---
- name: Ensure group wheel exists
  ansible.builtin.group:
    name: wheel
    state: present

- name: Allow wheel group to have passwordless sudo
  ansible.builtin.copy:
    content: "%wheel ALL=(ALL) NOPASSWD: ALL"
    dest: /etc/sudoers.d/wheel
    mode: "0440"
    validate: "/usr/sbin/visudo -cf %s"

- name: Adding user to group wheel
  ansible.builtin.user:
    name: "{{ user }}"
    groups: wheel
    append: true