X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/dac0912b3cd3dd0437a23e83162a79a283d286a0..7ed67786891a4aae8d8fafad66ba7e2edd0b9449:/cookbooks/mediawiki/recipes/default.rb?ds=sidebyside diff --git a/cookbooks/mediawiki/recipes/default.rb b/cookbooks/mediawiki/recipes/default.rb index 0cae80cdc..d784e7b7f 100644 --- a/cookbooks/mediawiki/recipes/default.rb +++ b/cookbooks/mediawiki/recipes/default.rb @@ -41,6 +41,7 @@ package %w[ composer unzip ffmpeg + firejail ] # Mediawiki enhanced difference engine @@ -98,9 +99,10 @@ end systemd_service "mediawiki-jobs@" do description "Run mediawiki jobs for %i" - exec_start "/usr/bin/php -d memory_limit=2048M -d error_reporting=22517 /srv/%i/w/maintenance/runJobs.php --server=https://%i --maxtime=175 --memory-limit=2048M --procs=8 --nothrottle --quiet" + exec_start "/usr/bin/php -d memory_limit=2048M -d error_reporting=22517 /srv/%i/w/maintenance/runJobs.php --server=https://%i --maxtime=175 --memory-limit=2048M --procs=8" user node[:mediawiki][:user] nice 10 + runtime_max_sec 3600 sandbox :enable_network => true memory_deny_write_execute false restrict_address_families "AF_UNIX" @@ -115,9 +117,10 @@ end systemd_service "mediawiki-email-jobs@" do description "Run mediawiki email jobs for %i" - exec_start "/usr/bin/php -d memory_limit=2048M -d error_reporting=22517 /srv/%i/w/maintenance/runJobs.php --server=https://%i --maxtime=55 --type=enotifNotify --memory-limit=2048M --procs=4 --nothrottle --quiet" + exec_start "/usr/bin/php -d memory_limit=2048M -d error_reporting=22517 /srv/%i/w/maintenance/runJobs.php --server=https://%i --maxtime=55 --type=enotifNotify --memory-limit=2048M --procs=4" user node[:mediawiki][:user] nice 10 + runtime_max_sec 3600 sandbox :enable_network => true memory_deny_write_execute false restrict_address_families "AF_UNIX" @@ -130,22 +133,6 @@ systemd_timer "mediawiki-email-jobs@" do on_unit_inactive_sec "1m" end -systemd_service "mediawiki-refresh-links@" do - description "Refresh mediawiki links for %i" - exec_start "/usr/bin/php -d memory_limit=4096M -d error_reporting=22517 /srv/%i/w/maintenance/refreshLinks.php --server=https://%i --memory-limit=2048M --quiet" - user node[:mediawiki][:user] - nice 10 - sandbox :enable_network => true - memory_deny_write_execute false - restrict_address_families "AF_UNIX" - read_write_paths "/srv/%i" -end - -systemd_timer "mediawiki-refresh-links@" do - description "Refresh mediawiki links for %i" - on_calendar "Sat 00:05" -end - systemd_service "mediawiki-cleanup-gs" do description "Clean up imagemagick gs_* files" exec_start "/usr/bin/find /tmp -maxdepth 1 -type f -user www-data -mmin +90 -name 'gs_*' -delete"