X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/7f3710f083363d1c4810e1f8f675b669a84b321e..bddcfb89a44b2c046bbebb708d8c3b551a7b2278:/cookbooks/planet/recipes/default.rb diff --git a/cookbooks/planet/recipes/default.rb b/cookbooks/planet/recipes/default.rb index 71d4cea57..4dbd51a7d 100644 --- a/cookbooks/planet/recipes/default.rb +++ b/cookbooks/planet/recipes/default.rb @@ -1,14 +1,14 @@ # -# Cookbook Name:: planet +# Cookbook:: planet # Recipe:: default # -# Copyright 2011, OpenStreetMap Foundation +# Copyright:: 2011, OpenStreetMap Foundation # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # -# http://www.apache.org/licenses/LICENSE-2.0 +# https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, @@ -17,57 +17,105 @@ # limitations under the License. # -include_recipe "apache::ssl" +include_recipe "accounts" +include_recipe "apache" +include_recipe "munin" -package "perl" -package "php5-cli" -package "pbzip2" -package "osmosis" +package %w[ + perl + php-cli +] -template "/etc/cron.d/planet" do - source "cron.erb" - owner "root" - group "root" - mode 0644 -end - -remote_directory "/store/planet" do +remote_directory "/store/planet#html" do + path "/store/planet" source "html" owner "root" group "root" mode "0755" files_owner "root" files_group "root" - files_mode 0644 + files_mode "644" end -remote_directory "/store/planet" do +remote_directory "/store/planet#cgi" do + path "/store/planet" source "cgi" owner "root" group "root" - mode 0755 + mode "755" + files_owner "root" + files_group "root" + files_mode "755" +end + +remote_directory node[:planet][:dump][:xml_history_directory] do + source "history_cgi" + owner "www-data" + group "planet" + mode "775" + files_owner "root" + files_group "root" + files_mode "755" +end + +remote_directory "/store/planet/cc-by-sa" do + source "ccbysa_cgi" + owner "www-data" + group "planet" + mode "775" + files_owner "root" + files_group "root" + files_mode "755" +end + +remote_directory "/store/planet/cc-by-sa/full-experimental" do + source "ccbysa_history_cgi" + owner "www-data" + group "planet" + mode "775" files_owner "root" files_group "root" - files_mode 0755 + files_mode "755" end [:xml_directory, :xml_history_directory, :pbf_directory, :pbf_history_directory].each do |dir| - directory dir do + directory node[:planet][:dump][dir] do owner "www-data" group "planet" - mode 0775 + mode "775" end end directory "/store/planet/notes" do owner "www-data" group "planet" - mode 0775 + mode "775" end +directory "/store/planet/statistics" do + owner "www-data" + group "planet" + mode "775" +end + +template "/usr/local/bin/apache-latest-planet-filename" do + source "apache-latest-planet-filename.erb" + owner "root" + group "root" + mode "755" + notifies :restart, "service[apache2]" +end + +apache_module "cgid" apache_module "rewrite" apache_module "proxy_http" +apache_module "ratelimit" + +ssl_certificate "planet.openstreetmap.org" do + domains ["planet.openstreetmap.org", "planet.osm.org"] + notifies :reload, "service[apache2]" +end apache_site "planet.openstreetmap.org" do template "apache.erb" @@ -77,5 +125,34 @@ template "/etc/logrotate.d/apache2" do source "logrotate.apache.erb" owner "root" group "root" - mode 0644 + mode "644" +end + +munin_plugin "planet_age" + +template "/usr/local/bin/planet-file-cleanup" do + source "planet-file-cleanup.erb" + owner "root" + group "root" + mode "755" +end + +systemd_service "planet-file-cleanup" do + description "Cleanup old planet files" + exec_start "/usr/local/bin/planet-file-cleanup --debug" + user "www-data" + sandbox true + read_write_paths [ + node[:planet][:dump][:xml_directory], + node[:planet][:dump][:pbf_directory] + ] +end + +systemd_timer "planet-file-cleanup" do + description "Cleanup old planet files" + on_calendar "Mon *-*-1..7 03:44" +end + +service "planet-file-cleanup.timer" do + action [:enable, :start] end