setup/start/sudoers

# sudo logging breaks journalctl output with very long urls (systemd bug)
Defaults !syslog

Defaults!/home/yellowtent/box/src/scripts/createappdir.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/createappdir.sh

Defaults!/home/yellowtent/box/src/scripts/rmappdir.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/rmappdir.sh

Defaults!/home/yellowtent/box/src/scripts/reloadnginx.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/reloadnginx.sh

Defaults!/home/yellowtent/box/src/scripts/reboot.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/reboot.sh

Defaults!/home/yellowtent/box/src/scripts/reloadcollectd.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/reloadcollectd.sh

Defaults!/home/yellowtent/box/src/scripts/collectlogs.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/collectlogs.sh

Defaults!/home/yellowtent/box/src/scripts/retire.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/retire.sh

Defaults!/home/yellowtent/box/src/scripts/update.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/update.sh

Defaults!/home/yellowtent/box/src/scripts/authorized_keys.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/authorized_keys.sh

Defaults!/home/yellowtent/box/src/scripts/node.sh env_keep="HOME BOX_ENV NODE_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/node.sh

Defaults!/home/yellowtent/box/src/scripts/mvlogrotateconfig.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/mvlogrotateconfig.sh

Defaults!/home/yellowtent/box/src/scripts/rmlogrotateconfig.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/rmlogrotateconfig.sh
workaround journalctl logging bug 2015-12-22 13:05:00 -08:00			`# sudo logging breaks journalctl output with very long urls (systemd bug)`
			`Defaults !syslog`

Use BOX_ENV instead of NODE_ENV Let NODE_ENV be used by node modules and always be set to production Fixes #453 2015-07-24 01:42:28 -07:00			`Defaults!/home/yellowtent/box/src/scripts/createappdir.sh env_keep="HOME BOX_ENV"`
app.portBindings and newManifest.tcpPorts may be null 2015-07-20 00:09:47 -07:00			`yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/createappdir.sh`

Use BOX_ENV instead of NODE_ENV Let NODE_ENV be used by node modules and always be set to production Fixes #453 2015-07-24 01:42:28 -07:00			`Defaults!/home/yellowtent/box/src/scripts/rmappdir.sh env_keep="HOME BOX_ENV"`
app.portBindings and newManifest.tcpPorts may be null 2015-07-20 00:09:47 -07:00			`yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/rmappdir.sh`

Use BOX_ENV instead of NODE_ENV Let NODE_ENV be used by node modules and always be set to production Fixes #453 2015-07-24 01:42:28 -07:00			`Defaults!/home/yellowtent/box/src/scripts/reloadnginx.sh env_keep="HOME BOX_ENV"`
app.portBindings and newManifest.tcpPorts may be null 2015-07-20 00:09:47 -07:00			`yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/reloadnginx.sh`

Use BOX_ENV instead of NODE_ENV Let NODE_ENV be used by node modules and always be set to production Fixes #453 2015-07-24 01:42:28 -07:00			`Defaults!/home/yellowtent/box/src/scripts/reboot.sh env_keep="HOME BOX_ENV"`
app.portBindings and newManifest.tcpPorts may be null 2015-07-20 00:09:47 -07:00			`yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/reboot.sh`

Use BOX_ENV instead of NODE_ENV Let NODE_ENV be used by node modules and always be set to production Fixes #453 2015-07-24 01:42:28 -07:00			`Defaults!/home/yellowtent/box/src/scripts/reloadcollectd.sh env_keep="HOME BOX_ENV"`
app.portBindings and newManifest.tcpPorts may be null 2015-07-20 00:09:47 -07:00			`yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/reloadcollectd.sh`

collect logs using a sudo script docker logs can only be read by root 2015-08-08 19:04:56 -07:00			`Defaults!/home/yellowtent/box/src/scripts/collectlogs.sh env_keep="HOME BOX_ENV"`
			`yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/collectlogs.sh`
add retire.sh this is a sudo script that retires the box 2016-01-25 17:54:02 -08:00
			`Defaults!/home/yellowtent/box/src/scripts/retire.sh env_keep="HOME BOX_ENV"`
			`yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/retire.sh`

Allow update.sh to be run as root 2016-10-31 14:55:06 +01:00			`Defaults!/home/yellowtent/box/src/scripts/update.sh env_keep="HOME BOX_ENV"`
			`yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/update.sh`
Add authorized_keys.sh 2017-03-07 15:16:18 +01:00
			`Defaults!/home/yellowtent/box/src/scripts/authorized_keys.sh env_keep="HOME BOX_ENV"`
			`yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/authorized_keys.sh`
Call backuptask.js directly as root to avoid trampoline shell scripts 2017-04-17 15:10:29 +02:00
Try to make tests work again 2017-04-23 17:39:43 -07:00			`Defaults!/home/yellowtent/box/src/scripts/node.sh env_keep="HOME BOX_ENV NODE_ENV"`
Add generic node.sh to run node apps as root and with memory limitations 2017-04-20 15:12:43 +02:00			`yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/node.sh`
Add logrotate support for *.log files in /run mounts of apps logrotate config files may contain arbitrary commands which are exectued as root, thus the config files have to be owned by root. This is the reason we need the sudo scripts :-/ To test the generated scripts, just run: $ logrotate /etc/logrotate.conf -v Fixes #396 2017-08-11 22:05:31 +02:00
			`Defaults!/home/yellowtent/box/src/scripts/mvlogrotateconfig.sh env_keep="HOME BOX_ENV"`
			`yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/mvlogrotateconfig.sh`

			`Defaults!/home/yellowtent/box/src/scripts/rmlogrotateconfig.sh env_keep="HOME BOX_ENV"`
			`yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/rmlogrotateconfig.sh`