Files
@ 9071a60eb303
Branch filter:
Location: website/systemd/conservancy-www-db.service - annotation
9071a60eb303
765 B
text/plain
fix ifixit link on sponsors page
03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c 03e06738a00c | # Update the fundraiser total/sustainer list from an SQL file on Apache restart.
[Unit]
Description=Update Conservancy website database
Before=apache2.service
[Service]
Type=oneshot
User=www-data
ExecStart=/usr/bin/sqlite3 -bail /var/lib/www/database/conservancy-website.sqlite3 ".timeout 30000" "BEGIN TRANSACTION;" ".read /home/debian/django-supporters-list.sql" "COMMIT;"
SystemCallFilter=~@clock @cpu-emulation @debug @module @mount @obsolete
CapabilityBoundingSet=
NoNewPrivileges=true
PrivateDevices=true
PrivateNetwork=true
PrivateTmp=true
PrivateUsers=false
ProtectControlGroups=true
ProtectHome=read-only
ProtectKernelModules=true
ProtectKernelTunables=true
ProtectSystem=strict
ReadWritePaths=/var/lib/www/database
[Install]
WantedBy=apache2.service
|