# limitations under the License.
#
+include_recipe "accounts"
+include_recipe "planet::aws"
include_recipe "python"
passwords = data_bag_item("tilelog", "passwords")
end
directory tilelog_output_directory do
- user "www-data"
- group "www-data"
+ user "planet"
+ group "planet"
mode "755"
recursive true
end
systemd_service "tilelog" do
description "Tile log analysis"
- user "www-data"
+ user "planet"
exec_start "/usr/local/bin/tilelog"
nice 10
sandbox :enable_network => true
+ protect_home "tmpfs"
+ bind_paths "/home/planet"
read_write_paths tilelog_output_directory
end