summaryrefslogtreecommitdiff
path: root/roles/elevate/media/templates/nextcloud-cron.service.j2
diff options
context:
space:
mode:
authorChristian Pointner <equinox@spreadspace.org>2019-01-11 22:32:41 +0100
committerChristian Pointner <equinox@spreadspace.org>2019-01-11 22:32:41 +0100
commit4cd8123c6652664fc8ffb33ded4e87be21296c85 (patch)
tree79ad6f61ae272d14819f724938c4e1cee69ce21a /roles/elevate/media/templates/nextcloud-cron.service.j2
parentadded wireguard to ele-router (diff)
proof-of-concept nextcloud install
Diffstat (limited to 'roles/elevate/media/templates/nextcloud-cron.service.j2')
-rw-r--r--roles/elevate/media/templates/nextcloud-cron.service.j215
1 files changed, 15 insertions, 0 deletions
diff --git a/roles/elevate/media/templates/nextcloud-cron.service.j2 b/roles/elevate/media/templates/nextcloud-cron.service.j2
new file mode 100644
index 00000000..5c7e056d
--- /dev/null
+++ b/roles/elevate/media/templates/nextcloud-cron.service.j2
@@ -0,0 +1,15 @@
+[Unit]
+Description=Nextcloud cron.php job
+
+[Service]
+Type=oneshot
+ExecStart=/usr/bin/docker exec -u www-data nextcloud php -f /var/www/html/cron.php
+NoNewPrivileges=yes
+PrivateTmp=yes
+PrivateDevices=yes
+ProtectSystem=strict
+ProtectHome=yes
+ProtectKernelTunables=yes
+ProtectControlGroups=yes
+RestrictRealtime=yes
+RestrictAddressFamilies=AF_UNIX