directory "/srv/gps-tile.openstreetmap.org" do
owner "gpstile"
group "gpstile"
- mode 0o755
+ mode "755"
end
git "/srv/gps-tile.openstreetmap.org/import" do
action :sync
- repository "https://github.com/ericfischer/gpx-import.git"
+ repository "https://github.com/e-n-f/gpx-import.git"
revision "live"
+ depth 1
user "gpstile"
group "gpstile"
end
git "/srv/gps-tile.openstreetmap.org/datamaps" do
action :sync
- repository "https://github.com/ericfischer/datamaps.git"
+ repository "https://github.com/e-n-f/datamaps.git"
revision "live"
+ depth 1
user "gpstile"
group "gpstile"
end
git "/srv/gps-tile.openstreetmap.org/updater" do
action :sync
- repository "https://github.com/ericfischer/gpx-updater.git"
+ repository "https://github.com/openstreetmap/gpx-updater.git"
revision "live"
+ depth 1
user "gpstile"
group "gpstile"
end
+directory "/srv/gps-tile.openstreetmap.org/tracks" do
+ owner "gpstile"
+ group "gpstile"
+ mode "755"
+end
+
+directory "/srv/gps-tile.openstreetmap.org/shapes" do
+ owner "gpstile"
+ group "gpstile"
+ mode "755"
+end
+
systemd_service "gps-update" do
description "GPS tile update daemon"
after ["network.target", "memcached.service"]
user "gpstile"
working_directory "/srv/gps-tile.openstreetmap.org"
exec_start "/srv/gps-tile.openstreetmap.org/updater/update"
- private_tmp true
- private_devices true
- protect_system "full"
- protect_home true
- no_new_privileges true
+ nice 10
+ sandbox :enable_network => true
+ read_write_paths "/srv/gps-tile.openstreetmap.org"
restart "on-failure"
end
source "html"
owner "gpstile"
group "gpstile"
- mode 0o755
+ mode "755"
files_owner "gpstile"
files_group "gpstile"
- files_mode 0o644
+ files_mode "644"
end
+apache_module "cgid"
apache_module "headers"
apache_module "rewrite"