20 lines
603 B
Plaintext
20 lines
603 B
Plaintext
|
# sudoers configuraton; per-host declarations go in /etc/sudoers.d
|
||
|
|
# {{ ansible_managed }}
|
||
|
|
|
||
|
|
Defaults env_reset
|
||
|
|
Defaults mail_badpass
|
||
|
|
Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
|
||
|
|
|
||
|
|
Cmnd_Alias BACKUPS = /usr/bin/rsync, /var/backups/timestamp.sh
|
||
|
|
|
||
|
|
root ALL=(ALL:ALL) NOPASSWD: ALL
|
||
|
|
backup ALL=(root) NOPASSWD: BACKUPS
|
||
|
|
deploy ALL=(ALL:ALL) NOPASSWD: /bin/sh
|
||
|
|
%sudo ALL=(ALL:ALL) NOPASSWD: ALL
|
||
|
|
|
||
|
|
{% if ansible_local.moe_release is defined and ansible_local.moe_release.debian_version|int >= 11 %}
|
||
|
|
@includedir /etc/sudoers.d
|
||
|
|
{% else %}
|
||
|
|
#includedir /etc/sudoers.d
|
||
|
|
{% endif %}
|