Adding prune and scan boop services
This commit is contained in:
parent
a63e516808
commit
34415f0767
4 changed files with 64 additions and 0 deletions
23
services/boop-prune.service
Normal file
23
services/boop-prune.service
Normal file
|
@ -0,0 +1,23 @@
|
|||
[Unit]
|
||||
Description=Prune 0x0 files
|
||||
After=remote-fs.target
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
User=boop
|
||||
Group=http
|
||||
WorkingDirectory=/opt/boop
|
||||
BindPaths=/opt/boop
|
||||
|
||||
Environment=FLASK_APP=fhost
|
||||
ExecStart=/opt/boop/.local/bin/flask prune
|
||||
ProtectProc=noaccess
|
||||
ProtectSystem=strict
|
||||
ProtectHome=tmpfs
|
||||
PrivateTmp=true
|
||||
PrivateUsers=true
|
||||
ProtectKernelLogs=true
|
||||
LockPersonality=true
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
9
services/boop-prune.timer
Normal file
9
services/boop-prune.timer
Normal file
|
@ -0,0 +1,9 @@
|
|||
[Unit]
|
||||
Description=Prune 0x0 files
|
||||
|
||||
[Timer]
|
||||
OnCalendar=hourly
|
||||
Persistent=true
|
||||
|
||||
[Install]
|
||||
WantedBy=timers.target
|
23
services/boop-vscan.service
Normal file
23
services/boop-vscan.service
Normal file
|
@ -0,0 +1,23 @@
|
|||
[Unit]
|
||||
Description=Scan 0x0 files with ClamAV
|
||||
After=remote-fs.target clamd.service
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
User=boop
|
||||
Group=http
|
||||
WorkingDirectory=/opt/boop
|
||||
BindPaths=/opt/boop
|
||||
|
||||
Environment=FLASK_APP=fhost
|
||||
ExecStart=/opt/boop/.local/bin/flask vscan
|
||||
ProtectProc=noaccess
|
||||
ProtectSystem=strict
|
||||
ProtectHome=tmpfs
|
||||
PrivateTmp=true
|
||||
PrivateUsers=true
|
||||
ProtectKernelLogs=true
|
||||
LockPersonality=true
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
9
services/boop-vscan.timer
Normal file
9
services/boop-vscan.timer
Normal file
|
@ -0,0 +1,9 @@
|
|||
[Unit]
|
||||
Description=Scan 0x0 files with ClamAV
|
||||
|
||||
[Timer]
|
||||
OnCalendar=hourly
|
||||
Persistent=true
|
||||
|
||||
[Install]
|
||||
WantedBy=timers.target
|
Loading…
Reference in a new issue