# limitations under the License.
#
+include_recipe "accounts"
include_recipe "git"
package %w[
git "/opt/planet-dump-ng" do
action :sync
repository "https://github.com/zerebubuth/planet-dump-ng.git"
- revision "v1.2.6"
+ revision "v1.2.7"
depth 1
user "root"
group "root"
end
directory "/store/planetdump" do
- owner "www-data"
- group "www-data"
+ owner "planet"
+ group "planet"
mode "755"
recursive true
end
-%w[planetdump planet-mirror-redirect-update].each do |program|
+%w[planetdump planetdump-trigger planet-mirror-redirect-update].each do |program|
template "/usr/local/bin/#{program}" do
source "#{program}.erb"
owner "root"
systemd_service "planetdump@" do
description "Planet dump for %i"
- user "www-data"
+ user "planet"
exec_start "/usr/local/bin/planetdump %i"
memory_max "64G"
sandbox true
service "planetdump-trigger" do
action [:enable, :start]
+ subscribes :restart, "template[/usr/local/bin/planetdump-trigger]"
end
systemd_service "planet-dump-mirror" do
description "Update planet dump mirrors"
exec_start "/usr/local/bin/planet-mirror-redirect-update"
- user "www-data"
+ user "planet"
sandbox :enable_network => true
memory_deny_write_execute false
read_write_paths "/store/planet/.htaccess"