EvoBSD/roles/base/tasks/sudo.yml

---
- name: "Configure sudoers umask"
  ansible.builtin.lineinfile:
    dest: /etc/sudoers
    insertafter: '# Defaults specification'
    line: 'Defaults umask=0077'
    validate: 'visudo -cf %s'
  tags:
    - sudo

- name: "Deactivate sudo insults"
  ansible.builtin.lineinfile:
    dest: /etc/sudoers
    insertafter: 'Defaults umask=0077'
    line: 'Defaults !insults'
    validate: 'visudo -cf %s'
  tags:
    - sudo

- name: "Configure sudoers"
  ansible.builtin.blockinfile:
    state: present
    dest: /etc/sudoers
    insertafter: EOF
    block: |
      %evolinux-sudo ALL=(ALL) SETENV: ALL
    validate: 'visudo -cf %s'
    backup: false
  tags:
    - sudo
Add initial project 2018-12-28 11:23:49 +01:00			`---`
Syntax : have all task name between quotes 2022-06-23 16:17:42 +02:00			`- name: "Configure sudoers umask"`
use Fully Qualified Collection Name everywhere 2023-10-23 09:33:54 +02:00			`ansible.builtin.lineinfile:`
Configure sudoers umask This configuration is checked by evocheck, so it should be present by default 2020-10-08 15:42:52 +02:00			`dest: /etc/sudoers`
			`insertafter: '# Defaults specification'`
			`line: 'Defaults umask=0077'`
			`validate: 'visudo -cf %s'`
			`tags:`
			`- sudo`

base: deactivate insults in sudo 2023-09-27 10:17:33 +02:00			`- name: "Deactivate sudo insults"`
use Fully Qualified Collection Name everywhere 2023-10-23 09:33:54 +02:00			`ansible.builtin.lineinfile:`
base: deactivate insults in sudo 2023-09-27 10:17:33 +02:00			`dest: /etc/sudoers`
			`insertafter: 'Defaults umask=0077'`
			`line: 'Defaults !insults'`
			`validate: 'visudo -cf %s'`
			`tags:`
			`- sudo`

base: rename sudo task 2023-06-20 10:21:18 +02:00			`- name: "Configure sudoers"`
use Fully Qualified Collection Name everywhere 2023-10-23 09:33:54 +02:00			`ansible.builtin.blockinfile:`
Add initial project 2018-12-28 11:23:49 +01:00			`state: present`
			`dest: /etc/sudoers`
			`insertafter: EOF`
			`block: \|`
Allow evolinux-sudo group to sudo evolinux-sudo group can already use doas, it should also be allowed to use sudo 2020-10-22 11:28:06 +02:00			`%evolinux-sudo ALL=(ALL) SETENV: ALL`
Add initial project 2018-12-28 11:23:49 +01:00			`validate: 'visudo -cf %s'`
Ansible-lint and yamllint again Lot of truthy variables, indentation and trailing spaces 2020-06-01 11:37:15 +02:00			`backup: false`
Add initial project 2018-12-28 11:23:49 +01:00			`tags:`
Ansible-lint and yamllint again Lot of truthy variables, indentation and trailing spaces 2020-06-01 11:37:15 +02:00			`- sudo`