Fix allowed paths for tile expiry

[chef.git] / cookbooks / tile / recipes / default.rb

diff --git a/cookbooks/tile/recipes/default.rb b/cookbooks/tile/recipes/default.rb
index 576c0f6adf080718f0e35dd637bac1b208a8964c..ceacd8b4fc4b3b8b347fd3fc13837e67f357e2e2 100644 (file)
--- a/cookbooks/tile/recipes/default.rb
+++ b/cookbooks/tile/recipes/default.rb
@@ -602,7 +602,8 @@ systemd_service "expire-tiles" do
   protect_system "strict"
   protect_home true
   read_write_paths [
-    "/srv/tile.openstreetmap.org/tiles/%i",
+    "/store/database/nodes",
+    "/store/tiles/%i",
     "/var/lib/replicate/expire-queue",
     "/var/log/tile"
   ]