class profiles::sudo {
  file { '/etc/sudoers':
    validate_cmd => '/usr/bin/visudo -cf %',
    content      => @(EOF)
      Defaults  insults
      root   ALL=(ALL) ALL
      %root  ALL=(ALL) ALL
      %wheel ALL=(ALL) ALL

      @includedir /etc/sudoers.d
      | EOF
  }

  file { '/etc/sudoers.d':
    ensure => directory,
  }
}