From db9a20c94d395b273caf24dfcc6a48ab3d020768 Mon Sep 17 00:00:00 2001
From: Mia Herkt <mia@0x0.st>
Date: Tue, 29 Nov 2022 17:23:30 +0100
Subject: Add example systemd unit files for prune job

---
 0x0-prune.service | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 0x0-prune.service

(limited to '0x0-prune.service')

diff --git a/0x0-prune.service b/0x0-prune.service
new file mode 100644
index 0000000..b28fb2d
--- /dev/null
+++ b/0x0-prune.service
@@ -0,0 +1,22 @@
+[Unit]
+Description=Prune 0x0 files
+After=remote-fs.target
+
+[Service]
+Type=oneshot
+User=nullptr
+WorkingDirectory=/path/to/0x0
+BindPaths=/path/to/0x0
+
+Environment=FLASK_APP=fhost
+ExecStart=/usr/bin/flask prune
+ProtectProc=noaccess
+ProtectSystem=strict
+ProtectHome=tmpfs
+PrivateTmp=true
+PrivateUsers=true
+ProtectKernelLogs=true
+LockPersonality=true
+
+[Install]
+WantedBy=multi-user.target
-- 
cgit v1.2.3