]> git.openstreetmap.org Git - chef.git/blobdiff - cookbooks/db/recipes/master.rb
imagery: tiler proxy_redirect off
[chef.git] / cookbooks / db / recipes / master.rb
index eafc7db133b70ffcfb98f86d284ad634f5123ee8..3b6890320f0fa452e6f6538e7c9185460c269079 100644 (file)
@@ -100,6 +100,7 @@ CGIMAP_PERMISSIONS = {
   "current_way_tags" => [:select, :insert, :delete],
   "current_ways" => [:select, :insert, :update],
   "current_ways_id_seq" => [:update],
+  "issues" => [:select],
   "node_tags" => [:select, :insert],
   "nodes" => [:select, :insert],
   "oauth_access_grants" => [:select],
@@ -111,6 +112,7 @@ CGIMAP_PERMISSIONS = {
   "relation_members" => [:select, :insert],
   "relation_tags" => [:select, :insert],
   "relations" => [:select, :insert],
+  "reports" => [:select],
   "user_blocks" => [:select],
   "user_roles" => [:select],
   "users" => [:select],
@@ -192,6 +194,7 @@ PROMETHEUS_PERMISSIONS = {
   reports
   schema_migrations
   user_blocks
+  user_mutes
   user_preferences
   user_roles
   user_tokens
@@ -245,6 +248,7 @@ end
   redactions_id_seq
   reports_id_seq
   user_blocks_id_seq
+  user_mutes_id_seq
   user_roles_id_seq
   user_tokens_id_seq
   users_id_seq
@@ -272,6 +276,7 @@ systemd_service "monthly-reindex" do
   user "postgres"
   sandbox true
   restrict_address_families "AF_UNIX"
+  remove_ipc false
 end
 
 systemd_timer "monthly-reindex" do
@@ -295,6 +300,7 @@ systemd_service "yearly-reindex" do
   user "postgres"
   sandbox true
   restrict_address_families "AF_UNIX"
+  remove_ipc false
 end
 
 systemd_timer "yearly-reindex" do