diff options
| -rw-r--r-- | VERSION | 4 | ||||
| -rw-r--r-- | newsboat/systemd/user/reload-newsboat.service | 21 | ||||
| -rw-r--r-- | newsboat/systemd/user/reload-newsboat.timer | 3 | ||||
| -rw-r--r-- | systemd/user/notify-email@.service | 14 | ||||
| -rw-r--r-- | vim/vimrc | 14 |
5 files changed, 15 insertions, 41 deletions
@@ -1,2 +1,2 @@ -tejr dotfiles v10.7.0 -Sat, 12 Sep 2020 05:30:54 +0000 +tejr dotfiles v10.8.0 +Mon, 14 Sep 2020 02:30:21 +0000 diff --git a/newsboat/systemd/user/reload-newsboat.service b/newsboat/systemd/user/reload-newsboat.service index 981ef7bc..f495e67b 100644 --- a/newsboat/systemd/user/reload-newsboat.service +++ b/newsboat/systemd/user/reload-newsboat.service @@ -8,23 +8,4 @@ Type=oneshot LogsDirectory=newsboat LogsDirectoryMode=0700 ExecStart=newsboat --execute=reload --log-file=%L/newsboat/%p.log --log-level=5 -# Hardening -IPAddressDeny=any -IPAddressAllow=localhost -KeyringMode=private -LockPersonality=true -MemoryDenyWriteExecute=true -NoNewPrivileges=true -RestrictAddressFamilies=AF_UNIX -RestrictAddressFamilies=~AF_UNIX -RestrictNamespaces=true -RestrictRealtime=true -SystemCallArchitectures=native -SystemCallErrorNumber=EPERM -SystemCallFilter=@system-service -SystemCallFilter=~@privileged @resources -UMask=0077 -# Slowing -Nice=10 -IOSchedulingClass=best-effort -IOSchedulingPriority=7 +TimeoutStartSec=5m diff --git a/newsboat/systemd/user/reload-newsboat.timer b/newsboat/systemd/user/reload-newsboat.timer index 6e59d66e..c3c0cb00 100644 --- a/newsboat/systemd/user/reload-newsboat.timer +++ b/newsboat/systemd/user/reload-newsboat.timer @@ -1,9 +1,10 @@ [Unit] -Description=fetch new Newsboat articles +Description=fetch new Newsboat articles schedule [Timer] OnBootSec=10m OnUnitActiveSec=10m +RandomizedDelaySec=2m [Install] WantedBy=timers.target diff --git a/systemd/user/notify-email@.service b/systemd/user/notify-email@.service index bddee12a..fba9cdaf 100644 --- a/systemd/user/notify-email@.service +++ b/systemd/user/notify-email@.service @@ -3,15 +3,5 @@ Description=unit status mailer service for %i [Service] Type=oneshot -ExecStart=sh -c 'systemctl --user status %i | mail --append="From: systemd" --append="X-systemd: %H %m %b" --subject="[systemd] %i failure" %u' -# Hardening -DevicePolicy=closed -IPAddressDeny=any -PrivateMounts=true -PrivateTmp=true -ProtectControlGroups=true -ProtectHome=true -ProtectSystem=full -RemoveIPC=true -SystemCallErrorNumber=EPERM -UMask=027 +ExecStart=sh -c 'systemctl --user status %i | mail -a "X-systemd: %H %m %b" -s "[systemd] %i failure" %u' +TimeoutStartSec=1m @@ -2,7 +2,7 @@ " Tom Ryder (tejr)’s Literate Vimrc " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ " -" Last updated: Sat, 12 Sep 2020 05:21:43 UTC +" Last updated: Mon, 14 Sep 2020 02:28:57 UTC " " │ And I was lifted up in heart, and thought " │ Of all my late-shown prowess in the lists, @@ -273,12 +273,14 @@ if has#('unix') set backupskip+=/usr/tmp/*,/var/tmp/* " Per-repository temporary files for Git - "" Commit messages - set backupskip+=*.git/*_EDITMSG - "" Patch edits - set backupskip+=*.git/ADD_EDIT.patch + "" Commit and tag messages + set backupskip+=*/*.git/?*_EDITMSG + "" Edited patches + set backupskip+=*/*.git/ADD_EDIT.patch + "" Email messages + set backupskip+=*/*.git/.gitsendemail.msg.* "" Interactive rebase manifests - set backupskip+=*.git/rebase-merge/git-rebase-todo + set backupskip+=*/*.git/rebase-merge/git-rebase-todo " systemd user manager unit files "" Full unit files |