]> git.openstreetmap.org Git - chef.git/blobdiff - cookbooks/web/recipes/gpx.rb
Enable CSP in report only mode for the main web site
[chef.git] / cookbooks / web / recipes / gpx.rb
index ecaf854dfaf6216c1df4d34c3b24cfef337b4dab..4a1da30b2b05405977be968b98fef72fd68eb466 100644 (file)
@@ -21,16 +21,18 @@ include_recipe "web::base"
 
 db_passwords = data_bag_item("db", "passwords")
 
-package "gcc"
-package "make"
-package "pkg-config"
-package "libarchive-dev"
-package "libbz2-dev"
-package "libexpat1-dev"
-package "libgd2-noxpm-dev"
-package "libmemcached-dev"
-package "libpq-dev"
-package "zlib1g-dev"
+package %w[
+  gcc
+  make
+  pkg-config
+  libarchive-dev
+  libbz2-dev
+  libexpat1-dev
+  libgd2-noxpm-dev
+  libmemcached-dev
+  libpq-dev
+  zlib1g-dev
+]
 
 gpx_directory = "#{node[:web][:base_directory]}/gpx-import"
 pid_directory = node[:web][:pid_directory]
@@ -75,12 +77,11 @@ systemd_service "gpx-import" do
   private_devices true
   protect_system "full"
   protect_home true
-  no_new_privileges true
   restart "on-failure"
   pid_file "#{pid_directory}/gpx-import.pid"
 end
 
-if %w(database_offline database_readonly gpx_offline).include?(node[:web][:status])
+if %w[database_offline database_readonly gpx_offline].include?(node[:web][:status])
   service "gpx-import" do
     action :stop
   end