X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/ab47927c016597f8602b81dcdc168ad5c335389d..5fde77fb90280da2c008bb5e8e83f6635b999715:/cookbooks/gps-tile/recipes/default.rb?ds=sidebyside diff --git a/cookbooks/gps-tile/recipes/default.rb b/cookbooks/gps-tile/recipes/default.rb index 21a515034..5fa394481 100644 --- a/cookbooks/gps-tile/recipes/default.rb +++ b/cookbooks/gps-tile/recipes/default.rb @@ -43,7 +43,7 @@ end git "/srv/gps-tile.openstreetmap.org/import" do action :sync - repository "https://github.com/ericfischer/gpx-import.git" + repository "https://github.com/e-n-f/gpx-import.git" revision "live" depth 1 user "gpstile" @@ -61,7 +61,7 @@ end git "/srv/gps-tile.openstreetmap.org/datamaps" do action :sync - repository "https://github.com/ericfischer/datamaps.git" + repository "https://github.com/e-n-f/datamaps.git" revision "live" depth 1 user "gpstile" @@ -79,13 +79,25 @@ end git "/srv/gps-tile.openstreetmap.org/updater" do action :sync - repository "https://github.com/ericfischer/gpx-updater.git" + repository "https://github.com/openstreetmap/gpx-updater.git" revision "live" depth 1 user "gpstile" group "gpstile" end +directory "/srv/gps-tile.openstreetmap.org/tracks" do + owner "gpstile" + group "gpstile" + mode "755" +end + +directory "/srv/gps-tile.openstreetmap.org/shapes" do + owner "gpstile" + group "gpstile" + mode "755" +end + systemd_service "gps-update" do description "GPS tile update daemon" after ["network.target", "memcached.service"] @@ -93,11 +105,9 @@ systemd_service "gps-update" do user "gpstile" working_directory "/srv/gps-tile.openstreetmap.org" exec_start "/srv/gps-tile.openstreetmap.org/updater/update" - private_tmp true - private_devices true - protect_system "full" - protect_home true - no_new_privileges true + nice 10 + sandbox :enable_network => true + read_write_paths "/srv/gps-tile.openstreetmap.org" restart "on-failure" end @@ -117,6 +127,7 @@ remote_directory "/srv/gps-tile.openstreetmap.org/html" do files_mode "644" end +apache_module "cgid" apache_module "headers" apache_module "rewrite"