website Files · systemd/conservancy-www-cleanup.service

Files @ f63f0f99bf9e

Branch filter:

Location: website/systemd/conservancy-www-cleanup.service

f63f0f99bf9e 570 B text/plain Show Annotation Show as Raw Download as Raw

brett

projects: Re-alphabetize ICR.

I initially placed it based on calling it "ICR" rather than its full name.

[Unit]
Description=Cleanup Conservancy website
Before=apache2.service

[Service]
Type=oneshot
User=www
ExecStart=/usr/bin/python /var/www/website/www/manage.py clearsessions --verbosity 0

SystemCallFilter=~@clock @cpu-emulation @debug @module @mount @obsolete
CapabilityBoundingSet=
NoNewPrivileges=true

PrivateDevices=true
PrivateNetwork=true
PrivateTmp=true
PrivateUsers=true
ProtectControlGroups=true
ProtectHome=true
ProtectKernelModules=true
ProtectKernelTunables=true
ProtectSystem=strict
ReadWritePaths=/var/lib/www/database

[Install]
WantedBy=apache2.service