X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/68e068818d559ef35bdf2a138a93596337828ef9..036734d15e6cd4fbc57e031ceca870f6c90e53bf:/cookbooks/planet/recipes/default.rb?ds=inline diff --git a/cookbooks/planet/recipes/default.rb b/cookbooks/planet/recipes/default.rb index 4dbd51a7d..b83d3449b 100644 --- a/cookbooks/planet/recipes/default.rb +++ b/cookbooks/planet/recipes/default.rb @@ -19,11 +19,13 @@ include_recipe "accounts" include_recipe "apache" +include_recipe "geoipupdate" +include_recipe "planet::aws" include_recipe "munin" package %w[ - perl - php-cli + python3 + python3-geoip2 ] remote_directory "/store/planet#html" do @@ -50,7 +52,7 @@ end remote_directory node[:planet][:dump][:xml_history_directory] do source "history_cgi" - owner "www-data" + owner "planet" group "planet" mode "775" files_owner "root" @@ -60,7 +62,7 @@ end remote_directory "/store/planet/cc-by-sa" do source "ccbysa_cgi" - owner "www-data" + owner "planet" group "planet" mode "775" files_owner "root" @@ -70,7 +72,7 @@ end remote_directory "/store/planet/cc-by-sa/full-experimental" do source "ccbysa_history_cgi" - owner "www-data" + owner "planet" group "planet" mode "775" files_owner "root" @@ -81,20 +83,20 @@ end [:xml_directory, :xml_history_directory, :pbf_directory, :pbf_history_directory].each do |dir| directory node[:planet][:dump][dir] do - owner "www-data" + owner "planet" group "planet" mode "775" end end directory "/store/planet/notes" do - owner "www-data" + owner "planet" group "planet" mode "775" end directory "/store/planet/statistics" do - owner "www-data" + owner "planet" group "planet" mode "775" end @@ -107,6 +109,14 @@ template "/usr/local/bin/apache-latest-planet-filename" do notifies :restart, "service[apache2]" end +template "/usr/local/bin/apache-s3-ip2region" do + source "apache-s3-ip2region.erb" + owner "root" + group "root" + mode "755" + notifies :restart, "service[apache2]" +end + apache_module "cgid" apache_module "rewrite" apache_module "proxy_http" @@ -140,7 +150,7 @@ end systemd_service "planet-file-cleanup" do description "Cleanup old planet files" exec_start "/usr/local/bin/planet-file-cleanup --debug" - user "www-data" + user "planet" sandbox true read_write_paths [ node[:planet][:dump][:xml_directory],