X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/052ea0a5e163d8f83191ab3153d213275ec07aaa..50aea11082eaa90bd37593b9c987d38a082f4e1b:/cookbooks/planet/recipes/dump.rb

diff --git a/cookbooks/planet/recipes/dump.rb b/cookbooks/planet/recipes/dump.rb
index 854c0a7c6..d386eaa79 100644
--- a/cookbooks/planet/recipes/dump.rb
+++ b/cookbooks/planet/recipes/dump.rb
@@ -17,6 +17,7 @@
 # limitations under the License.
 #
 
+include_recipe "accounts"
 include_recipe "git"
 
 package %w[
@@ -37,8 +38,6 @@ package %w[
   libprotobuf-dev
   osmpbf-bin
   pbzip2
-  php-cli
-  php-curl
   mktorrent
   xmlstarlet
   libxml2-utils
@@ -94,7 +93,7 @@ directory "/store/planetdump" do
   recursive true
 end
 
-%w[planetdump planetdump-trigger planet-mirror-redirect-update].each do |program|
+%w[planetdump planetdump-trigger].each do |program|
   template "/usr/local/bin/#{program}" do
     source "#{program}.erb"
     owner "root"
@@ -108,7 +107,9 @@ systemd_service "planetdump@" do
   user "planet"
   exec_start "/usr/local/bin/planetdump %i"
   memory_max "64G"
-  sandbox true
+  sandbox :enable_network => true
+  protect_home "tmpfs"
+  bind_paths "/home/planet"
   read_write_paths [
     "/store/planetdump",
     "/store/planet/pbf",
@@ -130,22 +131,3 @@ service "planetdump-trigger" do
   action [:enable, :start]
   subscribes :restart, "template[/usr/local/bin/planetdump-trigger]"
 end
-
-systemd_service "planet-dump-mirror" do
-  description "Update planet dump mirrors"
-  exec_start "/usr/local/bin/planet-mirror-redirect-update"
-  user "planet"
-  sandbox :enable_network => true
-  memory_deny_write_execute false
-  read_write_paths "/store/planet/.htaccess"
-end
-
-systemd_timer "planet-dump-mirror" do
-  description "Update planet dump mirrors"
-  on_boot_sec "10min"
-  on_unit_inactive_sec "10min"
-end
-
-service "planet-dump-mirror.timer" do
-  action [:enable, :start]
-end