+systemd_service "planetdump@" do
+ description "Planet dump for %i"
+ user "planet"
+ exec_start "/usr/local/bin/planetdump %i"
+ memory_max "64G"
+ sandbox true
+ protect_home "tmpfs"
+ bind_paths "/home/planet"
+ read_write_paths [
+ "/store/planetdump",
+ "/store/planet/pbf",
+ "/store/planet/planet",
+ "/var/log/exim4",
+ "/var/spool/exim4"
+ ]
+end
+
+systemd_service "planetdump-trigger" do
+ description "Planet dump trigger"
+ user "root"
+ exec_start "/usr/local/bin/planetdump-trigger"
+ sandbox true
+ restrict_address_families "AF_UNIX"
+end
+
+service "planetdump-trigger" do
+ action [:enable, :start]
+ subscribes :restart, "template[/usr/local/bin/planetdump-trigger]"
+end
+
+systemd_service "planet-dump-mirror" do
+ description "Update planet dump mirrors"
+ exec_start "/usr/local/bin/planet-mirror-redirect-update"
+ user "planet"
+ sandbox :enable_network => true
+ memory_deny_write_execute false
+ read_write_paths "/store/planet/.htaccess"
+end
+
+systemd_timer "planet-dump-mirror" do
+ description "Update planet dump mirrors"
+ on_boot_sec "10min"
+ on_unit_inactive_sec "10min"
+end
+
+service "planet-dump-mirror.timer" do
+ action [:enable, :start]