Add TOTP token enforcement to overpass

[chef.git] / cookbooks / nominatim / recipes / default.rb

diff --git a/cookbooks/nominatim/recipes/default.rb b/cookbooks/nominatim/recipes/default.rb
index 41e0ec78cb6a92d6f983cbc66683a8f76af9ad94..2e23f2949f886589348a1733bc5b296da1662bd6 100644 (file)
--- a/cookbooks/nominatim/recipes/default.rb
+++ b/cookbooks/nominatim/recipes/default.rb
@@ -52,17 +52,6 @@ file "#{node[:nominatim][:logdir]}/update.log" do
   mode "664"
 end
 
   mode "664"
 end
 

-# exception granted for a limited time so that they can set up their own server
-firewall_rule "increase-limits-gnome-proxy" do
-  action :accept
-  family "inet"
-  source "net:8.43.85.23"
-  dest "fw"
-  proto "tcp:syn"
-  dest_ports "https"
-  rate_limit "s:10/sec:30"
-end
-

 ## Postgresql
 
 include_recipe "postgresql"
 ## Postgresql
 
 include_recipe "postgresql"


@@ -172,6 +161,7 @@ package %w[
   python3-psutil
   python3-jinja2
   python3-icu
   python3-psutil
   python3-jinja2
   python3-icu

+  python3-datrie

   php-pgsql
   php-intl
   php-symfony-dotenv
   php-pgsql
   php-intl
   php-symfony-dotenv


@@ -239,7 +229,8 @@ template "#{build_directory}/.env" do
   variables :base_url => node[:nominatim][:state] == "off" ? node[:fqdn] : "nominatim.openstreetmap.org",
             :dbname => node[:nominatim][:dbname],
             :flatnode_file => node[:nominatim][:flatnode_file],
   variables :base_url => node[:nominatim][:state] == "off" ? node[:fqdn] : "nominatim.openstreetmap.org",
             :dbname => node[:nominatim][:dbname],
             :flatnode_file => node[:nominatim][:flatnode_file],

-            :log_file => "#{node[:nominatim][:logdir]}/query.log"
+            :log_file => "#{node[:nominatim][:logdir]}/query.log",
+            :tokenizer => node[:nominatim][:config][:tokenizer]

 end
 
 git ui_directory do
 end
 
 git ui_directory do


@@ -278,7 +269,7 @@ external_data = [
 
 external_data.each do |fname|
   remote_file "#{build_directory}/#{fname}" do
 
 external_data.each do |fname|
   remote_file "#{build_directory}/#{fname}" do

-    action :create_if_missing
+    action :create

     source "https://www.nominatim.org/data/#{fname}"
     owner "nominatim"
     group "nominatim"
     source "https://www.nominatim.org/data/#{fname}"
     owner "nominatim"
     group "nominatim"


@@ -349,7 +340,9 @@ template "#{source_directory}/utils/nominatim-update" do
             :logfile => "#{node[:nominatim][:logdir]}/update.log",
             :branch => node[:nominatim][:revision],
             :update_stop_file => "#{basedir}/status/updates_disabled",
             :logfile => "#{node[:nominatim][:logdir]}/update.log",
             :branch => node[:nominatim][:revision],
             :update_stop_file => "#{basedir}/status/updates_disabled",

-            :update_maintenance_trigger => "#{basedir}/status/update_maintenance"
+            :update_maintenance_trigger => "#{basedir}/status/update_maintenance",
+            :qabindir => qa_bin_directory,
+            :qadatadir => qa_data_directory

 end
 
 template "/etc/init.d/nominatim-update" do
 end
 
 template "/etc/init.d/nominatim-update" do


@@ -412,10 +405,6 @@ ssl_certificate node[:fqdn] do
   notifies :reload, "service[nginx]"
 end
 
   notifies :reload, "service[nginx]"
 end
 

-package "apache2" do
-  action :remove
-end
-

 include_recipe "nginx"
 
 nginx_site "default" do
 include_recipe "nginx"
 
 nginx_site "default" do


@@ -510,5 +499,9 @@ if node[:nominatim][:enable_qa_tiles]
     variables :outputdir => "#{qa_data_directory}/new"
   end
 
     variables :outputdir => "#{qa_data_directory}/new"
   end
 

-
+  link "#{build_directory}/website/qa-data" do
+    to "#{qa_data_directory}/current"
+    owner "nominatim"
+    group "nominatim"
+  end

 end
 end