X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/10ab14a11f21528e0e50ee33d0cdd983c8db000c..7e75c0595594b2b5ddac50991f6cd0f7e61633ad:/cookbooks/planet/recipes/default.rb diff --git a/cookbooks/planet/recipes/default.rb b/cookbooks/planet/recipes/default.rb index 4dbd51a7d..ad532f93e 100644 --- a/cookbooks/planet/recipes/default.rb +++ b/cookbooks/planet/recipes/default.rb @@ -19,11 +19,12 @@ include_recipe "accounts" include_recipe "apache" -include_recipe "munin" +include_recipe "geoipupdate" +include_recipe "planet::aws" package %w[ - perl - php-cli + python3 + python3-geoip2 ] remote_directory "/store/planet#html" do @@ -50,7 +51,7 @@ end remote_directory node[:planet][:dump][:xml_history_directory] do source "history_cgi" - owner "www-data" + owner "planet" group "planet" mode "775" files_owner "root" @@ -60,7 +61,7 @@ end remote_directory "/store/planet/cc-by-sa" do source "ccbysa_cgi" - owner "www-data" + owner "planet" group "planet" mode "775" files_owner "root" @@ -70,7 +71,7 @@ end remote_directory "/store/planet/cc-by-sa/full-experimental" do source "ccbysa_history_cgi" - owner "www-data" + owner "planet" group "planet" mode "775" files_owner "root" @@ -81,20 +82,20 @@ end [:xml_directory, :xml_history_directory, :pbf_directory, :pbf_history_directory].each do |dir| directory node[:planet][:dump][dir] do - owner "www-data" + owner "planet" group "planet" mode "775" end end directory "/store/planet/notes" do - owner "www-data" + owner "planet" group "planet" mode "775" end directory "/store/planet/statistics" do - owner "www-data" + owner "planet" group "planet" mode "775" end @@ -107,6 +108,14 @@ template "/usr/local/bin/apache-latest-planet-filename" do notifies :restart, "service[apache2]" end +template "/usr/local/bin/apache-s3-ip2region" do + source "apache-s3-ip2region.erb" + owner "root" + group "root" + mode "755" + notifies :restart, "service[apache2]" +end + apache_module "cgid" apache_module "rewrite" apache_module "proxy_http" @@ -128,8 +137,6 @@ template "/etc/logrotate.d/apache2" do mode "644" end -munin_plugin "planet_age" - template "/usr/local/bin/planet-file-cleanup" do source "planet-file-cleanup.erb" owner "root" @@ -140,7 +147,7 @@ end systemd_service "planet-file-cleanup" do description "Cleanup old planet files" exec_start "/usr/local/bin/planet-file-cleanup --debug" - user "www-data" + user "planet" sandbox true read_write_paths [ node[:planet][:dump][:xml_directory],