Grant user to manage its own systemd service

conf/sudoers

@@ -0,0 +1,5 @@
+# Grant sudo permissions to the user to manage his own systemd service
+homeassistant ALL=(ALL) NOPASSWD: /bin/systemctl stop homeassistant@homeassistant.service
+homeassistant ALL=(ALL) NOPASSWD: /bin/systemctl start homeassistant@homeassistant.service
+homeassistant ALL=(ALL) NOPASSWD: /bin/systemctl restart homeassistant@homeassistant.service
+homeassistant ALL=(ALL) NOPASSWD: /bin/systemctl status homeassistant@homeassistant.service

scripts/backup

@@ -20,4 +20,5 @@ home_path="/home/$app"
 ynh_backup "$final_path"
 ynh_backup "$home_path"
 ynh_backup "/etc/nginx/conf.d/$domain.d/$app.conf"
+ynh_backup "/etc/sudoers.d/$app"
 ynh_backup "/etc/systemd/system/$app@$app.service"

scripts/install

@@ -36,6 +36,10 @@ ynh_exec_fully_quiet yunohost firewall allow TCP $port
 # create a dedicated system user
 ynh_system_user_create $app
 
+# grant sudo permissions to the user to manage his own systemd service
+myynh_create_dir "/etc/sudoers.d"
+cp "../sudoers" "/etc/sudoers.d/$app"
+
 # create a directory for the installation of Home Assistant
 myynh_create_dir "$final_path"
 chown $app: "$final_path"

scripts/remove

@@ -42,3 +42,6 @@ ynh_exec_fully_quiet yunohost firewall disallow TCP $port
 
 # delete a system user
 ynh_system_user_delete "$app"
+
+# remove sudoers file
+ynh_secure_remove "/etc/sudoers.d/$app"

scripts/restore

@@ -33,6 +33,7 @@ ynh_system_user_create "$app"
 
 # restore conf files
 ynh_restore_file "/etc/nginx/conf.d/$domain.d/$app.conf"
+ynh_restore_file "/etc/sudoers.d/$app"
 ynh_restore_file "/etc/systemd/system/$app@$app.service"
 
 # restore source

scripts/upgrade

@@ -23,6 +23,10 @@ if [ -f "/etc/yunohost/apps/$app/scripts/backup" ] ; then
   }
 fi
 
+# grant sudo permissions to the user to manage his own systemd service
+myynh_create_dir "/etc/sudoers.d"
+cp "../sudoers" "/etc/sudoers.d/$app"
+
 # add required packages
 ynh_install_app_dependencies "$PKG_DEPENDENCIES"