Verified Commit c1eca934 authored by Jelle van der Waa's avatar Jelle van der Waa 🚧
Browse files

Add gluebuddy role

parent fc3f03b6
[Unit]
Description=gluebuddy service
Wants=network-online.target
After=network-online.target
[Service]
Type=oneshot
ExecStart=/usr/local/bin/gluebuddy
DynamicUsers=true
NoNewPrivileges=yes
ProtectSystem=full
ProtectHome=true
PrivateTmp=true
PrivateDevices=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true
ProtectHostname=true
RestrictRealtime=true
CapabilityBoundingSet=
MemoryDenyWriteExecute=true
[Install]
WantedBy=multi-user.target
[Unit]
Description=gluebuddy timer
[Timer]
OnUnitActiveSec=10min
OnBootSec=5min
RandomizedDelaySec=1min
[Install]
WantedBy=timers.target
---
- name: install systemd service/timer
copy: src={{ item }} dest="/etc/systemd/system/{{ item }}" owner=root group=root mode=0644
with_items:
- gluebuddy.service
- gluebuddy.timer
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment