script to rsync from an arch mirror

arch-mirror.service

[Unit]
Description=Mirror arch linux

[Service]
Type=oneshot
ExecStart=/usr/local/bin/sync_arch_mirror.sh
User=arch
IPAccounting=yes
NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
ProtectSystem=strict
ProtectControlGroups=yes
ProtectKernelTunables=yes
ProtectKernelModules=yes
MemoryDenyWriteExecute=yes
RestrictRealtime=yes
RestrictNamespaces=yes
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
SystemCallArchitectures=native
LockPersonality=yes

arch-mirror.timer

[Unit]
Description=Mirror arch almost every two hours

[Timer]
OnBootSec=15min
OnUnitActiveSec=2h10m
AccuracySec=10min

[Install]
WantedBy=timers.target

archlinux-rsync-file-list.txt

pool/packages
core
core-testing
extra
extra-testing
multilib
multilib-testing
lastsync
lastupdate

sync_arch_mirror.sh

#! /bin/bash
set -euo pipefail

if [ "$EUID" -eq 0 ]
  then echo "Don't run as root!"
  exit 1
fi

REPO=rsync://ftp.acc.umu.se/mirror/archlinux
DEST=/srv/arch_mirror/archlinux
RSYNC_FILE_LIST=/srv/arch_mirror/archlinux-rsync-file-list.txt

mkdir -p $DEST

# Common rsync options
: "${LAZY:="--delete-delay --delay-updates"}"
RSYNC_OPTS="-rltH -4 --safe-links --no-motd $LAZY"

# Only be verbose on tty
if tty -s; then
  RSYNC_OPTS="$RSYNC_OPTS -v"
fi

/usr/bin/rsync $RSYNC_OPTS --files-from=$RSYNC_FILE_LIST $REPO/ $DEST/

Any output goes the journal, so no redirection and stuff

Oct 24 14:10:55 mk.arch.mirror systemd[1]: Starting Mirror arch linux...
Oct 24 14:11:27 mk.arch.mirror systemd[1]: Started Mirror arch linux.
Oct 24 14:11:27 mk.arch.mirror systemd[1]: arch-mirror.service: Received 149.1M IP traffic, sent 1.5M IP traffic