From: Tom Hughes <tom@compton.nu>
Date: Thu, 3 Nov 2022 22:08:10 +0000 (+0000)
Subject: Fix allowed paths for tile expiry
X-Git-Url: https://git.openstreetmap.org./chef.git/commitdiff_plain/c705dbbac63b855bae7ea7df9e2bcb5bf03d8b42

Fix allowed paths for tile expiry
---

diff --git a/cookbooks/tile/recipes/default.rb b/cookbooks/tile/recipes/default.rb
index 576c0f6ad..ceacd8b4f 100644
--- a/cookbooks/tile/recipes/default.rb
+++ b/cookbooks/tile/recipes/default.rb
@@ -602,7 +602,8 @@ systemd_service "expire-tiles" do
   protect_system "strict"
   protect_home true
   read_write_paths [
-    "/srv/tile.openstreetmap.org/tiles/%i",
+    "/store/database/nodes",
+    "/store/tiles/%i",
     "/var/lib/replicate/expire-queue",
     "/var/log/tile"
   ]