diff --git a/roles/base/templates/doas.conf.j2 b/roles/base/templates/doas.conf.j2
index 66558bf..796da79 100644
--- a/roles/base/templates/doas.conf.j2
+++ b/roles/base/templates/doas.conf.j2
@@ -2,15 +2,14 @@
 permit setenv {SSH_AUTH_SOCK SSH_TTY PKG_PATH HOME=/root ENV=/root/.profile} :{{ evolinux_sudo_group }}
 permit nopass root
 permit setenv {ENV PS1 SSH_AUTH_SOCK SSH_TTY} nopass :{{ evolinux_sudo_group }} as root cmd /usr/share/scripts/evomaintenance.sh
-permit nopass _nrpe cmd /usr/local/libexec/nagios/check_ipsecctl.sh
-permit nopass _nrpe as root cmd /sbin/bioctl args sd2
 permit nopass _collectd as root cmd /usr/sbin/bgpctl
+permit nopass _nrpe as root cmd /sbin/bioctl args sd2
 permit nopass _nrpe as root cmd /usr/local/libexec/nagios/check_mailq
+permit nopass _nrpe as root cmd /usr/local/libexec/nagios/check_dhcp
 permit nopass _nrpe as root cmd /usr/local/libexec/nagios/plugins/check_ipsecctl.sh
 permit nopass _nrpe as root cmd /usr/local/libexec/nagios/plugins/check_ospfd_simple
 permit nopass _nrpe as root cmd /usr/local/libexec/nagios/plugins/check_ospfd
 permit nopass _nrpe as root cmd /usr/local/libexec/nagios/plugins/check_ospf6d
 permit nopass _nrpe as root cmd /usr/local/libexec/nagios/plugins/check_openbgpd
 permit nopass _nrpe as root cmd /usr/local/libexec/nagios/plugins/check_pf_states
-permit nopass _nrpe as root cmd /usr/local/libexec/nagios/check_dhcp
 permit nopass _nrpe as root cmd /usr/local/libexec/nagios/plugins/check_connections_state.sh