summaryrefslogtreecommitdiffstats
path: root/files/etc/systemd/system/webmap-raster@.service
diff options
context:
space:
mode:
Diffstat (limited to 'files/etc/systemd/system/webmap-raster@.service')
-rw-r--r--files/etc/systemd/system/webmap-raster@.service40
1 files changed, 0 insertions, 40 deletions
diff --git a/files/etc/systemd/system/webmap-raster@.service b/files/etc/systemd/system/webmap-raster@.service
deleted file mode 100644
index 42a97cf..0000000
--- a/files/etc/systemd/system/webmap-raster@.service
+++ /dev/null
@@ -1,40 +0,0 @@
-[Unit]
-Description=Webmap updater service (export ā€˜%I’ to COG)
-After=webmap-update@%i.target
-After=webmap-download@%i.service
-Upholds=webmap-update@%i.target
-
-[Service]
-User=_webmap
-Group=_webmap
-
-Nice=15
-IOSchedulingClass=idle
-
-# Point TMPDIR to something that is not a tmpfs as we need to unpack large archives
-Environment=TMPDIR=/var/tmp
-
-Type=oneshot
-ExecStart=/usr/local/bin/webmap-import \
- --cachedir=%C/webmap \
- --lockfile=%t/lock/webmap/lock \
- --lockdir-sources=%t/lock/webmap/cache \
- --rasterdir=/var/www/webmap/raster/%I \
- --metadata-compress \
- -- %I
-
-# Hardening
-NoNewPrivileges=yes
-ProtectHome=yes
-ProtectSystem=strict
-PrivateDevices=yes
-ProtectControlGroups=yes
-ProtectKernelModules=yes
-ProtectKernelTunables=yes
-RestrictAddressFamilies=AF_UNIX
-ReadWritePaths=%t/lock/webmap
-ReadWritePaths=/var/www/webmap/raster
-PrivateTmp=yes
-
-[Install]
-WantedBy=webmap-update@%i.target