diff --git a/runtime/install-run-now-sudoers.sh b/runtime/install-run-now-sudoers.sh
new file mode 100644
index 0000000..b9e790c
--- /dev/null
+++ b/runtime/install-run-now-sudoers.sh
@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+set -Eeuo pipefail
+
+[[ $EUID -eq 0 ]] || { echo "Bitte als root ausfuehren." >&2; exit 1; }
+
+cat >/etc/sudoers.d/bratonien-nc-connector-web <<'EOF'
+www-data ALL=(root) NOPASSWD: /usr/bin/systemctl start --no-block bratonien-nc-connector.service
+EOF
+chmod 0440 /etc/sudoers.d/bratonien-nc-connector-web
+visudo -cf /etc/sudoers.d/bratonien-nc-connector-web