basedir = data_bag_item("accounts", "nominatim")["home"]
email_errors = data_bag_item("accounts", "lonvia")["email"]
+directory basedir do
+ owner "nominatim"
+ group "nominatim"
+ mode 0o755
+ recursive true
+end
+
directory node[:nominatim][:logdir] do
owner "nominatim"
group "nominatim"
mode 0o664
end
-directory "#{basedir}/status" do
- owner "nominatim"
- group "postgres"
- mode 0o775
-end
-
## Postgresql
include_recipe "postgresql"
end
end
-postgresql_user "replication" do
- cluster node[:nominatim][:dbcluster]
- password data_bag_item("nominatim", "passwords")["replication"]
- replication true
- only_if { node[:nominatim][:state] == "master" }
-end
+if node[:nominatim][:state] == "master" # ~FC023
+ postgresql_user "replication" do
+ cluster node[:nominatim][:dbcluster]
+ password data_bag_item("nominatim", "passwords")["replication"]
+ replication true
+ end
-directory node[:rsyncd][:modules][:archive][:path] do
- owner "postgres"
- group "postgres"
- mode 0o700
- only_if { node[:nominatim][:state] == "master" }
-end
+ directory node[:rsyncd][:modules][:archive][:path] do
+ owner "postgres"
+ group "postgres"
+ mode 0o700
+ end
-template "/usr/local/bin/clean-db-nominatim" do
- source "clean-db-nominatim.erb"
- owner "root"
- group "root"
- mode 0o755
- variables :archive_dir => node[:rsyncd][:modules][:archive][:path],
- :update_stop_file => "#{basedir}/status/updates_disabled",
- :streaming_clients => search(:node, "nominatim_state:slave").map { |slave| slave[:fdqn] }.join(" ")
- only_if { node[:nominatim][:state] == "master" }
+ template "/usr/local/bin/clean-db-nominatim" do
+ source "clean-db-nominatim.erb"
+ owner "root"
+ group "root"
+ mode 0o755
+ variables :archive_dir => node[:rsyncd][:modules][:archive][:path],
+ :update_stop_file => "#{basedir}/status/updates_disabled",
+ :streaming_clients => search(:node, "nominatim_state:slave").map { |slave| slave[:fqdn] }.join(" ")
+ end
end
## Nominatim backend
owner "nominatim"
group "nominatim"
mode 0o664
- variables :dbname => node[:nominatim][:dbname],
+ variables :base_url => node[:nominatim][:state] == "off" ? node[:fqdn] : "nominatim.openstreetmap.org",
+ :dbname => node[:nominatim][:dbname],
:flatnode_file => node[:nominatim][:flatnode_file],
:log_file => "#{node[:nominatim][:logdir]}/query.log"
end
user "nominatim"
group "nominatim"
mode 0o755
+ variables :bindir => build_directory,
+ :srcdir => source_directory,
+ :logfile => "#{node[:nominatim][:logdir]}/update.log",
+ :branch => node[:nominatim][:revision],
+ :update_stop_file => "#{basedir}/status/updates_disabled"
end
template "/etc/init.d/nominatim-update" do
## webserver frontend
-template "#{source_directory}/settings/ip_blocks.conf" do
+template "#{build_directory}/settings/ip_blocks.conf" do
action :create_if_missing
source "ipblocks.erb"
owner "nominatim"
mode 0o664
end
-file "#{source_directory}/settings/apache_blocks.conf" do
+file "#{build_directory}/settings/apache_blocks.conf" do
action :create_if_missing
owner "nominatim"
group "nominatim"
mode 0o664
end
-file "#{source_directory}/settings/ip_blocks.map" do
+file "#{build_directory}/settings/ip_blocks.map" do
action :create_if_missing
owner "nominatim"
group "nominatim"
apache_site "nominatim.openstreetmap.org" do
template "apache.erb"
- directory source_directory
+ directory build_directory
variables :pools => node[:nominatim][:fpm_pools]
end
include_recipe "fail2ban"
fail2ban_filter "nominatim" do
- failregex '^<HOST> - - \[[^]]+\] "[^"]+" 429 '
+ failregex '^<HOST> - - \[\] "[^"]+" 429 '
end
fail2ban_jail "nominatim" do
munin_plugin "nominatim_throttled_ips" do
target "#{source_directory}/munin/nominatim_throttled_ips"
end
+
+directory "#{basedir}/status" do
+ owner "nominatim"
+ group "postgres"
+ mode 0o775
+end