INF-113 acme.sh LetsEncrypt certificate role
initial commit
Change-Id: I36f733306b439a0cd92bded0726dd53a0a4b4084
diff --git a/templates/acme_sudoers.j2 b/templates/acme_sudoers.j2
new file mode 100644
index 0000000..ade0dca
--- /dev/null
+++ b/templates/acme_sudoers.j2
@@ -0,0 +1,8 @@
+{#
+SPDX-FileCopyrightText: © 2020 Open Networking Foundation <support@opennetworking.org>
+SPDX-License-Identifier: Apache-2.0
+#}
+# acme templates/acme_sudoers.j2 - {{ ansible_managed }}
+
+# allow the acme user to restart the webserver service as root
+{{ acmesh_username }} ALL = (root) NOPASSWD: /bin/systemctl restart {{ webserver_service }}