X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/9389a796d904f55451a9de2a3311fd89a4cee668..5fde77fb90280da2c008bb5e8e83f6635b999715:/cookbooks/gps-tile/recipes/default.rb diff --git a/cookbooks/gps-tile/recipes/default.rb b/cookbooks/gps-tile/recipes/default.rb index b14c30205..5fa394481 100644 --- a/cookbooks/gps-tile/recipes/default.rb +++ b/cookbooks/gps-tile/recipes/default.rb @@ -79,13 +79,25 @@ end git "/srv/gps-tile.openstreetmap.org/updater" do action :sync - repository "https://github.com/e-n-f/gpx-updater.git" - revision "master" + repository "https://github.com/openstreetmap/gpx-updater.git" + revision "live" depth 1 user "gpstile" group "gpstile" end +directory "/srv/gps-tile.openstreetmap.org/tracks" do + owner "gpstile" + group "gpstile" + mode "755" +end + +directory "/srv/gps-tile.openstreetmap.org/shapes" do + owner "gpstile" + group "gpstile" + mode "755" +end + systemd_service "gps-update" do description "GPS tile update daemon" after ["network.target", "memcached.service"] @@ -93,11 +105,9 @@ systemd_service "gps-update" do user "gpstile" working_directory "/srv/gps-tile.openstreetmap.org" exec_start "/srv/gps-tile.openstreetmap.org/updater/update" - private_tmp true - private_devices true - protect_system "full" - protect_home true - no_new_privileges true + nice 10 + sandbox :enable_network => true + read_write_paths "/srv/gps-tile.openstreetmap.org" restart "on-failure" end @@ -117,6 +127,7 @@ remote_directory "/srv/gps-tile.openstreetmap.org/html" do files_mode "644" end +apache_module "cgid" apache_module "headers" apache_module "rewrite"