Files
@ 83550a56a3c0
Branch filter:
Location: website/deploy/systemd/conservancy-www-db.service - annotation
83550a56a3c0
765 B
text/plain
Set ownership during deploy
03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c | # Update the fundraiser total/sustainer list from an SQL file on Apache restart.
[Unit]
Description=Update Conservancy website database
Before=apache2.service
[Service]
Type=oneshot
User=www-data
ExecStart=/usr/bin/sqlite3 -bail /var/lib/www/database/conservancy-website.sqlite3 ".timeout 30000" "BEGIN TRANSACTION;" ".read /home/debian/django-supporters-list.sql" "COMMIT;"
SystemCallFilter=~@clock @cpu-emulation @debug @module @mount @obsolete
CapabilityBoundingSet=
NoNewPrivileges=true
PrivateDevices=true
PrivateNetwork=true
PrivateTmp=true
PrivateUsers=false
ProtectControlGroups=true
ProtectHome=read-only
ProtectKernelModules=true
ProtectKernelTunables=true
ProtectSystem=strict
ReadWritePaths=/var/lib/www/database
[Install]
WantedBy=apache2.service
|