Configure sudo in separate file

python-discord · May 12, 2024 · 8a4c9b5 · 8a4c9b5
1 parent 8379db5
commit 8a4c9b5
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 2 deletions.
diff --git a/ansible/roles/common/tasks/main.yml b/ansible/roles/common/tasks/main.yml
@@ -84,12 +84,23 @@
   tags:
     - role::common
 
-- name: Add sudoers lecture path
+- name: Configure sudo
+  template:
+    src: sudoers.j2
+    dest: /etc/sudoers.d/pydis
+    owner: root
+    group: root
+    mode: '0440'
+    validate: /usr/sbin/visudo -cf %s
+  tags:
+    - role::common
+
+- name: Remove sudoers lecture path
   lineinfile:
     dest: /etc/sudoers
     regexp: '^Defaults +?lecture_file ?= ?".+?"$'
     line: 'Defaults    lecture_file = "/etc/sudo_lecture"'
-    state: present
+    state: absent
     validate: /usr/sbin/visudo -cf %s
   tags:
     - role::common

diff --git a/ansible/roles/common/templates/sudoers.j2 b/ansible/roles/common/templates/sudoers.j2
@@ -0,0 +1,4 @@
+Defaults lecture_file="/etc/sudo_lecture"
+Defaults insults
+
+# vim: ft=sudoers.j2: