base: deactivate insults in sudo

CHANGELOG

@@ -31,6 +31,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 * accounts: create only users who have a certain value for the `create` key (default: `always`)
 * nagios-nrpe: add the ipmi_sensor check
 * base: doas configuration for ipmi_sensor NRPE check
+* base: deactivate insults in sudo
 
 ### Changed
 

roles/base/tasks/sudo.yml

@@ -8,6 +8,15 @@
   tags:
     - sudo
 
+- name: "Deactivate sudo insults"
+  lineinfile:
+    dest: /etc/sudoers
+    insertafter: 'Defaults umask=0077'
+    line: 'Defaults !insults'
+    validate: 'visudo -cf %s'
+  tags:
+    - sudo
+
 - name: "Configure sudoers"
   blockinfile:
     state: present