X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/29a5abe37175eaa75fdf19cda4cfec57cd387e3c..4bae0342049a9877c1bc8a0e26717976cf9d531b:/cookbooks/mediawiki/recipes/default.rb diff --git a/cookbooks/mediawiki/recipes/default.rb b/cookbooks/mediawiki/recipes/default.rb index af0e645a0..c7249e8fa 100644 --- a/cookbooks/mediawiki/recipes/default.rb +++ b/cookbooks/mediawiki/recipes/default.rb @@ -87,6 +87,7 @@ systemd_service "mediawiki-sitemap@" do nice 10 sandbox :enable_network => true memory_deny_write_execute false + restrict_address_families "AF_UNIX" read_write_paths "/srv/%i" end @@ -97,11 +98,13 @@ end systemd_service "mediawiki-jobs@" do description "Run mediawiki jobs for %i" - exec_start "/usr/bin/php -d memory_limit=2048M -d error_reporting=22517 /srv/%i/w/maintenance/runJobs.php --server=https://%i --maxtime=175 --memory-limit=2048M --procs=8 --nothrottle --quiet" + exec_start "/usr/bin/php -d memory_limit=2048M -d error_reporting=22517 /srv/%i/w/maintenance/runJobs.php --server=https://%i --maxtime=175 --memory-limit=2048M --procs=8" user node[:mediawiki][:user] nice 10 + runtime_max_sec 3600 sandbox :enable_network => true memory_deny_write_execute false + restrict_address_families "AF_UNIX" read_write_paths "/srv/%i" end @@ -113,11 +116,14 @@ end systemd_service "mediawiki-email-jobs@" do description "Run mediawiki email jobs for %i" - exec_start "/usr/bin/php -d memory_limit=2048M -d error_reporting=22517 /srv/%i/w/maintenance/runJobs.php --server=https://%i --maxtime=55 --type=enotifNotify --memory-limit=2048M --procs=4 --nothrottle --quiet" + exec_start "/usr/bin/php -d memory_limit=2048M -d error_reporting=22517 /srv/%i/w/maintenance/runJobs.php --server=https://%i --maxtime=55 --type=enotifNotify --memory-limit=2048M --procs=4" user node[:mediawiki][:user] nice 10 + runtime_max_sec 3600 sandbox :enable_network => true memory_deny_write_execute false + restrict_address_families "AF_UNIX" + read_write_paths "/srv/%i" end systemd_timer "mediawiki-email-jobs@" do @@ -126,20 +132,6 @@ systemd_timer "mediawiki-email-jobs@" do on_unit_inactive_sec "1m" end -systemd_service "mediawiki-refresh-links@" do - description "Refresh mediawiki links for %i" - exec_start "/usr/bin/php -d memory_limit=2048M -d error_reporting=22517 /srv/%i/w/maintenance/refreshLinks.php --server=https://%i --memory-limit=2048M --quiet" - user node[:mediawiki][:user] - nice 10 - sandbox :enable_network => true - memory_deny_write_execute false -end - -systemd_timer "mediawiki-refresh-links@" do - description "Refresh mediawiki links for %i" - on_calendar "Sat 00:05" -end - systemd_service "mediawiki-cleanup-gs" do description "Clean up imagemagick gs_* files" exec_start "/usr/bin/find /tmp -maxdepth 1 -type f -user www-data -mmin +90 -name 'gs_*' -delete"