website Files · systemd/conservancy-www-update.service

Files @ b36800e0784f

Branch filter:

Location: website/systemd/conservancy-www-update.service

b36800e0784f 526 B text/plain Show Annotation Show as Raw Download as Raw

bsturmfels

Apply max widths and margins to all pages.

Due to the varying types of layouts used and the short time-frame the best
option seems to set a max-width etc. around the "outercontent" block. For now
this means we can't do "full bleed" body content, but that's not currently used
anyway.

[Unit]
Description=Update Conservancy website checkout

[Service]
Type=oneshot
User=www
WorkingDirectory=/var/www/website
ExecStart=/var/www/website/systemd/conservancy-www-update.sh

SystemCallFilter=~@clock @cpu-emulation @debug @module @mount @obsolete
CapabilityBoundingSet=
NoNewPrivileges=true

PrivateDevices=true
PrivateNetwork=false
PrivateTmp=true
PrivateUsers=false
ProtectControlGroups=true
ProtectHome=true
ProtectKernelModules=true
ProtectKernelTunables=true
ProtectSystem=strict
ReadWritePaths=/var/www/website