Improve filesystem sandboxing for tile services

[chef.git] / roles / pummelzacken.rb

diff --git a/roles/pummelzacken.rb b/roles/pummelzacken.rb
index 9095e8ffb100cb3693578b1db0798c6120c4d196..d16fa71ad041d6ad5f5cf65f53e64f349e86241b 100644 (file)
--- a/roles/pummelzacken.rb
+++ b/roles/pummelzacken.rb
@@ -25,7 +25,7 @@ default_attributes(
     }
   },
   :postgresql => {
-    :versions => ["13"],
+    :versions => ["14"],
     :settings => {
       :defaults => {
         :listen_addresses => "10.0.0.20",
@@ -37,10 +37,15 @@ default_attributes(
   },
   :nominatim => {
     :state => "standalone",
-    :dbcluster => "13/main",
+    :dbcluster => "14/main",
     :postgis => "3",
     :enable_backup => true,
-    :flatnode_file => "/ssd/nominatim/nodes.store"
+    :flatnode_file => "/ssd/nominatim/nodes.store",
+    :tablespaces => {
+      "daux" => "/data/tablespaces/daux",
+      "iaux" => "/data/tablespaces/iaux"
+    }
+
   }
 )