Skip to content

Instantly share code, notes, and snippets.

@alanorth
Created April 3, 2025 07:10
Show Gist options
  • Save alanorth/3847aa5cde1eb4b2a6fc420716d425a5 to your computer and use it in GitHub Desktop.
Save alanorth/3847aa5cde1eb4b2a6fc420716d425a5 to your computer and use it in GitHub Desktop.
~/.config/systemd/user/ooniprobe-run.service
[Unit]
Description=Run ooniprobe
[Service]
# https://www.ctrl.blog/entry/systemd-service-hardening.html
ProtectHome=read-only
ProtectKernelTunables=true
ProtectSystem=strict
PrivateDevices=true
PrivateTmp=true
ReadWritePaths=-/home/aorth/.ooniprobe
ExecStart=/usr/bin/ooniprobe run
[Unit]
Description=Run ooniprobe
[Timer]
OnCalendar=*-*-* 00:00:00
Persistent=true
# Add a random delay of 0–3600 seconds
RandomizedDelaySec=3600
[Install]
WantedBy=timers.target
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment