Add systemd service and timer0.3.0

The service unit is based on lifeboat defaults and will make sure that
restic-priv can be invoked with CAP_DAC_READ_SEARCH whilst locking down
other forms of privilege escalation.

The timer is mostly for convenient overriding in lifeboat@.timer.d/. We
expect users to adjust this as necessary for their purposes.

1 files changed, 8 insertions, 0 deletions

diff --git a/etc/systemd/lifeboat@.timer b/etc/systemd/lifeboat@.timer
new file mode 100644
index 0000000..4ab415c
--- /dev/null
+++ b/etc/systemd/lifeboat@.timer
@@ -0,0 +1,8 @@
+[Unit]
+Description=Daily lifeboat backup for %i
+
+[Timer]
+OnCalendar=18:00
+
+[Install]
+WantedBy=timers.target