X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/d3d97882fa4b21d3d896f4362cc9cdf337981824..11fdeeaa56975b200a46cc3ee7124e529621fba9:/cookbooks/db/recipes/master.rb?ds=inline

diff --git a/cookbooks/db/recipes/master.rb b/cookbooks/db/recipes/master.rb
index eafc7db13..3e57941f7 100644
--- a/cookbooks/db/recipes/master.rb
+++ b/cookbooks/db/recipes/master.rb
@@ -62,11 +62,6 @@ postgresql_user "backup" do
   password passwords["backup"]
 end
 
-postgresql_user "munin" do
-  cluster node[:db][:cluster]
-  password passwords["munin"]
-end
-
 postgresql_user "replication" do
   cluster node[:db][:cluster]
   password passwords["replication"]
@@ -88,7 +83,6 @@ CGIMAP_PERMISSIONS = {
   "changeset_comments" => [:select],
   "changeset_tags" => [:select],
   "changesets" => [:select, :update],
-  "client_applications" => [:select],
   "current_node_tags" => [:select, :insert, :delete],
   "current_nodes" => [:select, :insert, :update],
   "current_nodes_id_seq" => [:update],
@@ -100,17 +94,16 @@ CGIMAP_PERMISSIONS = {
   "current_way_tags" => [:select, :insert, :delete],
   "current_ways" => [:select, :insert, :update],
   "current_ways_id_seq" => [:update],
+  "issues" => [:select],
   "node_tags" => [:select, :insert],
   "nodes" => [:select, :insert],
   "oauth_access_grants" => [:select],
   "oauth_access_tokens" => [:select],
   "oauth_applications" => [:select],
-  "oauth_nonces" => [:select, :insert],
-  "oauth_nonces_id_seq" => [:update],
-  "oauth_tokens" => [:select],
   "relation_members" => [:select, :insert],
   "relation_tags" => [:select, :insert],
   "relations" => [:select, :insert],
+  "reports" => [:select],
   "user_blocks" => [:select],
   "user_roles" => [:select],
   "users" => [:select],
@@ -154,7 +147,6 @@ PROMETHEUS_PERMISSIONS = {
   changeset_tags
   changesets
   changesets_subscribers
-  client_applications
   current_node_tags
   current_nodes
   current_relation_members
@@ -178,13 +170,12 @@ PROMETHEUS_PERMISSIONS = {
   node_tags
   nodes
   note_comments
+  note_subscriptions
   notes
   oauth_access_grants
   oauth_access_tokens
   oauth_applications
-  oauth_nonces
   oauth_openid_requests
-  oauth_tokens
   redactions
   relation_members
   relation_tags
@@ -192,9 +183,9 @@ PROMETHEUS_PERMISSIONS = {
   reports
   schema_migrations
   user_blocks
+  user_mutes
   user_preferences
   user_roles
-  user_tokens
   users
   way_nodes
   way_tags
@@ -221,7 +212,6 @@ end
   active_storage_variant_records_id_seq
   changeset_comments_id_seq
   changesets_id_seq
-  client_applications_id_seq
   current_nodes_id_seq
   current_relations_id_seq
   current_ways_id_seq
@@ -239,14 +229,12 @@ end
   oauth_access_grants_id_seq
   oauth_access_tokens_id_seq
   oauth_applications_id_seq
-  oauth_nonces_id_seq
   oauth_openid_requests_id_seq
-  oauth_tokens_id_seq
   redactions_id_seq
   reports_id_seq
   user_blocks_id_seq
+  user_mutes_id_seq
   user_roles_id_seq
-  user_tokens_id_seq
   users_id_seq
 ].each do |sequence|
   postgresql_sequence sequence do
@@ -272,6 +260,7 @@ systemd_service "monthly-reindex" do
   user "postgres"
   sandbox true
   restrict_address_families "AF_UNIX"
+  remove_ipc false
 end
 
 systemd_timer "monthly-reindex" do
@@ -295,11 +284,12 @@ systemd_service "yearly-reindex" do
   user "postgres"
   sandbox true
   restrict_address_families "AF_UNIX"
+  remove_ipc false
 end
 
 systemd_timer "yearly-reindex" do
   description "Yearly database reindex"
-  on_calendar "Fri *-1-8..14 02:00"
+  on_calendar "Thu *-1-8..14 02:00"
 end
 
 service "yearly-reindex.timer" do