---

- name: (sudoers-pc.yml) update specific sudoers configuration files (/etc/sudoers.d/)
  ansible.builtin.template:
    src: etc/sudoers.d/50-user.pc.j2
    dest: /etc/sudoers.d/50-user
    validate: visudo -cf %s
    owner: root
    group: root
    mode: "0440"
  tags:
    - sudoers-file-configuration

- name: (sudoers-pc.yml) update global sudoers configuration file
  ansible.builtin.template:
    src: etc/sudoers.pc.j2
    dest: /etc/sudoers
    owner: root
    group: root
    mode: "0440"
    validate: visudo -cf %s
  tags:
    - sudoers-global-configuration

# - name: (sudoers-pc.yml) Ensure all sudo_users are in sudo group
#  user:
#    name: "{{ item }}"
#    groups: sudo
#    append: yes
#  with_items: "{{ sudo_pc_users }}"
#  tags:
#    - sudo-users

- name: (sudoers-pc.yml) Ensure all sudo_users are in sudo group
  ansible.builtin.user:
    name: "{{ item }}"
    groups: sudo
    append: true
  with_items: "{{ sudo_pc_users }}"
  tags:
    - sudo-users