SUdoers example for cherrypy and celery

gistfile1.txt

# This gist assumes you have a cherrypy server configured with name "powwow-webapp"
# and two celery queues -- all running on the same machine
# In production you'd want the webserver and celery should be on different machines

#Allow powwow user to restart apache and cherrypy (webapp)
Cmnd_Alias POWWOW_WEB=/bin/systemctl restart httpd, /bin/systemctl restart powwow-webapp, /bin/systemctl stop httpd, /bin/systemctl start httpd, /bin/systemctl stop powwow-webapp, /bin/systemctl start powwow-webapp
Cmnd_Alias POWWOW_CELERY=/bin/systemctl start celeryd, /bin/systemctl start long-job-celeryd, /bin/systemctl stop celeryd, /bin/systemctl stop long-job-celeryd,/bin/systemctl restart celeryd,/bin/systemctl restart long-job-celeryd

# we allow the powwow user to execute these as root without entering passwords, so they can be called from a fab script
powwow ALL=(root) NOPASSWD: POWWOW_WEB, POWWOW_CELERY