jjkiers/cloudron-box
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity
Files
ae30fe25d70a449a973247579b44b50f4e9ef1ba
cloudron-box/setup/start/sudoers

72 lines
3.7 KiB
Plaintext
Raw Normal View History

workaround journalctl logging bug
2015-12-22 13:05:00 -08:00
# sudo logging breaks journalctl output with very long urls (systemd bug)
Defaults !syslog
consolidate storage validation logic
2022-06-03 10:56:50 -07:00
Defaults!/home/yellowtent/box/src/scripts/checkvolume.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/checkvolume.sh
Fixup volume management Fixes related to removing directory and directory perms
2019-01-18 14:48:31 -08:00
Defaults!/home/yellowtent/box/src/scripts/clearvolume.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/clearvolume.sh
app.portBindings and newManifest.tcpPorts may be null
2015-07-20 00:09:47 -07:00
backups (tgz): work with a layout this will allow us to place the localstorage directory in an arbitrary location
2018-12-20 14:33:29 -08:00
Defaults!/home/yellowtent/box/src/scripts/mvvolume.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/mvvolume.sh
Defaults!/home/yellowtent/box/src/scripts/mkdirvolume.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/mkdirvolume.sh
remove all uses of sudoSync
2018-11-25 14:43:29 -08:00
Defaults!/home/yellowtent/box/src/scripts/rmaddondir.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/rmaddondir.sh
Upgrade the db addons using dumps when major version changes
2018-10-15 14:31:35 -07:00
Use BOX_ENV instead of NODE_ENV Let NODE_ENV be used by node modules and always be set to production Fixes #453
2015-07-24 01:42:28 -07:00
Defaults!/home/yellowtent/box/src/scripts/reboot.sh env_keep="HOME BOX_ENV"
app.portBindings and newManifest.tcpPorts may be null
2015-07-20 00:09:47 -07:00
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/reboot.sh
collect logs using a sudo script docker logs can only be read by root
2015-08-08 19:04:56 -07:00
Defaults!/home/yellowtent/box/src/scripts/collectlogs.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/collectlogs.sh
add retire.sh this is a sudo script that retires the box
2016-01-25 17:54:02 -08:00
Allow update.sh to be run as root
2016-10-31 14:55:06 +01:00
Defaults!/home/yellowtent/box/src/scripts/update.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/update.sh
Add authorized_keys.sh
2017-03-07 15:16:18 +01:00
rework code to enable/disable remote support we had a generic ssh key management api. this was causing issues because the ssh format is more complicated than what we had implemented. currently, the only use case we have is to add our ssh key. Fixes #600
2018-12-19 11:47:15 -08:00
Defaults!/home/yellowtent/box/src/scripts/remotesupport.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/remotesupport.sh
Call backuptask.js directly as root to avoid trampoline shell scripts
2017-04-17 15:10:29 +02:00
merge the logrotate scripts
2017-09-12 21:45:42 -07:00
Defaults!/home/yellowtent/box/src/scripts/configurelogrotate.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/configurelogrotate.sh
Rework backuptask into tar.js This makes it easy to integrate another backup strategy as the next step
2017-09-17 18:50:26 -07:00
move backupupload.js to scripts it is just a sudo helper
2018-11-29 23:30:54 -08:00
Defaults!/home/yellowtent/box/src/scripts/backupupload.js env_keep="HOME BOX_ENV"
Defaults!/home/yellowtent/box/src/scripts/backupupload.js closefrom_override
yellowtent ALL=(root) NOPASSWD:SETENV: /home/yellowtent/box/src/scripts/backupupload.js
Rework backuptask into tar.js This makes it easy to integrate another backup strategy as the next step
2017-09-17 18:50:26 -07:00
Add route to restore box from backup Part of #439
2017-11-22 11:16:44 -08:00
Defaults!/home/yellowtent/box/src/scripts/restart.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/restart.sh
graphite: restart collectd as well
2021-03-23 11:01:14 -07:00
Defaults!/home/yellowtent/box/src/scripts/restartservice.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/restartservice.sh
Add proftpd as service
2019-03-18 19:02:32 -07:00
Add option to remove mailbox data Fixes #720
2020-07-27 22:26:10 -07:00
Defaults!/home/yellowtent/box/src/scripts/rmmailbox.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/rmmailbox.sh
run tasks as separate cgroup via systemd this allows us to adjust the nice value and memory settings per task part of #691
2020-08-06 14:36:25 -07:00
Defaults!/home/yellowtent/box/src/scripts/starttask.sh env_keep="HOME BOX_ENV"
Kill all tasks on shutdown and startup BindsTo will kill all the tasks when systemctl stop box is executed. But when restarted, it keeps the tasks running. Because of this behavior, we kill the tasks on startup and stop of the box code.
2020-08-06 22:04:46 -07:00
yellowtent ALL=(root) NOPASSWD:SETENV: /home/yellowtent/box/src/scripts/starttask.sh
run tasks as separate cgroup via systemd this allows us to adjust the nice value and memory settings per task part of #691
2020-08-06 14:36:25 -07:00
Defaults!/home/yellowtent/box/src/scripts/stoptask.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/stoptask.sh
firewall: implement blocklist
2020-08-31 18:22:33 -07:00
Defaults!/home/yellowtent/box/src/scripts/setblocklist.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/setblocklist.sh
Handle exposed ldap allowlist
2021-12-10 16:20:58 +01:00
Defaults!/home/yellowtent/box/src/scripts/setldapallowlist.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/setldapallowlist.sh
volumes: generate systemd mount files based on mount type
2021-05-12 18:00:43 -07:00
Defaults!/home/yellowtent/box/src/scripts/addmount.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/addmount.sh
Defaults!/home/yellowtent/box/src/scripts/rmmount.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/rmmount.sh
add volume remount
2021-10-11 15:51:16 +02:00
Defaults!/home/yellowtent/box/src/scripts/remountmount.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/remountmount.sh
create a separate support user This creates a separate user named 'cloudron-support' using which we can provide remote support. The hyphen username convention follows the systemd sytem username convention. With a separate user, we don't need to ask users to keep changing PermitRootLogin (and remind them to change it back). Using a sudo user has various advantages: * https://askubuntu.com/questions/687249/why-does-ubuntu-have-a-disabled-root-account * https://wiki.debian.org/sudo * https://askubuntu.com/questions/16178/why-is-it-bad-to-log-in-as-root The yellowtent user is also locked down further - no password and no shell login.
2022-03-30 14:27:39 -07:00
add system.du
2022-10-11 22:58:12 +02:00
Defaults!/home/yellowtent/box/src/scripts/du.sh env_keep="HOME BOX_ENV"
yellowtent ALL=(root) NOPASSWD: /home/yellowtent/box/src/scripts/du.sh
create a separate support user This creates a separate user named 'cloudron-support' using which we can provide remote support. The hyphen username convention follows the systemd sytem username convention. With a separate user, we don't need to ask users to keep changing PermitRootLogin (and remind them to change it back). Using a sudo user has various advantages: * https://askubuntu.com/questions/687249/why-does-ubuntu-have-a-disabled-root-account * https://wiki.debian.org/sudo * https://askubuntu.com/questions/16178/why-is-it-bad-to-log-in-as-root The yellowtent user is also locked down further - no password and no shell login.
2022-03-30 14:27:39 -07:00
add system.du
2022-10-11 22:58:12 +02:00
cloudron-support ALL=(ALL) NOPASSWD: ALL
Reference in New Issue Copy Permalink