# sudoers configuraton; per-host declarations go in /etc/sudoers.d
# {{ ansible_managed }}

Defaults	env_reset
Defaults	mail_badpass
Defaults	secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"

Cmnd_Alias BACKUPS = /usr/bin/rsync, /var/backups/timestamp.sh

root	ALL=(ALL:ALL) NOPASSWD: ALL
backup	ALL=(root) NOPASSWD: BACKUPS
deploy	ALL=(ALL:ALL) NOPASSWD: /bin/sh
%sudo	ALL=(ALL:ALL) NOPASSWD: ALL

{% if ansible_local.moe_release is defined and ansible_local.moe_release.debian_version|int >= 11 %}
@includedir /etc/sudoers.d
{% else %}
#includedir /etc/sudoers.d
{% endif %}