ansible/common
ansible/common
1
0
Fork 0
Code Issues Pull requests Releases Activity

[usermanagement] feat: allow drone to use systemctl on revproxies

Browse source
This commit is contained in:
Simon Cornet 2024-12-14 11:12:56 +01:00
commit f01b1dc9a9
1 changed files with 9 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

18
templates/usermanagement/sudoers.d/sudoers.j2
View file

@ -15,19 +15,19 @@ drone packer.siempie.internal=(root) NOPASSWD:/usr/local/bin/packer *
drone registry.siempie.internal=(root) NOPASSWD:/usr/bin/docker * drone registry.siempie.internal=(root) NOPASSWD:/usr/bin/docker *
{% endif %} {% endif %}
{% if inventory_hostname == 'rp01.siempie.internal' %} {% if inventory_hostname == 'rp01.siempie.internal' %}
drone rp01.siempie.internal=(simon) NOPASSWD:/usr/bin/rclone * drone rp01.siempie.internal=(root) NOPASSWD:/usr/bin/rclone *
drone rp01.siempie.internal=(simon) NOPASSWD:/usr/bin/systemctl reload nginx drone rp01.siempie.internal=(root) NOPASSWD:/usr/bin/systemctl reload nginx
drone rp01.siempie.internal=(simon) NOPASSWD:/usr/bin/systemctl status nginx drone rp01.siempie.internal=(root) NOPASSWD:/usr/bin/systemctl status nginx
{% endif %} {% endif %}
{% if inventory_hostname == 'rp02.siempie.internal' %} {% if inventory_hostname == 'rp02.siempie.internal' %}
drone rp02.siempie.internal=(simon) NOPASSWD:/usr/bin/rclone * drone rp02.siempie.internal=(root) NOPASSWD:/usr/bin/rclone *
drone rp01.siempie.internal=(simon) NOPASSWD:/usr/bin/systemctl reload nginx drone rp01.siempie.internal=(root) NOPASSWD:/usr/bin/systemctl reload nginx
drone rp01.siempie.internal=(simon) NOPASSWD:/usr/bin/systemctl status nginx drone rp01.siempie.internal=(root) NOPASSWD:/usr/bin/systemctl status nginx
{% endif %} {% endif %}
{% if inventory_hostname == 'wireguard.do.simoncor.net' %} {% if inventory_hostname == 'wireguard.do.simoncor.net' %}
drone wireguard.do.simoncor.net=(simon) NOPASSWD:/usr/bin/rclone * drone wireguard.do.simoncor.net=(root) NOPASSWD:/usr/bin/rclone *
drone rp01.siempie.internal=(simon) NOPASSWD:/usr/bin/systemctl reload nginx drone rp01.siempie.internal=(root) NOPASSWD:/usr/bin/systemctl reload nginx
drone rp01.siempie.internal=(simon) NOPASSWD:/usr/bin/systemctl status nginx drone rp01.siempie.internal=(root) NOPASSWD:/usr/bin/systemctl status nginx
{% endif %} {% endif %}
{% else %} {% else %}
{% if sudo_pwless == False %} {% if sudo_pwless == False %}