2018-05-10 18:54:23 +02:00
|
|
|
[Unit]
|
|
|
|
Description=Funkwhale (__APP__) celery beat process
|
|
|
|
After=redis.service postgresql.service
|
|
|
|
PartOf=__APP__.target
|
|
|
|
|
|
|
|
[Service]
|
|
|
|
User=__APP__
|
2018-10-21 11:15:08 +02:00
|
|
|
Group=__APP__
|
2018-10-21 10:59:28 +02:00
|
|
|
WorkingDirectory=__FINALPATH__/code/api
|
|
|
|
EnvironmentFile=__FINALPATH__/code/config/.env
|
2019-01-08 22:17:04 +01:00
|
|
|
|
|
|
|
# https://www.freedesktop.org/software/systemd/man/systemd.exec.html#RuntimeDirectory=
|
|
|
|
LogsDirectory=__APP__
|
|
|
|
ExecStart=__FINALPATH__/code/virtualenv/bin/celery -A funkwhale_api.taskapp beat \
|
|
|
|
--loglevel INFO --logfile=/var/log/__APP__/beat.log
|
2018-05-10 18:54:23 +02:00
|
|
|
|
2018-10-21 11:15:08 +02:00
|
|
|
NoNewPrivileges=true
|
|
|
|
PrivateDevices=true
|
|
|
|
PrivateTmp=true
|
|
|
|
ProtectHome=true
|
|
|
|
ProtectSystem=strict
|
|
|
|
ProtectControlGroups=yes
|
|
|
|
ProtectKernelModules=yes
|
|
|
|
ReadOnlyPaths=__FINALPATH__/code/config/.env __FINALPATH__/code/
|
|
|
|
ReadWritePaths=__FINALPATH__/media __FINALPATH__/import __FINALPATH__/code/api
|
|
|
|
|
|
|
|
StandardOutput=syslog
|
|
|
|
StandardError=syslog
|
|
|
|
SyslogIdentifier=__APP__-beat
|
|
|
|
|
2018-05-10 18:54:23 +02:00
|
|
|
[Install]
|
|
|
|
WantedBy=multi-user.target
|