- cayce-ops-plan.service/.timer (daily): the @ template cannot express publisher plan, so it gets its own unit - DECISIONS: D13 no non-human approvals; D14 signatures bind content + deployment; D15 negation veto classifier
16 lines
404 B
Desktop File
16 lines
404 B
Desktop File
[Unit]
|
|
Description=cayce-ops publisher plan (fills the content calendar, daily)
|
|
After=network-online.target postgresql.service
|
|
Wants=network-online.target
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
User=cayce
|
|
WorkingDirectory=/srv/cayce-ops
|
|
EnvironmentFile=/srv/cayce-ops/.env
|
|
ExecStart=/srv/cayce-ops/.venv/bin/cayceops publisher plan
|
|
NoNewPrivileges=yes
|
|
ProtectSystem=strict
|
|
ProtectHome=yes
|
|
ReadWritePaths=/srv/cayce-ops
|