Fix services

bootstrap.sh

@@ -73,6 +73,9 @@ chown -R git /var/lib/gitea
 #    systemctl enable --now certbot.timer
 #fi
 
+cp /opt/scarif/zfs/* /etc/systemd/system/
+systemctl enable --now zfs-scrub.timer
+
 echo "------- Adding config folders for jitsi -------"
 mkdir -p /opt/jitsi/{web/letsencrypt,transcripts,prosody/config,prosody/prosody-plugins-custom,jicofo,jvb,jigasi,jibri}
 

certbot/certbot.service

@@ -3,4 +3,4 @@ Description=Let's Encrypt renewal
 
 [Service]
 Type=oneshot
-ExecStart=/usr/bin/certbot renew --quiet --agree-tos --deploy-hook "cp /etc/letsencrypt/live/scarif.space/fullchain.pem /opt/ssl/scarif.space.crt && cp /etc/letsencrypt/live/scarif.space/privkey.pem /opt/ssl/scarif.space.key && docker-compose /opt/scarif/docker-compose.yml exec nginx nginx -s reload"
+ExecStart=/usr/bin/certbot renew --quiet --agree-tos --deploy-hook "cp /etc/letsencrypt/live/scarif.space-001/fullchain.pem /opt/ssl/scarif.space.crt && cp /etc/letsencrypt/live/scarif.space-001/privkey.pem /opt/ssl/scarif.space.key && docker-compose -f /opt/scarif/docker-compose.yml exec nginx nginx -s reload"

docker-compose.yml

@@ -511,7 +511,6 @@ services:
       - gitea
       - collabora
     ports:
-      - 80:80
       - 443:443
     networks:
       - nginx

nextcloud/nextcloud-scan.service

@@ -0,0 +1,6 @@
+[Unit]
+Description=Nextcloud file scan
+
+[Service]
+Type=oneshot
+ExecStart=docker-compose -f /opt/scarif/docker-compose.yml exec nextcloud php occ files:scan --all

nextcloud/nextcloud-scan.timer

@@ -0,0 +1,10 @@
+[Unit]
+Description=Regular scan of nextcloud files
+
+[Timer]
+OnCalendar=*:0/15
+RandomizedDelaySec=2m
+Persistent=true
+
+[Install]
+WantedBy=timers.target