Files
@ d8a702c8c922
Branch filter:
Location: website/bin/deploy/systemd/conservancy-www-update.service - annotation
d8a702c8c922
613 B
text/plain
Load images via staticfiles
03e06738a00c 03e06738a00c bdac443c16db bdac443c16db bdac443c16db bdac443c16db bdac443c16db 053504d099b8 bdac443c16db ea271641d4c0 bdac443c16db bdac443c16db bdac443c16db bdac443c16db bdac443c16db bdac443c16db bdac443c16db bdac443c16db bdac443c16db bdac443c16db bdac443c16db bdac443c16db bdac443c16db bdac443c16db bdac443c16db | # Run the website update script (see also: conservancy-www-update.timer).
[Unit]
Description=Update Conservancy website checkout
[Service]
Type=oneshot
User=www-data
WorkingDirectory=/var/www/website
ExecStart=/var/www/website/deploy/systemd/conservancy-www-update.sh
SystemCallFilter=~@clock @cpu-emulation @debug @module @mount @obsolete
CapabilityBoundingSet=
NoNewPrivileges=true
PrivateDevices=true
PrivateNetwork=false
PrivateTmp=true
PrivateUsers=false
ProtectControlGroups=true
ProtectHome=true
ProtectKernelModules=true
ProtectKernelTunables=true
ProtectSystem=strict
ReadWritePaths=/var/www/website
|