summaryrefslogtreecommitdiff
path: root/roles/elevate/media/templates/nextcloud-rescan-.service.j2
diff options
context:
space:
mode:
Diffstat (limited to 'roles/elevate/media/templates/nextcloud-rescan-.service.j2')
-rw-r--r--roles/elevate/media/templates/nextcloud-rescan-.service.j217
1 files changed, 17 insertions, 0 deletions
diff --git a/roles/elevate/media/templates/nextcloud-rescan-.service.j2 b/roles/elevate/media/templates/nextcloud-rescan-.service.j2
new file mode 100644
index 00000000..a09139dd
--- /dev/null
+++ b/roles/elevate/media/templates/nextcloud-rescan-.service.j2
@@ -0,0 +1,17 @@
+[Unit]
+Description=Nextcloud files:scan job timer for {{ elevate_media_nextcloud_instance_name }}
+
+[Service]
+Type=oneshot
+Environment=NEXTCLOUD_OCC_NON_INTERACTIVE=1
+{# TODO: make path(s) configurable and add one ExecStart per path #}
+ExecStart=/usr/local/bin/nextcloud-occ {{ elevate_media_nextcloud_instance_name }} files:scan --path /_elevate_/files/Share
+NoNewPrivileges=yes
+PrivateTmp=yes
+PrivateDevices=yes
+ProtectSystem=strict
+ProtectHome=yes
+ProtectKernelTunables=yes
+ProtectControlGroups=yes
+RestrictRealtime=yes
+RestrictAddressFamilies=AF_UNIX AF_INET