systemd_service "mapserv-fcgi-#{new_resource.site}" do
description "Map server for #{new_resource.site} layer"
environment "MS_MAP_PATTERN" => "^/srv/imagery/mapserver/",
- "MS_DEBUGLEVEL" => "0",
+ "=" => "0",
"MS_ERRORFILE" => "stderr",
"GDAL_CACHEMAX" => "512"
limit_nofile 16384
- memory_high "512M"
- memory_max "1G"
+ memory_high "1G"
+ memory_max "2G"
user "imagery"
group "imagery"
- exec_start "/usr/lib/cgi-bin/mapserv"
+ exec_start "/usr/bin/multiwatch -f 6 --signal=TERM -- /usr/lib/cgi-bin/mapserv"
standard_input "socket"
private_tmp true
private_devices true
protect_system "full"
protect_home true
no_new_privileges true
+ # Terminate service after 5mins. Service is socket activated
+ runtime_max_sec 300
end
systemd_socket "mapserv-fcgi-#{new_resource.site}" do
socket_user "imagery"
socket_group "imagery"
listen_stream "/run/mapserver-fastcgi/layer-#{new_resource.site}.socket"
-
end
- # Ensure service is stopped else socket cannot reload
+ # Ensure service is stopped because otherwise the socket cannot reload
service "mapserv-fcgi-#{new_resource.site}" do
provider Chef::Provider::Service::Systemd
action :nothing
subscribes :stop, "systemd_socket[mapserv-fcgi-#{new_resource.site}]"
end
- systemd_unit 'mapserv-fcgi-#{new_resource.site}.socket' do
+ systemd_unit "mapserv-fcgi-#{new_resource.site}.socket" do
action [:enable, :start]
subscribes :restart, "systemd_socket[mapserv-fcgi-#{new_resource.site}]"
end