add wg prom exporter

2026-09-11 21:32:27 +02:00
parent 20cbf01040
commit 9fc28377d7
3 changed files with 14 additions and 1 deletions
@@ -32,6 +32,15 @@
    mode: "0644"
  notify: Restart wireguard exporter

+- name: Allow exporter to run wg via sudo
+  ansible.builtin.copy:
+    content: "{{ wireguard_exporter_user }} ALL=(root) NOPASSWD: /usr/bin/wg\n"
+    dest: /etc/sudoers.d/wireguard_exporter
+    owner: root
+    group: root
+    mode: "0440"
+    validate: /usr/sbin/visudo -cf %s
+
 - name: Enable and start wireguard exporter
  ansible.builtin.systemd:
    name: "{{ wireguard_exporter_service }}"