permit nopass keepenv root
permit persist keepenv setenv { -XDG_CACHE_HOME -XDG_DATA_HOME -XDG_CONFIG_HOME } :wheel as root

# service mgmt stuff
permit nopass :wheel as root cmd s6-rc
permit nopass :wheel as root cmd s6-svok
permit nopass :wheel as root cmd s6-svstat
permit nopass :wheel as root cmd s6-svc

# udisks replacement
permit nopass :wheel as root cmd lsblk
permit nopass :wheel as root cmd mount
permit nopass :wheel as root cmd umount

# external monitor backlighting
permit nopass :wheel as root cmd ddcutil

# suspend/hibernate
permit nopass :wheel as root cmd s2ram
permit nopass :wheel as root cmd s2disk
permit nopass :wheel as root cmd rtcwake
permit nopass :wheel as root cmd tee args /sys/power/state

# goprocam
permit nopass :wheel as root cmd modprobe args v4l2loopback devices=1 video_nr=44 card_label="GoPro" exclusive_caps=1 
permit nopass :wheel as root cmd modprobe args -r v4l2loopback
permit nopass :wheel as root cmd v4l2loopback-ctl

# obs
permit nopass :wheel as root cmd modprobe args v4l2loopback exclusive_caps=1 card_label="OBS Virtual Camera"

# vpnmenu
permit nopass :wheel as root cmd wg-quick
permit nopass :wheel as root cmd wg args show interfaces