From 4cd8123c6652664fc8ffb33ded4e87be21296c85 Mon Sep 17 00:00:00 2001
From: Christian Pointner <equinox@spreadspace.org>
Date: Fri, 11 Jan 2019 22:32:41 +0100
Subject: proof-of-concept nextcloud install

---
 roles/elevate/media/templates/nextcloud-cron.service.j2 | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 roles/elevate/media/templates/nextcloud-cron.service.j2

(limited to 'roles/elevate/media/templates/nextcloud-cron.service.j2')

diff --git a/roles/elevate/media/templates/nextcloud-cron.service.j2 b/roles/elevate/media/templates/nextcloud-cron.service.j2
new file mode 100644
index 00000000..5c7e056d
--- /dev/null
+++ b/roles/elevate/media/templates/nextcloud-cron.service.j2
@@ -0,0 +1,15 @@
+[Unit]
+Description=Nextcloud cron.php job
+
+[Service]
+Type=oneshot
+ExecStart=/usr/bin/docker exec -u www-data nextcloud php -f /var/www/html/cron.php
+NoNewPrivileges=yes
+PrivateTmp=yes
+PrivateDevices=yes
+ProtectSystem=strict
+ProtectHome=yes
+ProtectKernelTunables=yes
+ProtectControlGroups=yes
+RestrictRealtime=yes
+RestrictAddressFamilies=AF_UNIX
-- 
cgit v1.2.3