diff --git a/.talismanrc b/.talismanrc
index 4fdb30d..a889184 100644
--- a/.talismanrc
+++ b/.talismanrc
@@ -15,6 +15,8 @@ fileignoreconfig:
 - filename: dotfiles/shell/profile
   ignore_detectors:
   - filename
+- filename: dotfiles/sudoers.d/bye
+  checksum: 04ea980db43af63a701f26ce1ac16594c49a5cc7196fc0958e1c00f73d07274e
 - filename: dotfiles/sudoers.d/protonvpn
   checksum: 1a86c97a80c2ae3be4d455c4db441d6d2b4d8553784e43646802dd3bf27316ef
 - filename: dotfiles/systemd_timers/gitea_backup_rsync.service
diff --git a/dotfiles/sudoers.d/bye b/dotfiles/sudoers.d/bye
new file mode 100644
index 0000000..ef8d21d
--- /dev/null
+++ b/dotfiles/sudoers.d/bye
@@ -0,0 +1,3 @@
+## Use "sudo {shutdown,reboot,halt}" without needing a password.
+$USER ALL=(root) NOPASSWD:/usr/bin/reboot,/usr/bin/halt,/usr/bin/shutdown
+