X-Git-Url: https://git.openstreetmap.org/chef.git/blobdiff_plain/e7c7917e9c2d250e7341241566bd41a23b644600..334535724681fb71f91739dfb50fe172a61406f5:/roles/db-master.rb

diff --git a/roles/db-master.rb b/roles/db-master.rb
index 79c8f0724..eaaca0a49 100644
--- a/roles/db-master.rb
+++ b/roles/db-master.rb
@@ -3,24 +3,18 @@ description "Role applied to all the master database server"
 
 default_attributes(
   :postgresql => {
-    :versions => [ "9.1" ],
+    :versions => ["9.5"],
     :settings => {
       :defaults => {
         :wal_level => "hot_standby",
         :archive_mode => "on",
         :archive_command => "/bin/cp %p /store/postgresql/archive/%f",
-        :max_wal_senders => "2",
-        :user_name_maps => {
-          :backup => [
-            { :system => "osmbackup", :postgres => "backup" }
-          ]
-        },
-        :early_authentication_rules => [
-          { :type => "local", :database => "all", :user => "backup", :method => "peer", :options => { :map => "backup" } }
-        ],
+        :max_wal_senders => "3",
         :late_authentication_rules => [
           { :database => "replication", :user => "replication", :address => "146.179.159.168/32" },
-          { :database => "replication", :user => "replication", :address => "146.179.159.173/32" }
+          { :database => "replication", :user => "replication", :address => "146.179.159.170/32" },
+          { :database => "replication", :user => "replication", :address => "10.0.0.10/32" },
+          { :database => "replication", :user => "replication", :address => "10.0.32.40/32" }
         ]
       }
     }
@@ -29,7 +23,7 @@ default_attributes(
     :modules => {
       :archive => {
         :comment => "WAL Archive",
-        :path => "/store/postgresql/system/archive",
+        :path => "/store/arrays/nvme/postgresql-archive",
         :read_only => true,
         :write_only => false,
         :list => false,
@@ -37,7 +31,7 @@ default_attributes(
         :gid => "postgres",
         :transfer_logging => false,
         :hosts_allow => [
-          "146.179.159.168", "146.179.159.173"
+          "146.179.159.168", "146.179.159.170, 10.0.0.10, 10.0.32.40"
         ]
       }
     }