build

roles/zabbix_proxy/tasks/Rocky.yml

@@ -20,6 +20,15 @@
       set_fact:
         clustename: "rocky9"
 
+    - name: Allow user to start/stop zabbix-proxy with sudo without password
+      ansible.builtin.copy:
+        dest: "/etc/sudoers.d/{{ zabbix_user }}-zabbix-proxy"
+        content: "{{ zabbix_user }} ALL=(ALL) NOPASSWD: /bin/systemctl start zabbix-proxy, /bin/systemctl stop zabbix-proxy"
+        owner: root
+        group: root
+        mode: '0440'
+
+
     - name: Configure global DNF proxy
       ansible.builtin.lineinfile:
         path: /etc/dnf/dnf.conf