# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
-# http://www.apache.org/licenses/LICENSE-2.0
+# https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
external_data.each do |fname|
remote_file "#{source_directory}/data/#{fname}" do
action :create_if_missing
- source "http://www.nominatim.org/data/#{fname}"
+ source "https://www.nominatim.org/data/#{fname}"
owner "nominatim"
group "nominatim"
mode 0o644
remote_file "#{source_directory}/data/country_osm_grid.sql.gz" do
action :create_if_missing
- source "http://www.nominatim.org/data/country_grid.sql.gz"
+ source "https://www.nominatim.org/data/country_grid.sql.gz"
owner "nominatim"
group "nominatim"
mode 0o644
include_recipe "fail2ban"
-web_servers = search(:node, "recipes:web\\:\\:frontend").collect do |n| # ~FC010
- n.ipaddresses(:role => :external)
-end.flatten
-
fail2ban_filter "nominatim" do
- failregex '^<HOST> - - \[\] "[^"]+" (408|429) '
+ failregex "Warning ignored: <HOST>"
end
fail2ban_jail "nominatim" do
filter "nominatim"
- logpath "#{node[:nominatim][:logdir]}/nominatim.openstreetmap.org-access.log"
+ logpath "#{node[:nominatim][:logdir]}/restricted_ips.log"
ports [80, 443]
- maxretry 100
- ignoreips web_servers
+ maxretry 3
end
munin_plugin_conf "nominatim" do