website/bin/deploy/systemd/conservancy-www-cleanup.service
Ben Sturmfels 55ee5b53b6
Add a basic script to "push" deploy
Currently updates are published by the "conservancy-www-update.sh" that does a
"pull" deploy with a 5-minutely job that runs on the web server. This doesn't
run `migrate`, `collectstatic` or restart the application, so certain types of
changes don't take effect, and even template changes often don't due to caching
template loader.

This script allows you to deploy more significant updates on-demand, but
requires SSH access.
2024-02-23 15:39:54 +11:00

28 lines
613 B
Desktop File

# Remove old Django login sessions.
[Unit]
Description=Cleanup Conservancy website
Before=apache2.service
[Service]
Type=oneshot
User=www-data
ExecStart=/usr/bin/python3 /var/www/website/www/manage.py clearsessions --verbosity 0
SystemCallFilter=~@clock @cpu-emulation @debug @module @mount @obsolete
CapabilityBoundingSet=
NoNewPrivileges=true
PrivateDevices=true
PrivateNetwork=true
PrivateTmp=true
PrivateUsers=true
ProtectControlGroups=true
ProtectHome=true
ProtectKernelModules=true
ProtectKernelTunables=true
ProtectSystem=strict
ReadWritePaths=/var/lib/www/database
[Install]
WantedBy=apache2.service