# Narrow service privileges for teleo-auto-deploy.service, which runs as teleo. # Keep command forms aligned with deploy/auto-deploy.sh. teleo ALL=(root) NOPASSWD: /usr/bin/systemctl restart leoclean-gateway teleo ALL=(root) NOPASSWD: /bin/systemctl restart leoclean-gateway teleo ALL=(root) NOPASSWD: /usr/bin/systemctl restart leoclean-gateway.service teleo ALL=(root) NOPASSWD: /bin/systemctl restart leoclean-gateway.service teleo ALL=(root) NOPASSWD: /usr/bin/systemctl status leoclean-gateway teleo ALL=(root) NOPASSWD: /bin/systemctl status leoclean-gateway teleo ALL=(root) NOPASSWD: /usr/bin/systemctl status leoclean-gateway.service teleo ALL=(root) NOPASSWD: /bin/systemctl status leoclean-gateway.service teleo ALL=(root) NOPASSWD: /usr/bin/journalctl -u leoclean-gateway teleo ALL=(root) NOPASSWD: /bin/journalctl -u leoclean-gateway teleo ALL=(root) NOPASSWD: /usr/bin/journalctl -u leoclean-gateway.service teleo ALL=(root) NOPASSWD: /bin/journalctl -u leoclean-gateway.service