Minor fixes

roles/add_cert_http_01/tasks/main.yml

@@ -55,6 +55,9 @@
     mode: 0640
   notify: Reload nftables service
 
+- name: Make sure nftables is reloaded
+  ansible.builtin.meta: flush_handlers
+
 - name: Set letsencrypt http-01 challenge argv
   ansible.builtin.set_fact:
     letsencrypt_http_01_challenge_argv:

roles/common/tasks/main.yml

@@ -50,3 +50,13 @@
     owner: root
     group: root
   notify: Restart sshd service
+
+- name: Copy sudoers file for root without password
+  become: true
+  ansible.builtin.copy:
+    content: "{{ ansible_user_id }} ALL=(ALL) NOPASSWD: ALL"
+    dest: "/etc/sudoers.d/{{ ansible_user_id }}"
+    owner: root
+    group: root
+    mode: 0440
+    validate: 'visudo -cf %s'