#
# Cookbook Name:: kosmos-base
# Recipe:: default
#

# Searches data bag "users" for groups attribute "sysadmin".
# Places returned users in Unix group "sysadmin" with GID 2300.
users_manage "sysadmin" do
  group_id 2300
  action %i[remove create]
end

sudo "sysadmin" do
  groups "sysadmin"
  nopasswd true
  defaults [
    # not default on Ubuntu, explicitely enable. Uses a minimal white list of
    # environment variables
    "env_reset",
    # Send emails on unauthorized attempts
    "mail_badpass",
    'secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin"'
  ]
end