chef.git
23 months agoimagery: fix typo
Grant Slater [Fri, 21 Dec 2018 12:55:24 +0000 (12:55 +0000)]
imagery: fix typo

23 months agoimagery: limit mapserv by CPU time
Grant Slater [Fri, 21 Dec 2018 12:53:24 +0000 (12:53 +0000)]
imagery: limit mapserv by CPU time

Use CPU time as a poor mans process limit, to kill process before it has leaked
too much memory. Memory limits do not seem to kill the process.

23 months agosystemd: Add LimitCPU support
Grant Slater [Fri, 21 Dec 2018 12:52:49 +0000 (12:52 +0000)]
systemd: Add LimitCPU support

23 months agoimagery: use limit_as on service
Grant Slater [Thu, 20 Dec 2018 22:42:53 +0000 (22:42 +0000)]
imagery: use limit_as on service

23 months agosystemd: add limitAS support
Grant Slater [Thu, 20 Dec 2018 22:42:08 +0000 (22:42 +0000)]
systemd: add limitAS support

23 months agoimagery: enable ubuntugis-unstable repo
Grant Slater [Thu, 20 Dec 2018 16:52:26 +0000 (16:52 +0000)]
imagery: enable ubuntugis-unstable repo

23 months agoimagery: remove legacy cleanup
Grant Slater [Thu, 20 Dec 2018 16:51:55 +0000 (16:51 +0000)]
imagery: remove legacy cleanup

23 months agoimagery: gb_os_sv disable diff layer by default
Grant Slater [Thu, 20 Dec 2018 16:35:09 +0000 (16:35 +0000)]
imagery: gb_os_sv disable diff layer by default

23 months agoimagery: mapserver connection defer
Grant Slater [Thu, 20 Dec 2018 16:34:29 +0000 (16:34 +0000)]
imagery: mapserver connection defer

23 months agoimagery: switch from multiwatch to seperate daemons
Grant Slater [Thu, 20 Dec 2018 15:28:39 +0000 (15:28 +0000)]
imagery: switch from multiwatch to seperate daemons

23 months agoimagery: ignore client about fastcgi side
Grant Slater [Wed, 19 Dec 2018 17:23:17 +0000 (17:23 +0000)]
imagery: ignore client about fastcgi side

23 months agoimagery: use multiple socket balancing
Grant Slater [Wed, 19 Dec 2018 17:12:57 +0000 (17:12 +0000)]
imagery: use multiple socket balancing

23 months agoimagery: do not fail socket upstreams
Grant Slater [Wed, 19 Dec 2018 15:55:28 +0000 (15:55 +0000)]
imagery: do not fail socket upstreams

23 months agoimagery: fix NA imagery properties
Grant Slater [Wed, 19 Dec 2018 13:19:51 +0000 (13:19 +0000)]
imagery: fix NA imagery properties

23 months agoimagery: Fix cookbook typo
Grant Slater [Wed, 19 Dec 2018 13:10:37 +0000 (13:10 +0000)]
imagery: Fix cookbook typo

23 months agoimagery: Add Namibian topo (pending GoFundMe target)
Grant Slater [Wed, 19 Dec 2018 13:07:51 +0000 (13:07 +0000)]
imagery: Add Namibian topo (pending GoFundMe target)

23 months agoDon't check disks in SLEEP or STANDBY mode
Tom Hughes [Tue, 18 Dec 2018 11:22:39 +0000 (11:22 +0000)]
Don't check disks in SLEEP or STANDBY mode

23 months agoEnable FTP helper
Grant Slater [Fri, 14 Dec 2018 18:10:23 +0000 (18:10 +0000)]
Enable FTP helper

23 months agoAdd helper support to firewall_rule
Grant Slater [Fri, 14 Dec 2018 18:10:12 +0000 (18:10 +0000)]
Add helper support to firewall_rule

23 months agoRemove FTP pasv port restrictions
Grant Slater [Fri, 14 Dec 2018 17:29:36 +0000 (17:29 +0000)]
Remove FTP pasv port restrictions

23 months agoFTP enable local perm for ftp users
Grant Slater [Fri, 14 Dec 2018 17:24:18 +0000 (17:24 +0000)]
FTP enable local perm for ftp users

23 months agoSwitch to custom PAM file for FTP
Grant Slater [Fri, 14 Dec 2018 17:00:34 +0000 (17:00 +0000)]
Switch to custom PAM file for FTP

23 months agoFix ftp shorewall action
Grant Slater [Fri, 14 Dec 2018 16:34:22 +0000 (16:34 +0000)]
Fix ftp shorewall action

23 months agoAdd basic FTP daemon to angor
Grant Slater [Fri, 14 Dec 2018 16:14:58 +0000 (16:14 +0000)]
Add basic FTP daemon to angor

23 months agoAdd ssh key for daveh
Tom Hughes [Fri, 14 Dec 2018 10:05:26 +0000 (10:05 +0000)]
Add ssh key for daveh

23 months agoFix munin replication plugin to work with osmium based state
Tom Hughes [Wed, 12 Dec 2018 20:22:57 +0000 (20:22 +0000)]
Fix munin replication plugin to work with osmium based state

23 months agoSwitch tile servers to use osmium for fetching diffs
Tom Hughes [Wed, 12 Dec 2018 19:04:23 +0000 (19:04 +0000)]
Switch tile servers to use osmium for fetching diffs

23 months agoAdd ramoth OOB to dhcp config
Tom Hughes [Sat, 8 Dec 2018 17:04:43 +0000 (17:04 +0000)]
Add ramoth OOB to dhcp config

23 months agoRemove database slave role from ramoth
Tom Hughes [Sat, 8 Dec 2018 16:53:17 +0000 (16:53 +0000)]
Remove database slave role from ramoth

23 months agoUpdate ramoth eth interfaces
Grant Slater [Sat, 8 Dec 2018 16:10:28 +0000 (16:10 +0000)]
Update ramoth eth interfaces

23 months agoDeploy 2019.stateofthemap.org
Tom Hughes [Sat, 8 Dec 2018 15:17:23 +0000 (15:17 +0000)]
Deploy 2019.stateofthemap.org

23 months agoUpdate IP addresses for pyrene
Tom Hughes [Wed, 5 Dec 2018 19:19:40 +0000 (19:19 +0000)]
Update IP addresses for pyrene

23 months agoExempt wikibase redirects from being rewritten to wiki pages
Tom Hughes [Wed, 28 Nov 2018 22:48:31 +0000 (22:48 +0000)]
Exempt wikibase redirects from being rewritten to wiki pages

23 months agoMerge remote-tracking branch 'github/pull/207'
Tom Hughes [Wed, 28 Nov 2018 21:10:07 +0000 (21:10 +0000)]
Merge remote-tracking branch 'github/pull/207'

23 months agoAdd Apache redirects for wiki
Yuri Astrakhan [Wed, 28 Nov 2018 18:21:58 +0000 (13:21 -0500)]
Add Apache redirects for wiki

These redirects allow proper Wikidata Query Service linking,
same as implemented on WMF sites.

2 years agoTry to fix OTRS queuing
Tom Hughes [Sun, 25 Nov 2018 20:22:20 +0000 (20:22 +0000)]
Try to fix OTRS queuing

2 years agoUpdate to use otrs.Console.pl for mail queue injection
Tom Hughes [Sun, 25 Nov 2018 19:04:26 +0000 (19:04 +0000)]
Update to use otrs.Console.pl for mail queue injection

Closes #205

2 years agoAdd a queue for the MWG on OTRS
Paul Norman [Sun, 25 Nov 2018 17:29:16 +0000 (09:29 -0800)]
Add a queue for the MWG on OTRS

2 years agoInstall zlib1g-dev for nokogiri
Tom Hughes [Sat, 24 Nov 2018 11:44:52 +0000 (11:44 +0000)]
Install zlib1g-dev for nokogiri

2 years agoUpdate carto stylesheet to v4.17.0
Tom Hughes [Fri, 23 Nov 2018 19:08:47 +0000 (19:08 +0000)]
Update carto stylesheet to v4.17.0

Closes #204

2 years agoUpdate piwik to 3.7.0
Tom Hughes [Tue, 20 Nov 2018 00:22:40 +0000 (00:22 +0000)]
Update piwik to 3.7.0

2 years agoremoving non-functional web page from allowed external images
Tigerfell [Mon, 19 Nov 2018 21:43:10 +0000 (22:43 +0100)]
removing non-functional web page from allowed external images

2 years agoSet a long timeout for dev instances proxying to cgimap
Tom Hughes [Mon, 19 Nov 2018 19:10:03 +0000 (19:10 +0000)]
Set a long timeout for dev instances proxying to cgimap

2 years agoUpdate bundle
Tom Hughes [Mon, 19 Nov 2018 19:09:56 +0000 (19:09 +0000)]
Update bundle

2 years agoMerge remote-tracking branch 'github/pull/202'
Tom Hughes [Mon, 19 Nov 2018 18:53:05 +0000 (18:53 +0000)]
Merge remote-tracking branch 'github/pull/202'

2 years agoadding automatic double redirect resolution
Tigerfell [Sun, 18 Nov 2018 20:26:46 +0000 (21:26 +0100)]
adding automatic double redirect resolution

2 years agoUpdate CiviCRM extensions to latest versions
Tom Hughes [Mon, 5 Nov 2018 11:25:24 +0000 (11:25 +0000)]
Update CiviCRM extensions to latest versions

2 years agoUpdate CiviCRM to 5.6.1
Tom Hughes [Mon, 5 Nov 2018 11:22:56 +0000 (11:22 +0000)]
Update CiviCRM to 5.6.1

2 years agoRun a job queue runner for each rails instance
Tom Hughes [Thu, 1 Nov 2018 19:06:21 +0000 (19:06 +0000)]
Run a job queue runner for each rails instance

Closes #201

2 years agoFix log rotation for dev apis
Tom Hughes [Wed, 31 Oct 2018 22:36:44 +0000 (22:36 +0000)]
Fix log rotation for dev apis

2 years agoAdded support for enableEntitySearchUI
Yuri Astrakhan [Sun, 28 Oct 2018 14:27:39 +0000 (10:27 -0400)]
Added support for enableEntitySearchUI

This feature will become available in v1.33. For now,
we continue using a nasty hack that should be removed as soon as
we migrate.

The current nasty hack:
  $wgResourceModules['wikibase.ui.entitysearch']['scripts'] = [];

Until then, it's a noop.

2 years agoUpdate carto stylesheet to v4.16.0
Tom Hughes [Fri, 19 Oct 2018 18:06:31 +0000 (19:06 +0100)]
Update carto stylesheet to v4.16.0

Closes #199

2 years agoAllow an optional .json extension on cgimap methods
Tom Hughes [Fri, 19 Oct 2018 17:58:12 +0000 (18:58 +0100)]
Allow an optional .json extension on cgimap methods

2 years agoAdd --enable-yajl when configuring cgimap
Tom Hughes [Fri, 19 Oct 2018 16:10:21 +0000 (17:10 +0100)]
Add --enable-yajl when configuring cgimap

2 years agoUpdate piwik to 3.6.1
Tom Hughes [Fri, 19 Oct 2018 15:53:18 +0000 (16:53 +0100)]
Update piwik to 3.6.1

2 years agoIncrease memory and disk cache size on jakelong
Tom Hughes [Thu, 18 Oct 2018 07:33:33 +0000 (08:33 +0100)]
Increase memory and disk cache size on jakelong

2 years agoRun composer for CirrusSearch
Tom Hughes [Sun, 14 Oct 2018 21:12:45 +0000 (22:12 +0100)]
Run composer for CirrusSearch

2 years agoRevert "Add Maps extension to the main wiki"
Tom Hughes [Sun, 14 Oct 2018 21:00:48 +0000 (22:00 +0100)]
Revert "Add Maps extension to the main wiki"

This reverts commit 5da3b1f59799cbc1283e79598a39c2715ba70fc4.

2 years agoAdd Maps extension to the main wiki
Tom Hughes [Sun, 14 Oct 2018 18:51:45 +0000 (19:51 +0100)]
Add Maps extension to the main wiki

2 years agoUpdate CiviCRM to 5.6.0
Tom Hughes [Sun, 14 Oct 2018 14:19:59 +0000 (15:19 +0100)]
Update CiviCRM to 5.6.0

2 years agoUse a letsencrypt certificate for the main mail server
Tom Hughes [Fri, 5 Oct 2018 18:10:10 +0000 (19:10 +0100)]
Use a letsencrypt certificate for the main mail server

2 years agoAdd optimised gnutls cipher string to SSL cookbook and use it for exim
Tom Hughes [Fri, 5 Oct 2018 15:09:20 +0000 (16:09 +0100)]
Add optimised gnutls cipher string to SSL cookbook and use it for exim

2 years agoImprove SMTP cipher selection
Tom Hughes [Fri, 5 Oct 2018 14:47:45 +0000 (15:47 +0100)]
Improve SMTP cipher selection

2 years agoPrefer server cipher ordering for SMTP
Tom Hughes [Fri, 5 Oct 2018 14:22:58 +0000 (15:22 +0100)]
Prefer server cipher ordering for SMTP

2 years agoDisable RC4, MD5 and SHA1 for SMTP encryption
Tom Hughes [Fri, 5 Oct 2018 14:22:24 +0000 (15:22 +0100)]
Disable RC4, MD5 and SHA1 for SMTP encryption

2 years agoRedirect all HTTP except openstreetmap.org straight to www
Tom Hughes [Fri, 5 Oct 2018 14:02:04 +0000 (15:02 +0100)]
Redirect all HTTP except openstreetmap.org straight to www

2 years agoDisable SSLv3 for SMTP connections
Tom Hughes [Fri, 5 Oct 2018 11:14:35 +0000 (12:14 +0100)]
Disable SSLv3 for SMTP connections

2 years agoUpdate IP addresses for jakelong
Tom Hughes [Wed, 3 Oct 2018 20:06:56 +0000 (21:06 +0100)]
Update IP addresses for jakelong

2 years agoRestore redirect from http://openstreetmap.org to https://openstreetmap.org
Tom Hughes [Tue, 2 Oct 2018 21:26:17 +0000 (22:26 +0100)]
Restore redirect from openstreetmap.org to https://openstreetmap.org

This is necessary for HSTS preload - we cannot redirect directly
to the www.openstreetmap.org name!

2 years agoDon't configure a flood_stage watermark for elasticsearch 5.x
Tom Hughes [Mon, 1 Oct 2018 21:43:34 +0000 (22:43 +0100)]
Don't configure a flood_stage watermark for elasticsearch 5.x

2 years agoUse java 8 for logstash
Tom Hughes [Mon, 1 Oct 2018 18:26:00 +0000 (19:26 +0100)]
Use java 8 for logstash

2 years agoUpdate elasticsearch configuraiton for 6.x
Tom Hughes [Mon, 1 Oct 2018 18:02:55 +0000 (19:02 +0100)]
Update elasticsearch configuraiton for 6.x

2 years agoUpgrade logstash to the 6.x release stream
Tom Hughes [Mon, 1 Oct 2018 17:37:56 +0000 (18:37 +0100)]
Upgrade logstash to the 6.x release stream

2 years agoDisable Wikibase custom searchbox
Yuri Astrakhan [Wed, 26 Sep 2018 18:08:36 +0000 (14:08 -0400)]
Disable Wikibase custom searchbox

See https://phabricator.wikimedia.org/T205560

2 years agoInclude WB items in regular search results by dflt
Yuri Astrakhan [Wed, 26 Sep 2018 22:02:05 +0000 (18:02 -0400)]
Include WB items in regular search results by dflt

getting ready for removing search autosuggester
regular search should still include wb item pages

2 years agoRaise maximum call limits for Lua parser funcs
Yuri Astrakhan [Wed, 26 Sep 2018 20:08:09 +0000 (21:08 +0100)]
Raise maximum call limits for Lua parser funcs

Raise expensive lua (and other function) call limits to match WP
Docs:  https://www.mediawiki.org/wiki/Manual:$wgExpensiveParserFunctionLimit
Wikipedia's Config:  https://noc.wikimedia.org/conf/highlight.php?file=CommonSettings.php

Closes #194

2 years agoReduce log history for render servers
Tom Hughes [Wed, 26 Sep 2018 07:26:31 +0000 (08:26 +0100)]
Reduce log history for render servers

2 years agoAllow ssh on port 45222
Tom Hughes [Tue, 25 Sep 2018 15:28:46 +0000 (16:28 +0100)]
Allow ssh on port 45222

2 years agoAdd role for cherufe
Tom Hughes [Tue, 25 Sep 2018 13:50:40 +0000 (14:50 +0100)]
Add role for cherufe

2 years agoSet action to "nothing" explicitly when using passenger_application
Tom Hughes [Mon, 24 Sep 2018 11:42:04 +0000 (12:42 +0100)]
Set action to "nothing" explicitly when using passenger_application

Apparently have "nothing" as the default action for a custom resource
doesn't actually work, even if you define it explicitly.

2 years agoExplicitly define a "nothing" action for passenger_application resources
Tom Hughes [Mon, 24 Sep 2018 11:38:32 +0000 (12:38 +0100)]
Explicitly define a "nothing" action for passenger_application resources

2 years agoRemove munin plugin config file for passenger as it is now a template
Tom Hughes [Mon, 24 Sep 2018 11:29:37 +0000 (12:29 +0100)]
Remove munin plugin config file for passenger as it is now a template

2 years agoMerge remote-tracking branch 'github/pull/193'
Tom Hughes [Mon, 24 Sep 2018 07:31:58 +0000 (08:31 +0100)]
Merge remote-tracking branch 'github/pull/193'

2 years agoincrease lua cpu running limit
Yuri Astrakhan [Mon, 24 Sep 2018 00:12:16 +0000 (20:12 -0400)]
increase lua cpu running limit

Should solve
https://lists.openstreetmap.org/pipermail/talk-us/2018-September/018907.html

2 years agoUse full path for runuser
Tom Hughes [Fri, 21 Sep 2018 23:01:13 +0000 (00:01 +0100)]
Use full path for runuser

2 years agoUpdate carto stylesheet to v4.15.0
Tom Hughes [Fri, 21 Sep 2018 18:12:27 +0000 (19:12 +0100)]
Update carto stylesheet to v4.15.0

Closes #192

2 years agoRemove unused OWL role and cookbook
Tom Hughes [Wed, 19 Sep 2018 10:48:08 +0000 (11:48 +0100)]
Remove unused OWL role and cookbook

2 years agoRemove role for zark
Tom Hughes [Wed, 19 Sep 2018 10:44:41 +0000 (11:44 +0100)]
Remove role for zark

2 years agoMerge remote-tracking branch 'github/pull/191'
Tom Hughes [Tue, 18 Sep 2018 07:31:40 +0000 (08:31 +0100)]
Merge remote-tracking branch 'github/pull/191'

2 years agoallow wikibase editing
Yuri Astrakhan [Tue, 18 Sep 2018 05:03:29 +0000 (01:03 -0400)]
allow wikibase editing

2 years agoset up formatterUrlProperty for Wikibase
Yuri Astrakhan [Tue, 18 Sep 2018 00:46:53 +0000 (20:46 -0400)]
set up formatterUrlProperty for Wikibase

2 years agoAdd IPv6 address for pyrene
Tom Hughes [Mon, 17 Sep 2018 23:22:03 +0000 (00:22 +0100)]
Add IPv6 address for pyrene

2 years agoDrop OWL dev site
Tom Hughes [Mon, 17 Sep 2018 18:22:23 +0000 (19:22 +0100)]
Drop OWL dev site

2 years agoAdd log rotation for dev apis
Tom Hughes [Mon, 17 Sep 2018 18:12:48 +0000 (19:12 +0100)]
Add log rotation for dev apis

2 years agoUpdate ssh fingerprints for OOB cards
Tom Hughes [Mon, 17 Sep 2018 08:33:21 +0000 (09:33 +0100)]
Update ssh fingerprints for OOB cards

2 years agoUpdate MAC addresses for OOB on draco, grindtooth and sarel
Tom Hughes [Mon, 17 Sep 2018 07:55:38 +0000 (08:55 +0100)]
Update MAC addresses for OOB on draco, grindtooth and sarel

2 years agoSend changeset uploads to cgimap for dev apis
Tom Hughes [Sun, 16 Sep 2018 21:27:42 +0000 (22:27 +0100)]
Send changeset uploads to cgimap for dev apis

2 years agoSpecify critical flag when creating a temporary certificate
Tom Hughes [Sun, 16 Sep 2018 18:39:54 +0000 (19:39 +0100)]
Specify critical flag when creating a temporary certificate

2 years agoAdd a dev api instance to test the upload branch
Tom Hughes [Sun, 16 Sep 2018 17:39:44 +0000 (18:39 +0100)]
Add a dev api instance to test the upload branch

2 years agoAdd support for using cgimap with dev api instances
Tom Hughes [Sun, 16 Sep 2018 17:27:37 +0000 (18:27 +0100)]
Add support for using cgimap with dev api instances