# Allow wake user to reload/restart services without password (ADR-0116,
# OpenRC equivalent of pkg/linux/sudoers-wake).
# Required by waked asset_manager post-deploy actions:
#   rc-service <svc> reload  — SIGHUP for wake lock-free .thrt/.mmdb/.overlay
#                              swap (rsyslog.initd's custom reload command)
#   rc-service <svc> restart — full restart after rulebase/config deploy
#   install/mkdir            — deploy configs/rulebases to system directories
#
# The service name is configurable from wakeweb (default: rsyslog); the
# wildcard covers waked-edge/waked-collector restarts too.
#
# Install: cp sudoers-wake-alpine /etc/sudoers.d/wake && chmod 440 /etc/sudoers.d/wake
wake ALL=(root) NOPASSWD: /sbin/rc-service * reload, /sbin/rc-service * restart
wake ALL=(root) NOPASSWD: /usr/bin/install, /bin/mkdir
