depth 1
user "blogs"
group "blogs"
- notifies :run, "bundle_install[/srv/blogs.openstreetmap.org]", :immediately
end
bundle_install "/srv/blogs.openstreetmap.org" do
action :nothing
- options "--deployment"
- user "root"
- group "root"
- notifies :run, "bundle_exec[/srv/blogs.openstreetmap.org]", :immediately
+ options "--deployment --without development test"
+ environment "BUNDLE_PATH" => "vendor/bundle"
+ user "blogs"
+ group "blogs"
+ subscribes :run, "git[/srv/blogs.openstreetmap.org]", :immediately
end
bundle_exec "/srv/blogs.openstreetmap.org" do
action :nothing
command "pluto build -t osm -o build"
+ environment "BUNDLE_PATH" => "vendor/bundle"
user "blogs"
group "blogs"
+ subscribes :run, "git[/srv/blogs.openstreetmap.org]", :immediately
end
ssl_certificate "blogs.openstreetmap.org" do
description "Update blog aggregator"
exec_start "/usr/local/bin/blogs-update"
user "blogs"
- private_tmp true
- private_devices true
- protect_system "strict"
- protect_home true
+ sandbox :enable_network => true
read_write_paths "/srv/blogs.openstreetmap.org"
end