X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/7108c794e6ce1a3ea78f3ac6ff8fd7ea3bdc62a3..b06d91f3a7c481ab17c2c621b2d14c24a060d7b6:/cookbooks/tile/recipes/default.rb diff --git a/cookbooks/tile/recipes/default.rb b/cookbooks/tile/recipes/default.rb index 4de4200bc..d726a2220 100644 --- a/cookbooks/tile/recipes/default.rb +++ b/cookbooks/tile/recipes/default.rb @@ -165,30 +165,6 @@ python_package "pyotp" do python_version "3" end -unifont = if node[:lsb][:release].to_f < 22.04 - "ttf-unifont" - else - "fonts-unifont" - end - -package %W[ - fonts-noto-cjk - fonts-noto-hinted - fonts-noto-unhinted - fonts-hanazono - #{unifont} -] - -["NotoSansArabicUI-Regular.ttf", "NotoSansArabicUI-Bold.ttf"].each do |font| - remote_file "/usr/share/fonts/truetype/noto/#{font}" do - action :create_if_missing - source "https://github.com/googlei18n/noto-fonts/raw/master/hinted/#{font}" - owner "root" - group "root" - mode "644" - end -end - directory "/srv/tile.openstreetmap.org/cgi-bin" do owner "tile" group "tile" @@ -386,6 +362,17 @@ node[:tile][:styles].each do |name, details| group "tile" end + if details[:fonts_script] + execute details[:fonts_script] do + action :nothing + command details[:fonts_script] + cwd style_directory + user "tile" + group "tile" + subscribes :run, "git[#{style_directory}]" + end + end + execute "#{style_directory}/project.mml" do action :nothing command "carto -a 3.0.0 project.mml > project.xml" @@ -413,6 +400,11 @@ postgresql_user "tomh" do superuser true end +postgresql_user "pnorman" do + cluster node[:tile][:database][:cluster] + superuser true +end + postgresql_user "tile" do cluster node[:tile][:database][:cluster] end @@ -550,6 +542,7 @@ systemd_service "tile-ratelimit" do user "tile" group "adm" exec_start "/usr/local/bin/tile-ratelimit" + nice 10 private_tmp true private_devices true private_network true @@ -598,6 +591,7 @@ systemd_service "expire-tiles" do type "simple" user "_renderd" exec_start "/usr/local/bin/expire-tiles" + nice 10 standard_output "null" private_tmp true private_devices true