shell-things/etc/sudoers.d/nordvpnd

# passwordless sudo systemctl ... for group nordvpn
%nordvpn ALL=NOPASSWD: /bin/systemctl stop nordvpnd.service
%nordvpn ALL=NOPASSWD: /bin/systemctl start nordvpnd.service
%nordvpn ALL=NOPASSWD: /bin/systemctl stop nordvpnd.socket
%nordvpn ALL=NOPASSWD: /bin/systemctl start nordvpnd.socket
%nordvpn ALL=NOPASSWD: /bin/systemctl restart nordvpnd.service
%nordvpn ALL=NOPASSWD: /usr/sbin/sysctl net.ipv6.conf.all.disable_ipv6=0
# used in my scripts and nordvpn.service.d and yggdrasil.service.d to ensure
# it works
%nordvpn ALL=NOPASSWD: /bin/systemctl restart yggdrasil.service
# used in my scripts of disconnecting from nordvpn and restoring IPv6
%nordvpn ALL=NOPASSWD: /bin/systemctl restart iwd.service
%nordvpn ALL=NOPASSWD: /bin/systemctl restart systemd-networkd.service
# Tells Chrony we are connected and thus maybe connects to IPv6 NTP servers
%nordvpn ALL=NOPASSWD: /usr/bin/chronyc online
# Clearing DNS caches once we are disconnected
#%nordvpn ALL=NOPASSWD: /bin/systemctl restart unbound.service
%nordvpn ALL=NOPASSWD: /usr/sbin/unbound-control reload
#%nordvpn ALL=NOPASSWD: /bin/systemctl restart systemd-resolved.service
%nordvpn ALL=NOPASSWD: /usr/bin/resolvectl flush-caches
# Tor complains about failures for a while and then notes IP change and
# regenerates keys, so it should probably be here too.
%nordvpn ALL=NOPASSWD: /bin/systemctl restart tor.service
%nordvpn ALL=NOPASSWD: /bin/systemctl restart tor-client.service
# vim: filetype=sudoers