diff --git a/deploy/systemd/conservancy-www-linkchecker.service b/deploy/systemd/conservancy-www-linkchecker.service
new file mode 100644
index 0000000000000000000000000000000000000000..33ccf3438ffa1fd551befbd5ef48c2b4b64ddce4
--- /dev/null
+++ b/deploy/systemd/conservancy-www-linkchecker.service
@@ -0,0 +1,23 @@
+# Check all internal links on the Conservancy website
+
+[Unit]
+Description=Check Conservancy website links
+
+[Service]
+Type=oneshot
+User=debian
+ExecStart=linkchecker https://sfconservancy.org/
+
+SystemCallFilter=~@clock @cpu-emulation @debug @module @mount @obsolete
+CapabilityBoundingSet=
+NoNewPrivileges=true
+
+PrivateDevices=true
+PrivateNetwork=false
+PrivateTmp=true
+PrivateUsers=false
+ProtectControlGroups=true
+ProtectHome=true
+ProtectKernelModules=true
+ProtectKernelTunables=true
+ProtectSystem=strict