From e870f844c6827715e105d050ae0fad0a0556ef79 Mon Sep 17 00:00:00 2001 From: Josh Cohen Date: Mon, 6 Mar 2017 08:06:24 -0500 Subject: [PATCH] Add documentation for how to grant other Unix accounts Dokku access without giving them full sudo privileges. --- docs/deployment/user-management.md | 13 +++++++++++++ docs/getting-started/advanced-installation.md | 2 +- 2 files changed, 14 insertions(+), 1 deletion(-) diff --git a/docs/deployment/user-management.md b/docs/deployment/user-management.md index 17e8f924b..37000e98d 100644 --- a/docs/deployment/user-management.md +++ b/docs/deployment/user-management.md @@ -73,3 +73,16 @@ dokku ssh-keys:remove KEY_NAME ## Scoping commands to specific users Keys are given unique names, which can be used in conjunction with the [user-auth](/dokku/development/plugin-triggers/#user-auth) plugin trigger to handle command authorization. Please see the documentation on that trigger for more information. + +## Granting other Unix user accounts Dokku access + +Any Unix user account which belongs to the 'sudo' Unix group can run Dokku. However, you may want to give them Dokku access but not full sudo privileges. + +To allow other Unix user accounts to be able to run Dokku commands, without giving them full sudo access, modify your sudoers configuration. + +Use `visudo /etc/sudoers.d/dokku-users`, or `visudo /etc/sudoers` to add the following line: + +``` +%dokku ALL=(ALL:ALL) NOPASSWD:SETENV: /usr/bin/dokku +``` + diff --git a/docs/getting-started/advanced-installation.md b/docs/getting-started/advanced-installation.md index 100ee7f2e..065b68d0f 100644 --- a/docs/getting-started/advanced-installation.md +++ b/docs/getting-started/advanced-installation.md @@ -52,7 +52,7 @@ Once Dokku is installed, if you are not using the web-installer, you'll want to Set up a domain and a wildcard domain pointing to that host. Make sure `/home/dokku/VHOST` is set to this domain. By default it's set to whatever hostname the host has. This file is only created if the hostname can be resolved by dig (`dig +short $(hostname -f)`). Otherwise you have to create the file manually and set it to your preferred domain. If this file still is not present when you push your app, Dokku will publish the app with a port number (i.e. `http://example.com:49154` - note the missing subdomain). -Follow the [user management documentation](/dokku/deployment/user-management/) in order to add users to dokku. +Follow the [user management documentation](/dokku/deployment/user-management/) in order to add users to Dokku, or to give other Unix accounts access to Dokku. That's it!