---
- name: Ensure sudo is installed
  become: yes
  package:
    pkg: sudo
    state: present

- name: Copy sudoers file including validation
  become: yes
  template:
    src: sudoers.j2
    dest: /etc/sudoers.d/sudoers
    validate: 'visudo -cf %s'
    backup: yes
    owner: root
    group: root
    mode: 0440
  notify: lock root user

- name: requiretty in sudoers
  become: yes
  lineinfile:
    backup: yes
    regexp: "Defaults    !?requiretty"
    state: present
    dest: /etc/sudoers
    line: "Defaults    !requiretty"
    validate: "visudo -c -f %s"