: true

###
# staff
#  staff people may sudo without password at all times
###
- name: Add staff group
  group: name=staff gid=50
  become: true

- name: Add the staff-group to the sudoers
  lineinfile: "dest=/etc/sudoers state=present regexp='^%staff' line='%staff ALL=(ALL) NOPASSWD: ALL'"
  become: true