From 192313804cb999371af5c99d407f1f8380b97534 Mon Sep 17 00:00:00 2001 From: Simon Cornet Date: Sat, 21 Dec 2024 23:31:13 +0100 Subject: [PATCH] [usermanagement] feat: allow drone to use systemctl on revproxies --- templates/usermanagement/sudoers.d/sudoers.j2 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/templates/usermanagement/sudoers.d/sudoers.j2 b/templates/usermanagement/sudoers.d/sudoers.j2 index f7a40e8..2a8dc3e 100644 --- a/templates/usermanagement/sudoers.d/sudoers.j2 +++ b/templates/usermanagement/sudoers.d/sudoers.j2 @@ -25,8 +25,8 @@ drone rp01.siempie.internal=(root) NOPASSWD:/usr/bin/systemctl status nginx {% endif %} {% if inventory_hostname == 'rp02.siempie.internal' %} drone rp02.siempie.internal=(root) NOPASSWD:/usr/bin/rclone * -drone rp01.siempie.internal=(root) NOPASSWD:/usr/bin/systemctl reload nginx -drone rp01.siempie.internal=(root) NOPASSWD:/usr/bin/systemctl status nginx +drone rp02.siempie.internal=(root) NOPASSWD:/usr/bin/systemctl reload nginx +drone rp02.siempie.internal=(root) NOPASSWD:/usr/bin/systemctl status nginx {% endif %} {% if inventory_hostname == 'wireguard.do.simoncor.net' %} drone wireguard.do.simoncor.net=(root) NOPASSWD:/usr/bin/rclone *