---
- name: "Configure sudoers umask"
  ansible.builtin.lineinfile:
    dest: /etc/sudoers
    insertafter: '# Defaults specification'
    line: 'Defaults umask=0077'
    validate: 'visudo -cf %s'
  tags:
    - sudo

- name: "Deactivate sudo insults"
  ansible.builtin.lineinfile:
    dest: /etc/sudoers
    insertafter: 'Defaults umask=0077'
    line: 'Defaults !insults'
    validate: 'visudo -cf %s'
  tags:
    - sudo

- name: "Configure sudoers"
  ansible.builtin.blockinfile:
    state: present
    dest: /etc/sudoers
    insertafter: EOF
    block: |
      %evolinux-sudo ALL=(ALL) SETENV: ALL
    validate: 'visudo -cf %s'
    backup: false
  tags:
    - sudo