From 371d5a0acd8317a4c3c77c7b329f34c2c35f4f11 Mon Sep 17 00:00:00 2001
From: Sandwich <sandwich@archworks.co>
Date: Tue, 14 Jul 2026 01:48:26 +0200
Subject: [PATCH] fix(configuration): deploy sudoers rules for bool-or-string
 sudo values

---
 roles/configuration/tasks/sudo.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/roles/configuration/tasks/sudo.yml b/roles/configuration/tasks/sudo.yml
index dff8c93..c5c64b0 100644
--- a/roles/configuration/tasks/sudo.yml
+++ b/roles/configuration/tasks/sudo.yml
@@ -15,8 +15,7 @@
     validate: /usr/sbin/visudo --check --file=%s
 
 - name: Deploy per-user sudoers rules
-  # Jinja truthiness: bool true / a rule string => deploy; false / '' / unset => skip.
-  when: item.value.sudo | default(false)
+  when: (item.value.sudo | default(false)) not in [false, '', none]
   vars:
     configuration_sudoers_rule: >-
       {{ item.value.sudo if item.value.sudo is string else 'ALL=(ALL) NOPASSWD: ALL' }}