sudoers.d/nordvpnd: instead of restarting DNS, allow reloading it. Also IPv6 enabling

This commit is contained in:
Aminda Suomalainen 2024-05-10 18:27:06 +03:00
parent c81c1dd7d0
commit 0cb5b0992b
Signed by: Mikaela
SSH Key Fingerprint: SHA256:CXLULpqNBdUKB6E6fLA1b/4SzG0HvKD19PbIePU175Q

View File

@ -4,6 +4,7 @@
%nordvpn ALL=NOPASSWD: /bin/systemctl stop nordvpnd.socket
%nordvpn ALL=NOPASSWD: /bin/systemctl start nordvpnd.socket
%nordvpn ALL=NOPASSWD: /bin/systemctl restart nordvpnd.service
%nordvpn ALL=NOPASSWD: /usr/sbin/sysctl net.ipv6.conf.all.disable_ipv6=0
# used in my scripts and nordvpn.service.d and yggdrasil.service.d to ensure
# it works
%nordvpn ALL=NOPASSWD: /bin/systemctl restart yggdrasil.service
@ -13,8 +14,10 @@
# Tells Chrony we are connected and thus maybe connects to IPv6 NTP servers
%nordvpn ALL=NOPASSWD: /usr/bin/chronyc online
# Clearing DNS caches once we are disconnected
%nordvpn ALL=NOPASSWD: /bin/systemctl restart unbound.service
%nordvpn ALL=NOPASSWD: /bin/systemctl restart systemd-resolved.service
#%nordvpn ALL=NOPASSWD: /bin/systemctl restart unbound.service
%nordvpn ALL=NOPASSWD: /usr/sbin/unbound-control reload
#%nordvpn ALL=NOPASSWD: /bin/systemctl restart systemd-resolved.service
%nordvpn ALL=NOPASSWD: /usr/bin/resolvectl flush-caches
# Tor complains about failures for a while and then notes IP change and
# regenerates keys, so it should probably be here too.
%nordvpn ALL=NOPASSWD: /bin/systemctl restart tor.service