From 66c8b2c8ea9741e1e1fc15dcd9ed00194fee57c1 Mon Sep 17 00:00:00 2001
From: Ben Sturmfels <ben@sturm.com.au>
Date: Fri, 24 Nov 2023 10:49:06 +1100
Subject: [PATCH] Add linkchecker Systemd service and timer

Doesn't yet email report of errors.
---
 systemd/conservancy-www-linkchecker.service | 23 +++++++++++++++++++++
 systemd/conservancy-www-linkchecker.timer   |  8 +++++++
 2 files changed, 31 insertions(+)
 create mode 100644 systemd/conservancy-www-linkchecker.service
 create mode 100644 systemd/conservancy-www-linkchecker.timer

diff --git a/systemd/conservancy-www-linkchecker.service b/systemd/conservancy-www-linkchecker.service
new file mode 100644
index 00000000..33ccf343
--- /dev/null
+++ b/systemd/conservancy-www-linkchecker.service
@@ -0,0 +1,23 @@
+# Check all internal links on the Conservancy website
+
+[Unit]
+Description=Check Conservancy website links
+
+[Service]
+Type=oneshot
+User=debian
+ExecStart=linkchecker https://sfconservancy.org/
+
+SystemCallFilter=~@clock @cpu-emulation @debug @module @mount @obsolete
+CapabilityBoundingSet=
+NoNewPrivileges=true
+
+PrivateDevices=true
+PrivateNetwork=false
+PrivateTmp=true
+PrivateUsers=false
+ProtectControlGroups=true
+ProtectHome=true
+ProtectKernelModules=true
+ProtectKernelTunables=true
+ProtectSystem=strict
diff --git a/systemd/conservancy-www-linkchecker.timer b/systemd/conservancy-www-linkchecker.timer
new file mode 100644
index 00000000..fa1c44db
--- /dev/null
+++ b/systemd/conservancy-www-linkchecker.timer
@@ -0,0 +1,8 @@
+[Unit]
+Description=Check Conservancy website links
+
+[Timer]
+OnCalendar=weekly
+
+[Install]
+WantedBy=timers.target