zabbix-agent: Use sudo to get borg output

Signed-off-by: Florian Pritz <bluewind@xinu.at>

roles/zabbix-agent/files/zabbix-borg-timestamps.pl

@@ -6,7 +6,7 @@ use autodie;
 use JSON::XS;
 use POSIX;
 
-my $json = decode_json(`/usr/local/bin/borg list --json --format '{start}{end}' --sort-by timestamp --last 1`);
+my $json = decode_json(`sudo /usr/local/bin/borg list --json --format '{start}{end}' --sort-by timestamp --last 1`);
 print encode_json({
 		last_archive => {
 			is_checkpoint => $json->{archives}[0]->{archive} =~ m/.checkpoint$/ ? 1 : 0,

roles/zabbix-agent/tasks/main.yml

@@ -46,6 +46,9 @@
     - restart nginx-zabbix.service
   when: "'nginx' in group_names"
 
+- name: install sudo config
+  template: src=zabbix-agent-sudoers.conf.j2 dest=/etc/sudoers.d/zabbix-agent-sudoers
+
 - name: copy nginx-zabbix.service
   copy: src=nginx-zabbix.service dest=/etc/systemd/system/nginx-zabbix.service owner=root group=root mode=0644
   notify:

roles/zabbix-agent/templates/zabbix-agent-sudoers.conf.j2

+zabbix-agent ALL=(root) NOPASSWD: /usr/local/bin/borg list --json --format {start}{end} --sort-by timestamp --last 1