flyingscorpio/self-hosting
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Set more specific sudoers permissions for git user

Browse source
This commit is contained in:
Tunui Franken 2024-04-07 12:49:52 +02:00
parent e0cfde4c9f
commit 808a40ac68
2 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
roles/forgejo/tasks/unix.yml
View file

@ -46,8 +46,8 @@
- name: Set sudoer permissions to git user - name: Set sudoer permissions to git user
become: true become: true
ansible.builtin.copy: ansible.builtin.template:
content: 'git ALL=(root) NOPASSWD:/usr/bin/systemctl' src: sudoers.d/git.j2
dest: /etc/sudoers.d/git dest: /etc/sudoers.d/git
owner: root owner: root
group: root group: root

2
roles/forgejo/templates/sudoers.d/git.j2 Normal file
View file

@ -0,0 +1,2 @@
git ALL=(root) NOPASSWD:/usr/bin/systemctl stop forgejo.service
git ALL=(root) NOPASSWD:/usr/bin/systemctl restart forgejo.service