website Files · systemd/conservancy-www-update.service

Files @ 52b676e3dc39

Branch filter:

Location: website/systemd/conservancy-www-update.service

52b676e3dc39 526 B text/plain Show Annotation Show as Raw Download as Raw

Bradley M. Kuhn

Substantial update of Member Project Application page.

This page had much out of date material, particularly the timeline
and the types of projects we seek, but also the FAQ section did not
include standard information that we're now regularly giving projects
during intake.

This update attempts to address many of those issues.

[Unit]
Description=Update Conservancy website checkout

[Service]
Type=oneshot
User=www
WorkingDirectory=/var/www/website
ExecStart=/var/www/website/systemd/conservancy-www-update.sh

SystemCallFilter=~@clock @cpu-emulation @debug @module @mount @obsolete
CapabilityBoundingSet=
NoNewPrivileges=true

PrivateDevices=true
PrivateNetwork=false
PrivateTmp=true
PrivateUsers=false
ProtectControlGroups=true
ProtectHome=true
ProtectKernelModules=true
ProtectKernelTunables=true
ProtectSystem=strict
ReadWritePaths=/var/www/website