# passwordless sudo systemctl ... for group nordvpn
%nordvpn ALL=NOPASSWD: /bin/systemctl stop nordvpnd.service
%nordvpn ALL=NOPASSWD: /bin/systemctl start nordvpnd.service
%nordvpn ALL=NOPASSWD: /bin/systemctl stop nordvpnd.socket
%nordvpn ALL=NOPASSWD: /bin/systemctl start nordvpnd.socket
%nordvpn ALL=NOPASSWD: /bin/systemctl restart nordvpnd.service
# used in my scripts and nordvpn.service.d and yggdrasil.service.d to ensure
# it works
%nordvpn ALL=NOPASSWD: /bin/systemctl restart yggdrasil.service
# used in my scripts of disconnecting from nordvpn and restoring IPv6
%nordvpn ALL=NOPASSWD: /bin/systemctl restart iwd.service
%nordvpn ALL=NOPASSWD: /bin/systemctl restart systemd-networkd.service
# Tells Chrony we are connected and thus maybe connects to IPv6 NTP servers
%nordvpn ALL=NOPASSWD: /usr/bin/chronyc online
# Clearing DNS caches once we are disconnected
%nordvpn ALL=NOPASSWD: /bin/systemctl restart unbound.service
%nordvpn ALL=NOPASSWD: /bin/systemctl restart systemd-resolved.service
# Tor complains about failures for a while and then notes IP change and
# regenerates keys, so it should probably be here too.
%nordvpn ALL=NOPASSWD: /bin/systemctl restart tor.service
%nordvpn ALL=NOPASSWD: /bin/systemctl restart tor-client.service
# vim: filetype=sudoers