Enable CSP in report only mode for the main web site

[chef.git] / roles / planet.rb

diff --git a/roles/planet.rb b/roles/planet.rb
index d68bdabc3ac589e6c041bc9506308133bd6b2dfe..6c765845bb7f4893bfba6f900383638c76e2cfbf 100644 (file)
--- a/roles/planet.rb
+++ b/roles/planet.rb
@@ -31,18 +31,26 @@ default_attributes(
       }
     }
   },
+  :networking => {
+    :firewall => {
+      :http_connection_limit => 10
+    }
+  },
   :apache => {
-    :mpm => "event",
+    :mpm => "worker",
     :keepalive => true,
-    :event => {
+    :worker => {
       :server_limit => 20,
-      :max_clients => 1000,
-      :threads_per_child => 50
+      :max_request_workers => 1000,
+      :threads_per_child => 50,
+      :min_spare_threads => 75,
+      :max_spare_threads => 525
     }
   }
 )
 
 run_list(
+  "role[web-db]",
   "recipe[planet]",
   "recipe[planet::replication]",
   "recipe[nfs::server]",