domains ["www.openstreetmap.org", "www.osm.org",
"api.openstreetmap.org", "api.osm.org",
"openstreetmap.org", "osm.org"]
- fallback_certificate "openstreetmap"
notifies :reload, "service[apache2]"
end
private_network true
protect_system "full"
protect_home true
+ no_new_privileges true
restart "on-failure"
end