---
- name: "Configure sudoers umask"
  lineinfile:
    dest: /etc/sudoers
    insertafter: '# Defaults specification'
    line: 'Defaults umask=0077'
    validate: 'visudo -cf %s'
  tags:
    - sudo

- name: "Configure sudoers for evomaintenance and monitoring"
  blockinfile:
    state: present
    dest: /etc/sudoers
    insertafter: EOF
    block: |
      %evolinux-sudo ALL=(ALL) SETENV: ALL
    validate: 'visudo -cf %s'
    backup: false
  tags:
    - sudo