aboutsummaryrefslogtreecommitdiff
path: root/dot_config/systemd/user/backup-email.service
diff options
context:
space:
mode:
authorRyan Kavanagh <rak@rak.ac>2023-01-03 12:48:12 -0500
committerRyan Kavanagh <rak@rak.ac>2023-01-03 12:48:12 -0500
commit69df7da2b150158b6b67fed8034ffdfdc2c6542c (patch)
treed7e151f9946d9a0dd735961a5ce9eba593fe7ac6 /dot_config/systemd/user/backup-email.service
parentgbp.conf (diff)
backup services/timers
Diffstat (limited to 'dot_config/systemd/user/backup-email.service')
-rw-r--r--dot_config/systemd/user/backup-email.service38
1 files changed, 38 insertions, 0 deletions
diff --git a/dot_config/systemd/user/backup-email.service b/dot_config/systemd/user/backup-email.service
new file mode 100644
index 0000000..47260f1
--- /dev/null
+++ b/dot_config/systemd/user/backup-email.service
@@ -0,0 +1,38 @@
+[Unit]
+Description=backup dovecot
+Wants=network-online.target
+BindsTo=dovecot.service
+After=network-online.target
+ConditionFileNotEmpty=/media/t/Archives/email/rak.ac/backup.sh
+Before=borgmatic@tosh.service
+
+[Install]
+WantedBy=borgmatic@tosh.service
+
+[Service]
+Type=oneshot
+LockPersonality=true
+MemoryDenyWriteExecute=no
+NoNewPrivileges=yes
+PrivateTmp=yes
+ProtectControlGroups=yes
+ProtectHostname=yes
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
+RestrictNamespaces=yes
+RestrictRealtime=yes
+RestrictSUIDSGID=yes
+SystemCallArchitectures=native
+SystemCallFilter=@system-service
+SystemCallErrorNumber=EPERM
+ProtectSystem=full
+
+Nice=19
+CPUSchedulingPolicy=batch
+IOSchedulingClass=best-effort
+IOSchedulingPriority=7
+IOWeight=100
+
+Restart=no
+LogRateLimitIntervalSec=0
+
+ExecStart=/media/t/Archives/email/rak.ac/backup.sh