{% for user in ssh_users | default([]) %}
{% if user.sudo is defined %}
{% for command in user.sudo %}
{{ user.name }} ALL=({{ command.run_as | default('root') }}) {% if command.nopasswd is defined and command.nopasswd %} NOPASSWD: {% endif %} {{ command.cmd | join(',') }}

{% endfor %}
{% endif %}
{% endfor %}