diff options
Diffstat (limited to 'roles/whawty/auth/store/templates/systemd.service.j2')
| -rw-r--r-- | roles/whawty/auth/store/templates/systemd.service.j2 | 14 |
1 files changed, 2 insertions, 12 deletions
diff --git a/roles/whawty/auth/store/templates/systemd.service.j2 b/roles/whawty/auth/store/templates/systemd.service.j2 index 5b1db6b2..2fe45642 100644 --- a/roles/whawty/auth/store/templates/systemd.service.j2 +++ b/roles/whawty/auth/store/templates/systemd.service.j2 @@ -1,19 +1,9 @@ -{% set rsync_args = [] %} -{% if 'permissions' in whawty_auth_store %} -{% if 'file-mode' in whawty_auth_store.permissions %} -{% set _dummy = rsync_args.append(" --chmod=F"~whawty_auth_store.permissions['file-mode']) %} -{% endif %} -{% if 'owner' in whawty_auth_store.permissions %} -{% set _dummy = rsync_args.append(" --chown="~whawty_auth_store.permissions.owner~":"~whawty_auth_store.permissions.group) %} -{% endif %} -{% endif %} [Unit] Description=sync for whawty-auth store {{ whawty_auth_store.name }} [Service] -Type=oneshot -ExecStart=/usr/bin/rsync -rtW --delete --delete-delay --delay-updates --partial-dir=.tmp{{ rsync_args | join('') }} -e 'ssh -F "/etc/whawty/auth/.store-{{ whawty_auth_store.name }}-sync/ssh_config"' 'rsync://whawty-auth-server/store' '{{ whawty_auth_store.config.basedir }}' -TimeoutStartSec=40s +Type=simple +ExecStart=/etc/whawty/auth/.store-{{ whawty_auth_store.name }}-sync/run.sh # systemd hardening-options AmbientCapabilities=CAP_CHOWN CAP_FOWNER |