Switch web site to readonly against karm

[chef.git] / cookbooks / prometheus / recipes / server.rb

diff --git a/cookbooks/prometheus/recipes/server.rb b/cookbooks/prometheus/recipes/server.rb
index 6ea6c9333720e8bb03e84c5b4ad72d3e31229eda..4b9058c8eb5964dafd855879eafc272256891e35 100644 (file)
--- a/cookbooks/prometheus/recipes/server.rb
+++ b/cookbooks/prometheus/recipes/server.rb
@@ -363,7 +363,7 @@ apache_module "proxy_http"
 apache_module "proxy_wstunnel"
 
 ssl_certificate "prometheus.openstreetmap.org" do
-  domains ["prometheus.openstreetmap.org", "prometheus.osm.org"]
+  domains ["prometheus.openstreetmap.org", "prometheus.osm.org", "munin.openstreetmap.org", "munin.osm.org"]
   notifies :reload, "service[apache2]"
 end
 
@@ -409,7 +409,10 @@ systemd_service "prometheus-backup-data" do
   description "Backup prometheus data to S3"
   user "prometheus"
   exec_start "/usr/local/bin/prometheus-backup-data"
-  read_write_paths "/var/lib/prometheus/metrics2/snapshots"
+  read_write_paths %w[
+    /var/lib/prometheus/.aws
+    /var/lib/prometheus/metrics2/snapshots
+  ]
   sandbox :enable_network => true
 end