Adding prune and scan boop services

This commit is contained in:
Siina Mashek 2022-12-15 12:25:45 +02:00
parent a63e516808
commit 34415f0767
4 changed files with 64 additions and 0 deletions

View File

@ -0,0 +1,23 @@
[Unit]
Description=Prune 0x0 files
After=remote-fs.target
[Service]
Type=oneshot
User=boop
Group=http
WorkingDirectory=/opt/boop
BindPaths=/opt/boop
Environment=FLASK_APP=fhost
ExecStart=/opt/boop/.local/bin/flask prune
ProtectProc=noaccess
ProtectSystem=strict
ProtectHome=tmpfs
PrivateTmp=true
PrivateUsers=true
ProtectKernelLogs=true
LockPersonality=true
[Install]
WantedBy=multi-user.target

View File

@ -0,0 +1,9 @@
[Unit]
Description=Prune 0x0 files
[Timer]
OnCalendar=hourly
Persistent=true
[Install]
WantedBy=timers.target

View File

@ -0,0 +1,23 @@
[Unit]
Description=Scan 0x0 files with ClamAV
After=remote-fs.target clamd.service
[Service]
Type=oneshot
User=boop
Group=http
WorkingDirectory=/opt/boop
BindPaths=/opt/boop
Environment=FLASK_APP=fhost
ExecStart=/opt/boop/.local/bin/flask vscan
ProtectProc=noaccess
ProtectSystem=strict
ProtectHome=tmpfs
PrivateTmp=true
PrivateUsers=true
ProtectKernelLogs=true
LockPersonality=true
[Install]
WantedBy=multi-user.target

View File

@ -0,0 +1,9 @@
[Unit]
Description=Scan 0x0 files with ClamAV
[Timer]
OnCalendar=hourly
Persistent=true
[Install]
WantedBy=timers.target