remote_directory node[:planet][:dump][:xml_history_directory] do
source "history_cgi"
- owner "www-data"
+ owner "planet"
group "planet"
mode "775"
files_owner "root"
remote_directory "/store/planet/cc-by-sa" do
source "ccbysa_cgi"
- owner "www-data"
+ owner "planet"
group "planet"
mode "775"
files_owner "root"
remote_directory "/store/planet/cc-by-sa/full-experimental" do
source "ccbysa_history_cgi"
- owner "www-data"
+ owner "planet"
group "planet"
mode "775"
files_owner "root"
[:xml_directory, :xml_history_directory,
:pbf_directory, :pbf_history_directory].each do |dir|
directory node[:planet][:dump][dir] do
- owner "www-data"
+ owner "planet"
group "planet"
mode "775"
end
end
directory "/store/planet/notes" do
- owner "www-data"
+ owner "planet"
group "planet"
mode "775"
end
directory "/store/planet/statistics" do
- owner "www-data"
+ owner "planet"
group "planet"
mode "775"
end
systemd_service "planet-file-cleanup" do
description "Cleanup old planet files"
exec_start "/usr/local/bin/planet-file-cleanup --debug"
- user "www-data"
+ user "planet"
sandbox true
read_write_paths [
node[:planet][:dump][:xml_directory],
end
directory "/store/planetdump" do
- owner "www-data"
- group "www-data"
+ owner "planet"
+ group "planet"
mode "755"
recursive true
end
systemd_service "planetdump@" do
description "Planet dump for %i"
- user "www-data"
+ user "planet"
exec_start "/usr/local/bin/planetdump %i"
memory_max "64G"
sandbox true
systemd_service "planet-dump-mirror" do
description "Update planet dump mirrors"
exec_start "/usr/local/bin/planet-mirror-redirect-update"
- user "www-data"
+ user "planet"
sandbox :enable_network => true
memory_deny_write_execute false
read_write_paths "/store/planet/.htaccess"
systemd_service "planet-notes-dump" do
description "Create notes dump"
exec_start "/usr/local/bin/planet-notes-dump"
- user "www-data"
+ user "planet"
sandbox :enable_network => true
read_write_paths "/store/planet/notes"
end
systemd_service "planet-notes-cleanup" do
description "Delete old notes dumps"
exec_start "/usr/local/bin/planet-notes-cleanup"
- user "www-data"
+ user "planet"
sandbox true
read_write_paths "/store/planet/notes"
end