From: Grant Slater <git@firefishy.com>
Date: Fri, 3 Jun 2016 21:00:59 +0000 (+0100)
Subject: imagery: add clientaccesspolicy.xml + crossdomain.xml
X-Git-Url: https://git.openstreetmap.org/chef.git/commitdiff_plain/c3007519557ddc1ffa2fc597fd0f5dd900213e00?ds=inline

imagery: add clientaccesspolicy.xml + crossdomain.xml
---

diff --git a/cookbooks/imagery/files/default/clientaccesspolicy.xml b/cookbooks/imagery/files/default/clientaccesspolicy.xml
new file mode 100644
index 000000000..d60ec1d3f
--- /dev/null
+++ b/cookbooks/imagery/files/default/clientaccesspolicy.xml
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="utf-8"?>
+<access-policy>
+  <cross-domain-access>
+    <policy>
+      <allow-from http-request-headers="*">
+        <domain uri="*"/>
+      </allow-from>
+      <grant-to>
+        <resource path="/" include-subpaths="true"/>
+      </grant-to>
+    </policy>
+  </cross-domain-access>
+</access-policy>
diff --git a/cookbooks/imagery/files/default/crossdomain.xml b/cookbooks/imagery/files/default/crossdomain.xml
new file mode 100644
index 000000000..6b51ee309
--- /dev/null
+++ b/cookbooks/imagery/files/default/crossdomain.xml
@@ -0,0 +1,5 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
+<cross-domain-policy>
+  <allow-access-from domain="*"/>
+</cross-domain-policy>
diff --git a/cookbooks/imagery/resources/site.rb b/cookbooks/imagery/resources/site.rb
index ea5884563..84151ae66 100644
--- a/cookbooks/imagery/resources/site.rb
+++ b/cookbooks/imagery/resources/site.rb
@@ -62,6 +62,20 @@ action :create do
     mode 0644
   end
 
+  cookbook_file "/srv/#{name}/clientaccesspolicy.xml" do
+    source "clientaccesspolicy.xml"
+    user "root"
+    group "root"
+    mode 0644
+  end
+
+  cookbook_file "/srv/#{name}/crossdomain.xml" do
+    source "crossdomain.xml"
+    user "root"
+    group "root"
+    mode 0644
+  end
+
   layers = Dir.glob("/srv/imagery/layers/#{name}/*.yml").collect do |path|
     YAML.load(::File.read(path))
   end