From 26214e3f7c5343fa30d2ff1ae71a6cf7197b6f3e Mon Sep 17 00:00:00 2001
From: Christian Pointner <equinox@spreadspace.org>
Date: Wed, 19 May 2021 16:52:36 +0200
Subject: initial version of syncoid autosuspender

---
 .../zfs/syncoid/templates/autosuspend.service.j2       | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 roles/storage/zfs/syncoid/templates/autosuspend.service.j2

(limited to 'roles/storage/zfs/syncoid/templates/autosuspend.service.j2')

diff --git a/roles/storage/zfs/syncoid/templates/autosuspend.service.j2 b/roles/storage/zfs/syncoid/templates/autosuspend.service.j2
new file mode 100644
index 00000000..f1e13b72
--- /dev/null
+++ b/roles/storage/zfs/syncoid/templates/autosuspend.service.j2
@@ -0,0 +1,18 @@
+[Unit]
+Description=automatic system suspender for syncoid-based backups
+
+[Service]
+Type=oneshot
+ExecStart=/usr/local/bin/syncoid-autosuspend.py
+NoNewPrivileges=yes
+PrivateTmp=yes
+PrivateDevices=yes
+ProtectSystem=strict
+ProtectHome=yes
+ProtectKernelTunables=yes
+ProtectControlGroups=yes
+RestrictRealtime=yes
+RestrictAddressFamilies=AF_UNIX
+
+[Install]
+WantedBy=multi-user.target
-- 
cgit v1.2.3