From e31d394c3d67af6be0c1cbd9a63c84f6800efca0 Mon Sep 17 00:00:00 2001 From: Miraty Date: Sat, 4 Nov 2023 16:19:31 +0100 Subject: [PATCH] sudoers: fix certbot arguments order --- mkosi.extra/install/sudoers | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/mkosi.extra/install/sudoers b/mkosi.extra/install/sudoers index 512824c..83ff1d0 100644 --- a/mkosi.extra/install/sudoers +++ b/mkosi.extra/install/sudoers @@ -1,6 +1,6 @@ servnest ALL=(root) NOPASSWD: /usr/bin/systemctl reload tor servnest ALL=(root) NOPASSWD: /usr/bin/chgrp ^--no-dereference -- sftpgo /srv/servnest/ht/fs/[0-9a-f]{64}$ -servnest ALL=(root) NOPASSWD: /usr/bin/certbot ^certonly( --test-cert)? --domain ([a-z0-9_-]{1,63}\.){1,126}[a-z0-9]{1,63}$ +servnest ALL=(root) NOPASSWD: /usr/bin/certbot ^certonly --domain ([a-z0-9_-]{1,63}\.){1,126}[a-z0-9]{1,63}( --test-cert)?$ servnest ALL=(root) NOPASSWD: /usr/bin/certbot ^delete --quiet --cert-name ([a-z0-9_-]{1,63}\.){1,126}[a-z0-9]{1,63}$ servnest ALL=(tor) NOPASSWD: /usr/bin/cat ^-- /srv/servnest/tor-keys/[0-9a-f]{64}/[a-zA-Z0-9_-]{1,64}/hostname$ servnest ALL=(tor) NOPASSWD: /usr/bin/mkdir ^--mode=0700 -- /srv/servnest/tor-keys/[0-9a-f]{64}$