---
# dont't break the tab!
- name: Allow wheel group to run command as root in sudo
  lineinfile:
    dest: /etc/sudoers
    insertafter: '# and set environment variables.'
    line: '%wheel   ALL=(ALL) SETENV: ALL'
    validate: 'visudo -cf %s'
    backup: false
  tags:
    - sudo

- name: Configure sudoers for evomaintenance and monitoring
  blockinfile:
    state: present
    dest: /etc/sudoers
    insertafter: EOF
    block: |
      Cmnd_Alias MAINT = /usr/share/scripts/evomaintenance.sh
      %wheel ALL=NOPASSWD: MAINT
    validate: 'visudo -cf %s'
    backup: false
  tags:
    - sudo