imagery: allow mapserver to use network

diff --git a/cookbooks/imagery/recipes/au_act_aerial.rb b/cookbooks/imagery/recipes/au_act_aerial.rb
index 990e80788d21821a71e02fea95035d6b7e032718..cc0135998866f94477dedc13aeaf52cd8c331f0a 100644 (file)
--- a/cookbooks/imagery/recipes/au_act_aerial.rb
+++ b/cookbooks/imagery/recipes/au_act_aerial.rb
@@ -47,7 +47,6 @@ imagery_layer "act_aerial_imagery_202311" do
   source "https://tiles.arcgis.com/tiles/E5n4f1VY84i0xSjy/arcgis/rest/services/ACT_Aerial_Imagery_202311/MapServer/WMTS/1.0.0/WMTSCapabilities.xml"
   # attribution per https://www.actmapi.act.gov.au/terms-and-conditions and https://tiles.arcgis.com/tiles/E5n4f1VY84i0xSjy/arcgis/rest/services/ACT_Aerial_Imagery_202311/MapServer/
   copyright "ACT Imagery from <a href='https://www.actmapi.act.gov.au/home'>ACTmapi</a> (c) Australian Capital Territory and MetroMap. "
-  default_layer true
   background_colour "0 0 0"
   extension "jpeg"
   max_zoom 22
@@ -60,7 +59,6 @@ imagery_layer "act_aerial_imagery_202305" do
   source "https://tiles.arcgis.com/tiles/E5n4f1VY84i0xSjy/arcgis/rest/services/ACT_Aerial_Imagery_202305/MapServer/WMTS/1.0.0/WMTSCapabilities.xml"
   # attribution per https://www.actmapi.act.gov.au/terms-and-conditions and https://tiles.arcgis.com/tiles/E5n4f1VY84i0xSjy/arcgis/rest/services/ACT_Aerial_Imagery_202305/MapServer/
   copyright "ACT Imagery from <a href='https://www.actmapi.act.gov.au/home'>ACTmapi</a> (c) Australian Capital Territory and MetroMap. "
-  default_layer true
   background_colour "0 0 0"
   extension "jpeg"
   max_zoom 22

diff --git a/cookbooks/imagery/resources/site.rb b/cookbooks/imagery/resources/site.rb
index 5eddb448c47d6a6356297cf75367b5171d482926..81cc0ec906915c68016380cb0b86888cbfa39ab1 100644 (file)
--- a/cookbooks/imagery/resources/site.rb
+++ b/cookbooks/imagery/resources/site.rb
@@ -114,6 +114,7 @@ action :create do
     exec_start "/usr/bin/multiwatch -f 8 --signal=TERM -- /usr/lib/cgi-bin/mapserv"
     standard_input "socket"
     sandbox true
+    enable_network true
     restrict_address_families "AF_UNIX"
     timeout_stop_sec 60
     not_if { new_resource.uses_tiler }