2018-04-17 00:02:25 +02:00
|
|
|
[Unit]
|
|
|
|
|
Description=Funkwhale (__APP__) celery worker
|
|
|
|
|
After=redis.service postgresql.service
|
|
|
|
|
PartOf=__APP__.target
|
|
|
|
|
|
|
|
|
|
[Service]
|
|
|
|
|
User=__APP__
|
2018-10-21 11:15:08 +02:00
|
|
|
Group=__APP__
|
2018-10-21 10:59:28 +02:00
|
|
|
WorkingDirectory=__FINALPATH__/code/api
|
|
|
|
|
EnvironmentFile=__FINALPATH__/code/config/.env
|
2019-01-08 22:17:04 +01:00
|
|
|
|
2019-01-08 23:23:18 +01:00
|
|
|
PermissionsStartOnly=true
|
|
|
|
|
ExecStartPre=/bin/mkdir -p /var/log/__APP__
|
|
|
|
|
ExecStartPre=/bin/chown __APP__:__APP__ /var/log/__APP__
|
2019-01-08 22:17:04 +01:00
|
|
|
ExecStart=__FINALPATH__/code/virtualenv/bin/celery -A funkwhale_api.taskapp worker -l INFO \
|
|
|
|
|
--loglevel INFO --logfile=/var/log/__APP__/worker.log
|
2018-04-17 00:02:25 +02:00
|
|
|
|
2018-10-21 11:15:08 +02:00
|
|
|
NoNewPrivileges=true
|
|
|
|
|
PrivateDevices=true
|
|
|
|
|
PrivateTmp=true
|
|
|
|
|
ProtectHome=true
|
|
|
|
|
ProtectSystem=strict
|
|
|
|
|
ProtectControlGroups=yes
|
|
|
|
|
ProtectKernelModules=yes
|
|
|
|
|
ReadOnlyPaths=__FINALPATH__/code/config/.env __FINALPATH__/code/
|
2019-01-08 23:23:18 +01:00
|
|
|
ReadWritePaths=__FINALPATH__/media __FINALPATH__/import /var/log/__APP__
|
2018-10-21 11:15:08 +02:00
|
|
|
|
|
|
|
|
StandardOutput=syslog
|
|
|
|
|
StandardError=syslog
|
|
|
|
|
SyslogIdentifier=__APP__-worker
|
|
|
|
|
|
2018-04-17 00:02:25 +02:00
|
|
|
[Install]
|
2018-10-21 11:15:08 +02:00
|
|
|
WantedBy=multi-user.target
|
