X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/08e8b63150703826141d47c582498989f0e0f832..3720032b9487e8cdd89eed9461ddeeac2c3cd764:/cookbooks/nominatim/recipes/default.rb diff --git a/cookbooks/nominatim/recipes/default.rb b/cookbooks/nominatim/recipes/default.rb index 929645f38..e0a7870d5 100644 --- a/cookbooks/nominatim/recipes/default.rb +++ b/cookbooks/nominatim/recipes/default.rb @@ -17,7 +17,9 @@ # limitations under the License. # +include_recipe "accounts" include_recipe "munin" +include_recipe "php::fpm" basedir = data_bag_item("accounts", "nominatim")["home"] email_errors = data_bag_item("accounts", "lonvia")["email"] @@ -25,14 +27,14 @@ email_errors = data_bag_item("accounts", "lonvia")["email"] directory basedir do owner "nominatim" group "nominatim" - mode 0o755 + mode "755" recursive true end directory node[:nominatim][:logdir] do owner "nominatim" group "nominatim" - mode 0o755 + mode "755" recursive true end @@ -40,14 +42,14 @@ file "#{node[:nominatim][:logdir]}/query.log" do action :create_if_missing owner "www-data" group "adm" - mode 0o664 + mode "664" end file "#{node[:nominatim][:logdir]}/update.log" do action :create_if_missing owner "nominatim" group "adm" - mode 0o664 + mode "664" end # exception granted for a limited time so that they can set up their own server @@ -97,7 +99,7 @@ end directory "#{basedir}/tablespaces" do owner "postgres" group "postgres" - mode 0o700 + mode "700" end # Note: tablespaces must be exactly in the same location on each @@ -107,7 +109,7 @@ node[:nominatim][:tablespaces].each do |name, location| directory location do owner "postgres" group "postgres" - mode 0o700 + mode "700" recursive true end @@ -131,14 +133,14 @@ if node[:nominatim][:state] == "master" directory node[:rsyncd][:modules][:archive][:path] do owner "postgres" group "postgres" - mode 0o700 + mode "700" end template "/usr/local/bin/clean-db-nominatim" do source "clean-db-nominatim.erb" owner "root" group "root" - mode 0o755 + mode "755" variables :archive_dir => node[:rsyncd][:modules][:archive][:path], :update_stop_file => "#{basedir}/status/updates_disabled", :streaming_clients => search(:node, "nominatim_state:slave").map { |slave| slave[:fqdn] }.join(" ") @@ -166,19 +168,18 @@ package %w[ python3-pyosmium pyosmium python3-psycopg2 - php - php-fpm php-pgsql php-intl ] source_directory = "#{basedir}/nominatim" build_directory = "#{basedir}/bin" +ui_directory = "#{basedir}/ui" directory build_directory do owner "nominatim" group "nominatim" - mode 0o755 + mode "755" recursive true end @@ -209,7 +210,7 @@ template "#{source_directory}/.git/hooks/post-merge" do source "git-post-merge-hook.erb" owner "nominatim" group "nominatim" - mode 0o755 + mode "755" variables :srcdir => source_directory, :builddir => build_directory, :dbname => node[:nominatim][:dbname] @@ -219,13 +220,28 @@ template "#{build_directory}/settings/local.php" do source "settings.erb" owner "nominatim" group "nominatim" - mode 0o664 + mode "664" variables :base_url => node[:nominatim][:state] == "off" ? node[:fqdn] : "nominatim.openstreetmap.org", :dbname => node[:nominatim][:dbname], :flatnode_file => node[:nominatim][:flatnode_file], :log_file => "#{node[:nominatim][:logdir]}/query.log" end +git ui_directory do + action :sync + repository node[:nominatim][:ui_repository] + revision node[:nominatim][:ui_revision] + user "nominatim" + group "nominatim" +end + +template "#{ui_directory}/dist/config.js" do + source "ui-config.js.erb" + owner "nominatim" + group "nominatim" + mode "664" +end + if node[:nominatim][:flatnode_file] directory File.dirname(node[:nominatim][:flatnode_file]) do recursive true @@ -236,7 +252,7 @@ template "/etc/logrotate.d/nominatim" do source "logrotate.nominatim.erb" owner "root" group "root" - mode 0o644 + mode "644" end external_data = [ @@ -250,7 +266,7 @@ external_data.each do |fname| source "https://www.nominatim.org/data/#{fname}" owner "nominatim" group "nominatim" - mode 0o644 + mode "644" end end @@ -259,25 +275,67 @@ remote_file "#{source_directory}/data/country_osm_grid.sql.gz" do source "https://www.nominatim.org/data/country_grid.sql.gz" owner "nominatim" group "nominatim" - mode 0o644 + mode "644" end -template "/etc/cron.d/nominatim" do - action node[:nominatim][:state] == "off" ? :delete : :create - source "nominatim.cron.erb" - owner "root" - group "root" - mode "0644" - variables :bin_directory => "#{source_directory}/utils", - :mailto => email_errors, - :update_maintenance_trigger => "#{basedir}/status/update_maintenance" +if node[:nominatim][:state] == "off" + cron_d "nominatim-backup" do + action :delete + end + + cron_d "nominatim-vacuum-db" do + action :delete + end + + cron_d "nominatim-clean-db" do + action :delete + end + + cron_d "nominatim-update-maintenance-trigger" do + action :delete + end +else + cron_d "nominatim-backup" do + action node[:nominatim][:enable_backup] ? :create : :delete + minute "0" + hour "3" + day "1" + user "nominatim" + command "/usr/local/bin/backup-nominatim" + mailto email_errors + end + + cron_d "nominatim-vacuum-db" do + minute "20" + hour "0" + user "postgres" + command "/usr/local/bin/vacuum-db-nominatim" + mailto email_errors + end + + cron_d "nominatim-clean-db" do + action node[:nominatim][:state] == "master" ? :create : :delete + minute "5" + hour "*/4" + user "postgres" + command "/usr/local/bin/clean-db-nominatim" + mailto email_errors + end + + cron_d "nominatim-update-maintenance-trigger" do + minute "18" + hour "1" + user "nominatim" + command "touch #{basedir}/status/update_maintenance" + mailto email_errors + end end template "#{source_directory}/utils/nominatim-update" do source "updater.erb" user "nominatim" group "nominatim" - mode 0o755 + mode "755" variables :bindir => build_directory, :srcdir => source_directory, :logfile => "#{node[:nominatim][:logdir]}/update.log", @@ -290,7 +348,7 @@ template "/etc/init.d/nominatim-update" do source "updater.init.erb" user "nominatim" group "nominatim" - mode 0o755 + mode "755" variables :source_directory => source_directory end @@ -299,7 +357,7 @@ end source "#{fname}.erb" owner "root" group "root" - mode 0o755 + mode "755" variables :db => node[:nominatim][:dbname] end end @@ -309,31 +367,27 @@ end directory "#{basedir}/etc" do owner "nominatim" group "adm" - mode 0o775 + mode "775" end -%w[user_agent referer email].each do |name| +%w[user_agent referrer email].each do |name| file "#{basedir}/etc/nginx_blocked_#{name}.conf" do action :create_if_missing owner "nominatim" group "adm" - mode 0o664 + mode "664" end end -service "php7.2-fpm" do - action [:enable, :start] - supports :status => true, :restart => true, :reload => true -end - node[:nominatim][:fpm_pools].each do |name, data| - template "/etc/php/7.2/fpm/pool.d/#{name}.conf" do - source "fpm.conf.erb" - owner "root" - group "root" - mode 0o644 - variables data.merge(:name => name) - notifies :reload, "service[php7.2-fpm]" + php_fpm name.to_s do + port data[:port] + pm data[:pm] + pm_max_children data[:max_children] + pm_start_servers 20 + pm_min_spare_servers 10 + pm_max_spare_servers 20 + pm_max_requests 10000 end end @@ -363,14 +417,15 @@ nginx_site "nominatim" do directory build_directory variables :pools => node[:nominatim][:fpm_pools], :frontends => search(:node, "recipes:web\\:\\:frontend"), - :confdir => "#{basedir}/etc" + :confdir => "#{basedir}/etc", + :ui_directory => ui_directory end template "/etc/logrotate.d/nginx" do source "logrotate.nginx.erb" owner "root" group "root" - mode 0o644 + mode "644" end munin_plugin_conf "nominatim" do @@ -394,7 +449,7 @@ end directory "#{basedir}/status" do owner "nominatim" group "postgres" - mode 0o775 + mode "775" end include_recipe "fail2ban"