Ignore RAs on internal network for spikes and thorns

[chef.git] / roles / thorn-02.rb

diff --git a/roles/thorn-02.rb b/roles/thorn-02.rb
index c901477203fdc92ad44363c4147452fb92a1f76b..7f37e8b17ff397e27d7a69f1fae4d4d0b5a9cbef 100644 (file)
--- a/roles/thorn-02.rb
+++ b/roles/thorn-02.rb
@@ -11,6 +11,18 @@ default_attributes(
         :address => "146.179.159.166"
       }
     }
+  },
+  :sysctl => {
+    :ipv6_autoconf => {
+      :comment => "Disable IPv6 auto-configuration on internal interface",
+      :parameters => {
+        "net.ipv6.conf.eth0.autoconf" => "0",
+        "net.ipv6.conf.eth0.accept_ra" => "0"
+      }
+    }
+  },
+  :web => {
+    :readonly_database_host => "db-slave"
   }
 )