diff options
Diffstat (limited to '')
8 files changed, 82 insertions, 12 deletions
diff --git a/dot_config/systemd/user/plocate-updatedb.service b/dot_config/systemd/user/plocate-updatedb.service new file mode 100644 index 0000000..55620c5 --- /dev/null +++ b/dot_config/systemd/user/plocate-updatedb.service @@ -0,0 +1,28 @@ +[Unit] +Description=Update the plocate database +ConditionACPower=true + +[Service] +Type=oneshot +ExecStart=/usr/sbin/updatedb.plocate -l 0 -o "${XDG_STATE_HOME}/plocate/home.db" -U "${HOME}" +LimitNOFILE=131072 +IOSchedulingClass=idle +Nice=19 + +CapabilityBoundingSet=CAP_DAC_READ_SEARCH CAP_CHOWN +IPAddressDeny=any +LockPersonality=true +MemoryDenyWriteExecute=true +NoNewPrivileges=true +PrivateTmp=true +PrivateDevices=true +PrivateNetwork=true +ProtectClock=true +ProtectControlGroups=true +ProtectHostname=true +RestrictAddressFamilies=AF_UNIX +RestrictNamespaces=true +RestrictRealtime=true +RestrictSUIDSGID=true +SystemCallArchitectures=native +SystemCallFilter=@system-service @chown diff --git a/dot_config/systemd/user/plocate-updatedb.timer b/dot_config/systemd/user/plocate-updatedb.timer new file mode 100644 index 0000000..1d25abb --- /dev/null +++ b/dot_config/systemd/user/plocate-updatedb.timer @@ -0,0 +1,11 @@ +[Unit] +Description=Update the plocate database daily + +[Timer] +OnCalendar=daily +RandomizedDelaySec=1h +AccuracySec=6h +Persistent=true + +[Install] +WantedBy=timers.target diff --git a/dot_config/systemd/user/sbuild-update.service b/dot_config/systemd/user/sbuild-update.service new file mode 100644 index 0000000..82c6bb3 --- /dev/null +++ b/dot_config/systemd/user/sbuild-update.service @@ -0,0 +1,29 @@ +[Unit] +Description=Update sbuild unshare chroot tarballs +ConditionACPower=true +Wants=network-online.target + +[Service] +Type=oneshot +ExecStart=%h/.local/lib/sbuild/update-chroots.sh +LimitNOFILE=131072 +IOSchedulingClass=idle +Nice=19 + +CapabilityBoundingSet=CAP_DAC_READ_SEARCH CAP_CHOWN +IPAddressDeny=any +LockPersonality=true +MemoryDenyWriteExecute=true +NoNewPrivileges=true +PrivateTmp=true +PrivateDevices=true +PrivateNetwork=true +ProtectClock=true +ProtectControlGroups=true +ProtectHostname=true +RestrictAddressFamilies=AF_UNIX +RestrictNamespaces=true +RestrictRealtime=true +RestrictSUIDSGID=true +SystemCallArchitectures=native +SystemCallFilter=@system-service @chown diff --git a/dot_config/systemd/user/sbuild-update.timer b/dot_config/systemd/user/sbuild-update.timer new file mode 100644 index 0000000..2576e16 --- /dev/null +++ b/dot_config/systemd/user/sbuild-update.timer @@ -0,0 +1,11 @@ +[Unit] +Description=Update sbuild unshare chroot tarballs + +[Timer] +OnCalendar=daily +RandomizedDelaySec=1h +AccuracySec=6h +Persistent=true + +[Install] +WantedBy=timers.target diff --git a/dot_config/systemd/user/ssh-agent.service.d/override.conf b/dot_config/systemd/user/ssh-agent.service.d/override.conf deleted file mode 100644 index a3b6435..0000000 --- a/dot_config/systemd/user/ssh-agent.service.d/override.conf +++ /dev/null @@ -1,11 +0,0 @@ -[Unit] -Description=OpenSSH Agent -Documentation=man:ssh-agent(1) -Before=basic.target -ConditionPathExists=/etc/X11/Xsession.options -Wants=dbus.socket -After=dbus.socket - -[Service] -ExecStart= -ExecStart=/home/rak/.local/lib/openssh/agent-launch start diff --git a/dot_config/systemd/user/swaybg-random.service b/dot_config/systemd/user/swaybg-random.service index 06d7c29..f35fd77 100644 --- a/dot_config/systemd/user/swaybg-random.service +++ b/dot_config/systemd/user/swaybg-random.service @@ -5,7 +5,7 @@ Description=Randomize Wayland background Type=exec Restart=always RuntimeMaxSec=1h -ExecStart=/home/rak/bin/swaybg-random +ExecStart=%h/.local/bin/swaybg-random [Install] WantedBy=wayland-session.target diff --git a/dot_config/systemd/user/timers.target.wants/symlink_plocate-updatedb.timer b/dot_config/systemd/user/timers.target.wants/symlink_plocate-updatedb.timer new file mode 100644 index 0000000..28d405c --- /dev/null +++ b/dot_config/systemd/user/timers.target.wants/symlink_plocate-updatedb.timer @@ -0,0 +1 @@ +/home/rak/.config/systemd/user/plocate-updatedb.timer diff --git a/dot_config/systemd/user/timers.target.wants/symlink_sbuild-update.timer b/dot_config/systemd/user/timers.target.wants/symlink_sbuild-update.timer new file mode 100644 index 0000000..24c026e --- /dev/null +++ b/dot_config/systemd/user/timers.target.wants/symlink_sbuild-update.timer @@ -0,0 +1 @@ +/home/rak/.config/systemd/user/sbuild-update.timer
\ No newline at end of file |