---
  - hosts: all
    gather_facts: false
    become: true

    tasks: 
      - name: Passwordless Apache reload
        lineinfile:
          line: "%wheel     ALL= NOPASSWD: /usr/sbin/service httpd reload"
          dest: /etc/sudoers.d/apache_reload
          state: present
          create: yes
          mode: 0440

      - name: Sane sudo timeout
        lineinfile:
          line: "Defaults:%wheel timestamp_timeout=20"
          dest: /etc/sudoers.d/sane_timeout
          state: present
          create: yes
          mode: 0440