X-Git-Url: https://git.openstreetmap.org/chef.git/blobdiff_plain/720e170f702fef16f779716f25202851e348fc8a..743ccc20d107fb66d801138af23752fd6b4fa701:/roles/shenron.rb

diff --git a/roles/shenron.rb b/roles/shenron.rb
index ee89e0a35..27a10f9c1 100644
--- a/roles/shenron.rb
+++ b/roles/shenron.rb
@@ -10,6 +10,11 @@ default_attributes(
     }
   },
   :hardware => {
+    :hwmon => {
+      "platform_it87_552" => {
+        :ignore => %w[in6]
+      }
+    },
     :mcelog => {
       :enabled => false
     },
@@ -21,6 +26,7 @@ default_attributes(
 
 override_attributes(
   :networking => {
+    :dnssec => "false",
     :interfaces => {
       :external_ipv4 => {
         :interface => "eth0",
@@ -39,7 +45,9 @@ override_attributes(
         :gateway => "fe80::1"
       }
     },
-    :nameservers => ["8.8.8.8", "8.8.4.4"],
+    # Do not use Cloudflare Public DNS as it does not support ECS as required by https://www.spamhaus.org/organization/dnsblusage/
+    # https://www.spamhaus.org/news/article/816/service-update-spamhaus-dnsbl-users-who-query-via-cloudflare-dns-need-to-make-changes-to-email-set-up
+    :nameservers => ["8.8.8.8", "8.8.4.4", "2001:4860:4860::8888", "2001:4860:4860::8844"],
     :private_address => "10.0.16.100"
   }
 )