From 1c687a62d42948bb69956c9c3f693f6052be9ce2 Mon Sep 17 00:00:00 2001
From: iFargle <albert@sysctl.io>
Date: Thu, 6 Jul 2023 13:16:24 +0900
Subject: [PATCH] test

---
 services/telegraf.nix | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/services/telegraf.nix b/services/telegraf.nix
index 7cd3320e..4d35a188 100644
--- a/services/telegraf.nix
+++ b/services/telegraf.nix
@@ -9,9 +9,15 @@
 
   users.users.telegraf = {
     extraGroups = [ "wheel" ];
-    isNormalUser = true;
+    isSystemUser = true;
   };
 
+  # Allow the telegraf account to invoke sudo without a password
+  security.sudo.extraConfig = ''
+    telegraf ALL=(root) NOEXEC: NOPASSWD: FAIL2BAN
+    Defaults!FAIL2BAN !logfile, !syslog, !pam_session
+  '';
+
   # Install the package
   environment.systemPackages = with pkgs; [
     lm_sensors