Disable DNSSEC validation at equinix

[chef.git] / roles / equinix.rb

diff --git a/roles/equinix.rb b/roles/equinix.rb
index 85d445dce565c148ef948fe665d23b4557d20afb..9318fb2d055eabf2509a62bbff476528532ef0ff 100644 (file)
--- a/roles/equinix.rb
+++ b/roles/equinix.rb
@@ -3,7 +3,8 @@ description "Role applied to all servers at Equinix"
 
 default_attributes(
   :networking => {
-    :nameservers => ["66.28.0.45", "66.28.0.61", "2001:978:1:1::d", "2001:978:1:2::d"],
+    :nameservers => ["8.8.8.8", "8.8.4.4", "2001:4860:4860::8888", "2001:4860:4860::8844"],
+    :dnssec => "no",
     :roles => {
       :internal => {
         :inet => {
@@ -27,7 +28,8 @@ default_attributes(
   :web => {
     :backends => %w[rails1 rails2 rails3],
     :fileserver => "ironbelly",
-    :readonly_database_host => "karm.ams.openstreetmap.org"
+    :readonly_database_host => "karm.ams.openstreetmap.org",
+    :primary_cluster => true
   }
 )