summaryrefslogtreecommitdiff
path: root/roles/storage/zfs/syncoid/templates/autosuspend.service.j2
diff options
context:
space:
mode:
authorChristian Pointner <equinox@spreadspace.org>2021-05-19 23:59:07 +0200
committerChristian Pointner <equinox@spreadspace.org>2021-05-19 23:59:07 +0200
commitcb4517a818ef8e5d297727e373ecfe185790ffd1 (patch)
treef2caee93acca170f657e9cebf298282c28904c7a /roles/storage/zfs/syncoid/templates/autosuspend.service.j2
parentrename apt-repo github-containers to kubic-project (diff)
parentsyncoid/autosuspend: nicer output of autosuspender (diff)
Merge branch 'topic/syncoid-autosuspend'
Diffstat (limited to 'roles/storage/zfs/syncoid/templates/autosuspend.service.j2')
-rw-r--r--roles/storage/zfs/syncoid/templates/autosuspend.service.j218
1 files changed, 18 insertions, 0 deletions
diff --git a/roles/storage/zfs/syncoid/templates/autosuspend.service.j2 b/roles/storage/zfs/syncoid/templates/autosuspend.service.j2
new file mode 100644
index 00000000..f1e13b72
--- /dev/null
+++ b/roles/storage/zfs/syncoid/templates/autosuspend.service.j2
@@ -0,0 +1,18 @@
+[Unit]
+Description=automatic system suspender for syncoid-based backups
+
+[Service]
+Type=oneshot
+ExecStart=/usr/local/bin/syncoid-autosuspend.py
+NoNewPrivileges=yes
+PrivateTmp=yes
+PrivateDevices=yes
+ProtectSystem=strict
+ProtectHome=yes
+ProtectKernelTunables=yes
+ProtectControlGroups=yes
+RestrictRealtime=yes
+RestrictAddressFamilies=AF_UNIX
+
+[Install]
+WantedBy=multi-user.target