paulbsd-salt/states/sudo/defaults.yaml

---
sudo:
  config:
    defaults:
      - 'env_reset'
      - 'mail_badpass'
      - 'secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"'
      - 'env_keep += "EDITOR"'
      - 'always_set_home'
    acls:
      root:
        group: false
        host: ALL
        who: ALL:ALL
        command: ALL
      admin:
        group: true
        host: ALL
        who: ALL
        command: ALL
      sudo:
        group: true
        host: ALL
        who: ALL:ALL
        command: ALL