X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/db8cff3ccb090c53b831f7f5e0b3a7f7e3d858c8..1ce4b4b8855822a61231b92e1bea70e606d7316d:/cookbooks/blogs/recipes/default.rb diff --git a/cookbooks/blogs/recipes/default.rb b/cookbooks/blogs/recipes/default.rb index c4d425a56..6b181f209 100644 --- a/cookbooks/blogs/recipes/default.rb +++ b/cookbooks/blogs/recipes/default.rb @@ -82,12 +82,8 @@ systemd_service "blogs-update" do description "Update blog aggregator" exec_start "/usr/local/bin/blogs-update" user "blogs" - private_tmp true - private_devices true - protect_system "strict" - protect_home true + sandbox :enable_network => true read_write_paths "/srv/blogs.openstreetmap.org" - no_new_privileges true end systemd_timer "blogs-update" do