# Check all internal links on the Conservancy website

[Unit]

Description=Check Conservancy website links

[Service]

Type=oneshot

User=debian

ExecStart=linkchecker https://sfconservancy.org/

SystemCallFilter=~@clock @cpu-emulation @debug @module @mount @obsolete

CapabilityBoundingSet=

NoNewPrivileges=true

PrivateDevices=true

PrivateNetwork=false

PrivateTmp=true

PrivateUsers=false

ProtectControlGroups=true

ProtectHome=true

ProtectKernelModules=true

ProtectKernelTunables=true

ProtectSystem=strict