%emdebian ALL=(emdebian) ALL
%forums ALL=(forums) ALL
%httpredir ALL=(httpredir) ALL
-%httpredir ALL=(httpredir-all) ALL
+%httpredir ALL=(httpredir-app) ALL
%keyring ALL=(keyring) ALL
%lintian ALL=(lintian) ALL
%listweb ALL=(listweb) ALL
# and ftpmaster can access the role user for their web services
%debadmin FTPHOSTS=(dak-web) ALL
+# the httpredir role use can run things as httpredir-app
+httpredir ALL=(httpredir-app) NOPASSWD: ALL
+
# some groups are in apachectrl on "their" hosts so they can reload apache and update their vhost
%apachectrl ALL=(root) /usr/sbin/apache2-vhost-update
%backports franck,coccia=(staticsync) NOPASSWD: /usr/local/bin/static-update-component backports.debian.org
d-i dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component d-i.debian.org
+lucas dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component debaday.debian.net
dsa dillon=(staticsync) NOPASSWD: /usr/local/bin/static-update-component dsa.debian.org
dak franck=(staticsync) NOPASSWD: /usr/local/bin/static-update-component incoming.debian.org
dak franck=(staticsync) NOPASSWD: /usr/local/bin/static-update-component metadata.ftp-master.debian.org