summaryrefslogtreecommitdiffstats
path: root/files/etc/systemd/system/webmap-download@.service
diff options
context:
space:
mode:
Diffstat (limited to 'files/etc/systemd/system/webmap-download@.service')
-rw-r--r--files/etc/systemd/system/webmap-download@.service37
1 files changed, 0 insertions, 37 deletions
diff --git a/files/etc/systemd/system/webmap-download@.service b/files/etc/systemd/system/webmap-download@.service
deleted file mode 100644
index d7a49dc..0000000
--- a/files/etc/systemd/system/webmap-download@.service
+++ /dev/null
@@ -1,37 +0,0 @@
-[Unit]
-Description=Webmap updater service (download ā€˜%I’)
-# Chaining logic from https://serverfault.com/questions/1079993/why-does-my-systemd-timer-only-trigger-once-when-the-unit-is-a-target#answer-1128671
-# XXX Looks like Upholds= prevents running a single unit, as it causes
-# webmap-update@%i.target to start upon `systemctl start webmap-download@foo.service`
-After=network-online.target webmap-update@%i.target
-Upholds=webmap-update@%i.target
-
-[Service]
-User=_webmap-download
-Group=_webmap
-
-Nice=15
-IOSchedulingClass=idle
-
-Type=oneshot
-ExecStart=/usr/local/bin/webmap-download \
- --cachedir=%C/webmap \
- --lockdir=%t/lock/webmap/cache \
- --no-exit-code \
- --quiet \
- -- %I
-
-# Hardening
-NoNewPrivileges=yes
-ProtectHome=yes
-ProtectSystem=strict
-PrivateDevices=yes
-ProtectControlGroups=yes
-ProtectKernelModules=yes
-ProtectKernelTunables=yes
-RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
-ReadWritePaths=%C/webmap
-ReadWritePaths=%t/lock/webmap/cache
-
-[Install]
-WantedBy=webmap-update@%i.target