+ subscribes :run, "execute[/opt/planet-dump-ng/configure]"
+end
+
+directory "/store/planetdump" do
+ owner "www-data"
+ group "www-data"
+ mode "755"
+ recursive true
+end
+
+%w[planetdump planetdump-trigger planet-mirror-redirect-update].each do |program|
+ template "/usr/local/bin/#{program}" do
+ source "#{program}.erb"
+ owner "root"
+ group "root"
+ mode "755"
+ end
+end
+
+systemd_service "planetdump@" do
+ description "Planet dump for %i"
+ user "www-data"
+ exec_start "/usr/local/bin/planetdump %i"
+ memory_max "64G"
+ sandbox true
+ read_write_paths [
+ "/store/planetdump",
+ "/store/planet/pbf",
+ "/store/planet/planet",
+ "/var/log/exim4",
+ "/var/spool/exim4"
+ ]
+end
+
+systemd_service "planetdump-trigger" do
+ description "Planet dump trigger"
+ user "root"
+ exec_start "/usr/local/bin/planetdump-trigger"
+ sandbox true
+ restrict_address_families "AF_UNIX"
+end
+
+service "planetdump-trigger" do
+ action [:enable, :start]
+ subscribes :restart, "template[/usr/local/bin/planetdump-trigger]"
+end
+
+systemd_service "planet-dump-mirror" do
+ description "Update planet dump mirrors"
+ exec_start "/usr/local/bin/planet-mirror-redirect-update"
+ user "www-data"
+ sandbox :enable_network => true
+ memory_deny_write_execute false
+ read_write_paths "/store/planet/.htaccess"
+end
+
+systemd_timer "planet-dump-mirror" do
+ description "Update planet dump mirrors"
+ on_boot_sec "10min"
+ on_unit_inactive_sec "10min"
+end
+
+service "planet-dump-mirror.timer" do
+ action [:enable, :start]