shell: adapt main sudoers configuration to bullseye

shell/tasks/sudo.yml

@@ -9,8 +9,8 @@
     - sudo
 
 - name: ensure we got a sane sudo config
-  copy:
-    src: sudo/default
+  template:
+    src: sudoers.j2
     dest: /etc/sudoers
     owner: root
     group: root

shell/files/sudo/default → shell/templates/sudoers.j2

@@ -19,6 +19,12 @@ Defaults	secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/b
 # User privilege specification
 root	ALL=(ALL:ALL) ALL
 
+{% if ansible_distribution_major_version|int(default=99) < 11 %}
 # See sudoers(5) for more information on "#include" directives:
 
 #includedir /etc/sudoers.d
+{% else %}
+# See sudoers(5) for more information on "@include" directives:
+
+@includedir /etc/sudoers.d
+{% endif %}