# Check all internal links on the Conservancy website

[Unit]
Description=Check Conservancy website links

[Service]
Type=oneshot
User=debian
ExecStart=linkchecker https://sfconservancy.org/

SystemCallFilter=~@clock @cpu-emulation @debug @module @mount @obsolete
CapabilityBoundingSet=
NoNewPrivileges=true

PrivateDevices=true
PrivateNetwork=false
PrivateTmp=true
PrivateUsers=false
ProtectControlGroups=true
ProtectHome=true
ProtectKernelModules=true
ProtectKernelTunables=true
ProtectSystem=strict