palulukon: Allow access to AWS IP metadata NTP service

[chef.git] / cookbooks / web / recipes / statistics.rb

diff --git a/cookbooks/web/recipes/statistics.rb b/cookbooks/web/recipes/statistics.rb
index 3ced1f4d61754075582940aebb5efe39f44fd75d..84848b0030eb2f67437b0aded36782fc2d1ae60c 100644 (file)
--- a/cookbooks/web/recipes/statistics.rb
+++ b/cookbooks/web/recipes/statistics.rb
@@ -32,10 +32,14 @@ end
 
 systemd_service "web-statistics" do
   description "Generate web statistics"
-  exec_start "/usr/local/bin/statistics"
+  environment "RAILS_ENV" => "production",
+              "SECRET_KEY_BASE_DUMMY" => "1"
   user "rails"
+  working_directory rails_directory
+  exec_start "/usr/local/bin/statistics"
   sandbox :enable_network => true
-  read_write_paths "#{rails_directory}/tmp"
+  memory_deny_write_execute false
+  read_write_paths ["#{rails_directory}/tmp", "/var/log/web"]
 end
 
 systemd_timer "web-statistics" do
@@ -43,10 +47,6 @@ systemd_timer "web-statistics" do
   on_calendar "00:00:00"
 end
 
-cron_d "statistics" do
-  action :delete
-end
-
 service "web-statistics.timer" do
   action [:enable, :start]
 end