Allow job runners on dev to write to the activestorage directory

[chef.git] / cookbooks / dev / recipes / default.rb

diff --git a/cookbooks/dev/recipes/default.rb b/cookbooks/dev/recipes/default.rb
index 4874dc66a08749bfd45c4f51156b6a8333e4f4e8..3c02066db80ee4593364f3ac59a0e45a71a194ab 100644 (file)
--- a/cookbooks/dev/recipes/default.rb
+++ b/cookbooks/dev/recipes/default.rb
@@ -298,7 +298,10 @@ if node[:postgresql][:clusters][:"15/main"]
     sandbox :enable_network => true
     restrict_address_families "AF_UNIX"
     memory_deny_write_execute false
-    read_write_paths "/srv/%i.apis.dev.openstreetmap.org/logs"
+    read_write_paths [
+      "/srv/%i.apis.dev.openstreetmap.org/logs",
+      "/srv/%i.apis.dev.openstreetmap.org/storage"
+    ]
   end
 
   systemd_service "cgimap@" do