palulukon: Allow access to AWS IP metadata NTP service

[chef.git] / cookbooks / db / recipes / backup.rb

diff --git a/cookbooks/db/recipes/backup.rb b/cookbooks/db/recipes/backup.rb
index e4b3b9bc88bae4422a9d3a9643fcac1b53d981d5..39d6d573d4885a4844ee9bebe4bb4f6f39da8a50 100644 (file)
--- a/cookbooks/db/recipes/backup.rb
+++ b/cookbooks/db/recipes/backup.rb
@@ -1,8 +1,8 @@
 #
-# Cookbook Name:: db
+# Cookbook:: db
 # Recipe:: backup
 #
-# Copyright 2013, OpenStreetMap Foundation
+# Copyright:: 2013, OpenStreetMap Foundation
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -21,12 +21,23 @@ template "/usr/local/bin/backup-db" do
   source "backup-db.erb"
   owner "root"
   group "root"
-  mode 0o755
+  mode "755"
 end
 
-template "/etc/cron.d/backup-db" do
-  source "backup.cron.erb"
-  owner "root"
-  group "root"
-  mode 0o644
+systemd_service "backup-db" do
+  description "Database backup"
+  exec_start "/usr/local/bin/backup-db"
+  user "osmbackup"
+  sandbox :enable_network => true
+  restrict_address_families "AF_UNIX"
+  read_write_paths "/store/backup"
+end
+
+systemd_timer "backup-db" do
+  description "Database backup"
+  on_calendar "Mon 02:00 #{node[:timezone]}"
+end
+
+service "backup-db.timer" do
+  action [:enable, :start]
 end