EvoBSD/roles/base/tasks/sudo.yml

22 lines
464 B
YAML

---
- name: "Configure sudoers umask"
lineinfile:
dest: /etc/sudoers
insertafter: '# Defaults specification'
line: 'Defaults umask=0077'
validate: 'visudo -cf %s'
tags:
- sudo
- name: "Configure sudoers for evomaintenance and monitoring"
blockinfile:
state: present
dest: /etc/sudoers
insertafter: EOF
block: |
%evolinux-sudo ALL=(ALL) SETENV: ALL
validate: 'visudo -cf %s'
backup: false
tags:
- sudo