deploy.sls

sudo:
  group:
    - present
  file.managed:
    - name: /etc/sudoers.d/nopasswd
    - contents: |
        %sudo ALL=(ALL:ALL) NOPASSWD: ALL
    - mode: 0440

deploy:
  group:
    - present
  user.present:
    - shell: /bin/bash
    - groups:
      - deploy
      - sudo
    - require:
      - group: deploy
      - group: sudo
  file.managed:
    - name: /etc/security/limits.d/deploy.conf
    - contents: |
        @deploy soft nofile 500000
        @deploy hard nofile 500000