X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/111155132a3e59d63cd3f8c0e1bbf71905c06051..116603252e113ecfd4073cee6a85127d02fc2282:/cookbooks/gps-tile/recipes/default.rb?ds=sidebyside diff --git a/cookbooks/gps-tile/recipes/default.rb b/cookbooks/gps-tile/recipes/default.rb index bc4e4c637..5fa394481 100644 --- a/cookbooks/gps-tile/recipes/default.rb +++ b/cookbooks/gps-tile/recipes/default.rb @@ -86,6 +86,18 @@ git "/srv/gps-tile.openstreetmap.org/updater" do group "gpstile" end +directory "/srv/gps-tile.openstreetmap.org/tracks" do + owner "gpstile" + group "gpstile" + mode "755" +end + +directory "/srv/gps-tile.openstreetmap.org/shapes" do + owner "gpstile" + group "gpstile" + mode "755" +end + systemd_service "gps-update" do description "GPS tile update daemon" after ["network.target", "memcached.service"] @@ -94,12 +106,8 @@ systemd_service "gps-update" do working_directory "/srv/gps-tile.openstreetmap.org" exec_start "/srv/gps-tile.openstreetmap.org/updater/update" nice 10 - private_tmp true - private_devices true - protect_system "strict" - protect_home true - read_write_directories "/srv/gps-tile.openstreetmap.org" - no_new_privileges true + sandbox :enable_network => true + read_write_paths "/srv/gps-tile.openstreetmap.org" restart "on-failure" end @@ -119,6 +127,7 @@ remote_directory "/srv/gps-tile.openstreetmap.org/html" do files_mode "644" end +apache_module "cgid" apache_module "headers" apache_module "rewrite"