# deploy user: restart Go apps after a release, nothing else.
# The ^...$ pattern must match the whole argument string (sudo >= 1.9.10).
deploy ALL=(root) NOPASSWD: /usr/bin/systemctl ^restart goapp@[a-z0-9][a-z0-9-]*$
