From c705dbbac63b855bae7ea7df9e2bcb5bf03d8b42 Mon Sep 17 00:00:00 2001
From: Tom Hughes <tom@compton.nu>
Date: Thu, 3 Nov 2022 22:08:10 +0000
Subject: [PATCH] Fix allowed paths for tile expiry

---
 cookbooks/tile/recipes/default.rb | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/cookbooks/tile/recipes/default.rb b/cookbooks/tile/recipes/default.rb
index 576c0f6ad..ceacd8b4f 100644
--- a/cookbooks/tile/recipes/default.rb
+++ b/cookbooks/tile/recipes/default.rb
@@ -602,7 +602,8 @@ systemd_service "expire-tiles" do
   protect_system "strict"
   protect_home true
   read_write_paths [
-    "/srv/tile.openstreetmap.org/tiles/%i",
+    "/store/database/nodes",
+    "/store/tiles/%i",
     "/var/lib/replicate/expire-queue",
     "/var/log/tile"
   ]
-- 
2.39.5