X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/052ea0a5e163d8f83191ab3153d213275ec07aaa..3b7db03656d2f783af8ad7f9e6c19716773da602:/cookbooks/planet/recipes/notes.rb?ds=sidebyside diff --git a/cookbooks/planet/recipes/notes.rb b/cookbooks/planet/recipes/notes.rb index 91c03df4b..e63297081 100644 --- a/cookbooks/planet/recipes/notes.rb +++ b/cookbooks/planet/recipes/notes.rb @@ -17,8 +17,9 @@ # limitations under the License. # +include_recipe "accounts" include_recipe "git" -include_recipe "awscli" +include_recipe "planet::aws" db_passwords = data_bag_item("db", "passwords") @@ -56,6 +57,8 @@ systemd_service "planet-notes-dump" do exec_start "/usr/local/bin/planet-notes-dump" user "planet" sandbox :enable_network => true + protect_home "tmpfs" + bind_paths "/home/planet" read_write_paths "/store/planet/notes" end