Ben Sturmfels
55ee5b53b6
Currently updates are published by the "conservancy-www-update.sh" that does a "pull" deploy with a 5-minutely job that runs on the web server. This doesn't run `migrate`, `collectstatic` or restart the application, so certain types of changes don't take effect, and even template changes often don't due to caching template loader. This script allows you to deploy more significant updates on-demand, but requires SSH access.
28 lines
765 B
Desktop File
28 lines
765 B
Desktop File
# Update the fundraiser total/sustainer list from an SQL file on Apache restart.
|
|
|
|
[Unit]
|
|
Description=Update Conservancy website database
|
|
Before=apache2.service
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
User=www-data
|
|
ExecStart=/usr/bin/sqlite3 -bail /var/lib/www/database/conservancy-website.sqlite3 ".timeout 30000" "BEGIN TRANSACTION;" ".read /home/debian/django-supporters-list.sql" "COMMIT;"
|
|
|
|
SystemCallFilter=~@clock @cpu-emulation @debug @module @mount @obsolete
|
|
CapabilityBoundingSet=
|
|
NoNewPrivileges=true
|
|
|
|
PrivateDevices=true
|
|
PrivateNetwork=true
|
|
PrivateTmp=true
|
|
PrivateUsers=false
|
|
ProtectControlGroups=true
|
|
ProtectHome=read-only
|
|
ProtectKernelModules=true
|
|
ProtectKernelTunables=true
|
|
ProtectSystem=strict
|
|
ReadWritePaths=/var/lib/www/database
|
|
|
|
[Install]
|
|
WantedBy=apache2.service
|