94ab6043e7
Add the files that land in the image, organised as layered rootfs trees (base first, then the edition layer wins on conflict). - base: hardened kernel cmdline + sysctl, default-deny nftables, key-only ssh, persistent journald, module blacklist, no core dumps, snapshot timer units, motd. - server: Prometheus + auto-provisioned Grafana + Loki + promtail. - workstation: dev profile and desktop sysctl relaxations (perf, rootless containers). - cloud: cloud-init provisioning config.
12 lines
190 B
SYSTEMD
12 lines
190 B
SYSTEMD
[Unit]
|
|
Description=Daily Arcline btrfs snapshot
|
|
Requires=arcline-snapshot.service
|
|
|
|
[Timer]
|
|
OnCalendar=*-*-* 03:00:00
|
|
Persistent=true
|
|
RandomizedDelaySec=300
|
|
|
|
[Install]
|
|
WantedBy=timers.target
|