Commit Graph

6 Commits

Author SHA1 Message Date
surtur 5df1956b4d
config.js: explicitly list enabled managers 2022-07-04 12:57:33 +02:00
surtur 03d1ac1aae
systemd: revise SystemCallFilter 2022-07-04 12:54:54 +02:00
surtur e808acd042
tweak: explicitly allow writing to /tmp
since ProtectSystem is set to strict, writing to /tmp is disallowed and
therefore needs this override.
2022-07-04 11:58:06 +02:00
surtur e00b7256af
systemd: enable 'ProtectHome=read-only'...
...thanks to gpg no longer needing to write lock files or cache to
user's home folder. that has been achieved by supplying the following
flags to the key export command:
    '--lock-never --no-symkey-cache --disable-dirmngr'
2022-06-06 16:38:58 +02:00
surtur e7e9ec51f1
mv config.js to etc/renovate-bot folder 2022-06-06 16:34:18 +02:00
surtur 9966f4886e
add files for a systemd-managed deployment 2022-06-06 16:30:13 +02:00