Add TOTP token enforcement to overpass

[chef.git] / cookbooks / tilelog / recipes / default.rb

diff --git a/cookbooks/tilelog/recipes/default.rb b/cookbooks/tilelog/recipes/default.rb
index 56d7870f3c6b60ad5929a71b543ce4cc6577ab62..9660b9d57c27b682a77cfb647174b3ce2f7c9920 100644 (file)
--- a/cookbooks/tilelog/recipes/default.rb
+++ b/cookbooks/tilelog/recipes/default.rb
@@ -17,83 +17,54 @@
 # limitations under the License.
 #
 
 # limitations under the License.
 #
 

-include_recipe "git"
-include_recipe "tools"
+include_recipe "python"

 
 

-package %w[
-  gcc
-  g++
-  make
-  autoconf
-  automake
-  libboost-filesystem-dev
-  libboost-program-options-dev
-  libboost-system-dev
-]
+passwords = data_bag_item("tilelog", "passwords")

 
 

-tilelog_source_directory = node[:tilelog][:source_directory]
-tilelog_input_directory = node[:tilelog][:input_directory]
+tilelog_directory = "/opt/tilelog"

 tilelog_output_directory = node[:tilelog][:output_directory]
 
 tilelog_output_directory = node[:tilelog][:output_directory]
 

-# resources for building the tile analysis binary
-git tilelog_source_directory do
-  action :sync
-  repository "https://github.com/zerebubuth/openstreetmap-tile-analyze.git"
-  revision "live"
-  user "root"
-  group "root"
-  notifies :run, "execute[tilelog-autogen]", :immediately
+python_virtualenv tilelog_directory do
+  interpreter "/usr/bin/python3"

 end
 
 end
 

-execute "tilelog-autogen" do
-  action :nothing
-  command "autoreconf -i"
-  cwd tilelog_source_directory
-  user "root"
-  group "root"
-  notifies :run, "execute[tilelog-configure]", :immediately
-end
-
-execute "tilelog-configure" do
-  action :nothing
-  command "./configure --with-boost-libdir=/usr/lib/x86_64-linux-gnu"
-  cwd tilelog_source_directory
-  user "root"
-  group "root"
-  notifies :run, "execute[tilelog-build]", :immediately
+python_package "tilelog" do
+  python_virtualenv tilelog_directory
+  python_version "3"

 end
 
 end
 

-execute "tilelog-build" do
-  action :nothing
-  command "make"
-  cwd tilelog_source_directory
-  user "root"
-  group "root"
+directory tilelog_output_directory do
+  user "www-data"
+  group "www-data"
+  mode "755"
+  recursive true

 end
 
 end
 

-# resources for running the tile analysis

 template "/usr/local/bin/tilelog" do
   source "tilelog.erb"
   owner "root"
   group "root"
 template "/usr/local/bin/tilelog" do
   source "tilelog.erb"
   owner "root"
   group "root"

-  mode 0o755
-  variables :analyze_bin => "#{tilelog_source_directory}/openstreetmap-tile-analyze",
-            :input_dir => tilelog_input_directory,
-            :output_dir => tilelog_output_directory
+  mode "755"
+  variables :output_dir => tilelog_output_directory,
+            :aws_key => passwords["aws_key"]

 end
 
 end
 

-template "/etc/cron.d/tilelog" do
-  source "tilelog.cron.erb"
-  owner "root"
-  group "root"
-  mode 0o644
+systemd_service "tilelog" do
+  description "Tile log analysis"
+  user "www-data"
+  exec_start "/usr/local/bin/tilelog"
+  private_tmp true
+  private_devices true
+  protect_system "strict"
+  protect_home true
+  read_write_paths tilelog_output_directory

 end
 
 end
 

-# resources related to the output of the analysis and where it
-# can be publicly downloaded.
-directory tilelog_output_directory do
-  user "www-data"
-  group "www-data"
-  mode 0o755
-  recursive true
+systemd_timer "tilelog" do
+  description "Tile log analysis"
+  on_calendar "*-*-* 01:07:00"
+end
+
+service "tilelog.timer" do
+  action [:enable, :start]

 end
 end