summaryrefslogtreecommitdiffstats
path: root/files/etc/systemd/system/webmap-raster@.service
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@fripost.org>2026-03-06 13:50:24 +0100
committerGuilhem Moulin <guilhem@fripost.org>2026-03-06 16:08:40 +0100
commit1af347391f9f54b370dfc7395464b8ed637a79ca (patch)
treef73b1ff30c968763260c0aa0443de572c665350e /files/etc/systemd/system/webmap-raster@.service
parent8ee835b7fc9a3e3eac93a74f877b0b040d8dcb03 (diff)
Rename "webmap" to the less generic "geodata".
The database has uses beyond the webmap. Cf. ca91a579770c89d25aefae220079bf336fa88dc9 in tools.
Diffstat (limited to 'files/etc/systemd/system/webmap-raster@.service')
-rw-r--r--files/etc/systemd/system/webmap-raster@.service40
1 files changed, 0 insertions, 40 deletions
diff --git a/files/etc/systemd/system/webmap-raster@.service b/files/etc/systemd/system/webmap-raster@.service
deleted file mode 100644
index 42a97cf..0000000
--- a/files/etc/systemd/system/webmap-raster@.service
+++ /dev/null
@@ -1,40 +0,0 @@
-[Unit]
-Description=Webmap updater service (export ā€˜%I’ to COG)
-After=webmap-update@%i.target
-After=webmap-download@%i.service
-Upholds=webmap-update@%i.target
-
-[Service]
-User=_webmap
-Group=_webmap
-
-Nice=15
-IOSchedulingClass=idle
-
-# Point TMPDIR to something that is not a tmpfs as we need to unpack large archives
-Environment=TMPDIR=/var/tmp
-
-Type=oneshot
-ExecStart=/usr/local/bin/webmap-import \
- --cachedir=%C/webmap \
- --lockfile=%t/lock/webmap/lock \
- --lockdir-sources=%t/lock/webmap/cache \
- --rasterdir=/var/www/webmap/raster/%I \
- --metadata-compress \
- -- %I
-
-# Hardening
-NoNewPrivileges=yes
-ProtectHome=yes
-ProtectSystem=strict
-PrivateDevices=yes
-ProtectControlGroups=yes
-ProtectKernelModules=yes
-ProtectKernelTunables=yes
-RestrictAddressFamilies=AF_UNIX
-ReadWritePaths=%t/lock/webmap
-ReadWritePaths=/var/www/webmap/raster
-PrivateTmp=yes
-
-[Install]
-WantedBy=webmap-update@%i.target