From 36664f243eec4b09df523b318c54789c5780e8d0 Mon Sep 17 00:00:00 2001
From: Jakub Dorfman <jacobdorfman@gmail.com>
Date: Sun, 26 Apr 2026 20:16:42 +0200
Subject: [PATCH] Add sudo rules for reudy to allow NOPASSWD systemctl reload
 for caddy and update panelctl.sh to use docker.io for image reference

Co-authored-by: Copilot <copilot@github.com>
---
 configuration.nix | 11 +++++++++++
 panel/panelctl.sh |  2 +-
 2 files changed, 12 insertions(+), 1 deletion(-)

diff --git a/configuration.nix b/configuration.nix
index 92a2bf1..c97b1ec 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -80,6 +80,17 @@
   };
 
   security.sudo.wheelNeedsPassword = true;
+  security.sudo.extraRules = [
+    {
+      users = [ "reudy" ];
+      commands = [
+        {
+          command = "${pkgs.systemd}/bin/systemctl reload caddy";
+          options = [ "NOPASSWD" ];
+        }
+      ];
+    }
+  ];
 
 
   services.openssh = {
diff --git a/panel/panelctl.sh b/panel/panelctl.sh
index 61382eb..9b24555 100644
--- a/panel/panelctl.sh
+++ b/panel/panelctl.sh
@@ -171,7 +171,7 @@ write_default_compose() {
   cat >"${stack_dir}/compose.yaml" <<EOF
 services:
   app:
-    image: traefik/whoami:latest
+    image: docker.io/traefik/whoami:latest
     restart: unless-stopped
     ports:
       - "127.0.0.1:${port}:80"