iankelling.org Git - distro-setup/blob - machine_specific/bitfolk/filesystem/etc/systemd/system/logrotate-fast.service

   1 # modified from
   2 # /lib/systemd/system/logrotate.service
   3 [Unit]
   4 Description=logrotate-fast
   5 Documentation=man:logrotate(8) man:logrotate.conf(5)
   6 ConditionACPower=true
   7
   8 [Service]
   9 Type=oneshot
  10 ExecStart=/usr/sbin/logrotate /etc/logrotate-fast.conf
  11
  12 # performance options
  13 Nice=19
  14 IOSchedulingClass=best-effort
  15 IOSchedulingPriority=7
  16
  17 # hardening options
  18 #  details: https://www.freedesktop.org/software/systemd/man/systemd.exec.html
  19 #  no ProtectHome for userdir logs
  20 #  no PrivateNetwork for mail deliviery
  21 #  no ProtectKernelTunables for working SELinux with systemd older than 235
  22 #  no MemoryDenyWriteExecute for gzip on i686
  23
  24 # iank, commented, we need /dev
  25 #PrivateDevices=true
  26
  27 PrivateTmp=true
  28 ProtectControlGroups=true
  29 ProtectKernelModules=true
  30 ProtectSystem=full
  31 RestrictRealtime=true