#!/bin/bash

# Add passwordless sudo for user ncantu.
# Must be run as root (e.g. sudo ./add-sudo-nopasswd-ncantu.sh).
# Creates /etc/sudoers.d/99-ncantu-nopasswd and validates with visudo -c.

set -euo pipefail

SUDOERS_FILE="/etc/sudoers.d/99-ncantu-nopasswd"
USER_NAME="ncantu"

if [ "$(id -u)" -ne 0 ]; then
  echo "Run as root: sudo $0" >&2
  exit 1
fi

echo "${USER_NAME} ALL=(ALL) NOPASSWD: ALL" > "${SUDOERS_FILE}"
chmod 440 "${SUDOERS_FILE}"
visudo -c -f "${SUDOERS_FILE}"
echo "Done. User ${USER_NAME} can run sudo without password."