git "/opt/planet-dump-ng" do
action :sync
repository "https://github.com/zerebubuth/planet-dump-ng.git"
- revision "v1.2.0"
+ revision "v1.2.3"
depth 1
user "root"
group "root"
exec_start "/usr/local/bin/planetdump %i"
memory_max "64G"
private_tmp true
- private_devices true
- private_network true
protect_system "full"
protect_home true
- no_new_privileges true
+ read_write_paths "/var/log/exim4"
end
cron_d "planet-dump-mirror" do