#
-# Cookbook Name:: tile
+# Cookbook:: tile
# Recipe:: default
#
-# Copyright 2013, OpenStreetMap Foundation
+# Copyright:: 2013, OpenStreetMap Foundation
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# limitations under the License.
#
+include_recipe "accounts"
include_recipe "apache"
include_recipe "git"
+include_recipe "munin"
include_recipe "nodejs"
include_recipe "postgresql"
include_recipe "python"
end
package %w[
- python-cairo
- python-mapnik
- python-setuptools
+ python3-cairo
+ python3-mapnik
+ python3-setuptools
]
-python_package "pyotp"
+python_package "pyotp" do
+ python_version "3"
+end
package %w[
fonts-noto-cjk
end
nodejs_package "carto"
-nodejs_package "millstone"
systemd_service "update-lowzoom@" do
description "Low zoom tile update service for %i layer"
postgresql_version = node[:tile][:database][:cluster].split("/").first
postgis_version = node[:tile][:database][:postgis]
-package "postgis"
package "postgresql-#{postgresql_version}-postgis-#{postgis_version}"
postgresql_user "jburgess" do
postgresql_extension "hstore" do
cluster node[:tile][:database][:cluster]
database "gis"
+ only_if { node[:tile][:database][:hstore] }
end
%w[geography_columns planet_osm_nodes planet_osm_rels planet_osm_ways raster_columns raster_overviews spatial_ref_sys].each do |table|
database "gis"
end
-file node[:tile][:node_file] do
+directory File.dirname(node[:tile][:database][:node_file]) do
+ owner "root"
+ group "root"
+ mode 0o755
+ recursive true
+end
+
+file node[:tile][:database][:node_file] do
owner "tile"
group "www-data"
mode 0o660
package %w[
osm2pgsql
ruby
+ osmium-tool
pyosmium
- python-pyproj
+ python3-pyproj
]
remote_directory "/usr/local/bin" do
owner "root"
group "root"
mode 0o755
+ variables :postgresql_version => postgresql_version.to_f
end
systemd_service "expire-tiles" do
mode 0o755
end
-template "/etc/cron.d/render-lowzoom" do
- source "render-lowzoom.cron.erb"
- owner "root"
- group "root"
- mode 0o644
+systemd_service "render-lowzoom" do
+ description "Render low zoom tiles"
+ user "tile"
+ exec_start "/usr/local/bin/render-lowzoom"
+ private_tmp true
+ private_devices true
+ private_network true
+ protect_system "full"
+ protect_home true
+ no_new_privileges true
+end
+
+systemd_timer "render-lowzoom" do
+ description "Render low zoom tiles"
+ on_calendar "Sun *-*~07/1 01:00:00"
+end
+
+service "render-lowzoom.timer" do
+ action [:enable, :start]
+end
+
+file "/etc/cron.d/render-lowzoom" do
+ action :delete
end
package "liblockfile-simple-perl"
munin_plugin "renderd_zoom"
munin_plugin "renderd_zoom_time"
-munin_plugin "replication_delay" do
- conf "munin.erb"
-end
+munin_plugin "replication_delay"