# deploy user: restart Go apps after a release, nothing else. # The ^...$ pattern must match the whole argument string (sudo >= 1.9.10). deploy ALL=(root) NOPASSWD: /usr/bin/systemctl ^restart goapp@[a-z0-9][a-z0-9-]*$