chef.git
2 years agoAdd role for necrosan
Tom Hughes [Mon, 7 Jan 2019 15:04:23 +0000 (15:04 +0000)]
Add role for necrosan

2 years agoCorrect location
Tom Hughes [Sat, 5 Jan 2019 12:17:50 +0000 (12:17 +0000)]
Correct location

2 years agoCorrect IP address
Tom Hughes [Fri, 4 Jan 2019 22:48:26 +0000 (22:48 +0000)]
Correct IP address

2 years agoEnable munin monitoring for Grifon machines
Tom Hughes [Fri, 4 Jan 2019 16:27:18 +0000 (16:27 +0000)]
Enable munin monitoring for Grifon machines

2 years agoEnable SNMP monitoring for iWay machines
Tom Hughes [Fri, 4 Jan 2019 16:10:28 +0000 (16:10 +0000)]
Enable SNMP monitoring for iWay machines

2 years agoUse correct upstream for chrysophylax
Tom Hughes [Fri, 4 Jan 2019 16:00:07 +0000 (16:00 +0000)]
Use correct upstream for chrysophylax

2 years agoAdd role for chrysophylax
Tom Hughes [Fri, 4 Jan 2019 14:23:44 +0000 (14:23 +0000)]
Add role for chrysophylax

2 years agoRemove redundant ssh key
Tom Hughes [Fri, 4 Jan 2019 11:58:01 +0000 (11:58 +0000)]
Remove redundant ssh key

2 years agoAdd some IPv4 nameservers for norbert
Tom Hughes [Fri, 4 Jan 2019 11:24:58 +0000 (11:24 +0000)]
Add some IPv4 nameservers for norbert

2 years agoAdd remote hands accounts for norbert
Tom Hughes [Fri, 4 Jan 2019 11:18:20 +0000 (11:18 +0000)]
Add remote hands accounts for norbert

2 years agoAdd role for norbert
Tom Hughes [Fri, 4 Jan 2019 10:55:12 +0000 (10:55 +0000)]
Add role for norbert

2 years agoUpdate chef client to 14.8.12
Tom Hughes [Wed, 2 Jan 2019 19:18:47 +0000 (19:18 +0000)]
Update chef client to 14.8.12

2 years agoCleanup munin config for non-existent disks
Tom Hughes [Wed, 2 Jan 2019 19:10:50 +0000 (19:10 +0000)]
Cleanup munin config for non-existent disks

2 years agoDon't monitor unconfigured or failed disks
Tom Hughes [Wed, 2 Jan 2019 18:19:50 +0000 (18:19 +0000)]
Don't monitor unconfigured or failed disks

2 years agoRecord spun up status consistently
Tom Hughes [Wed, 2 Jan 2019 18:54:12 +0000 (18:54 +0000)]
Record spun up status consistently

2 years agoDetect unconfigured and failed disks on megaraid controllers
Tom Hughes [Wed, 2 Jan 2019 18:15:35 +0000 (18:15 +0000)]
Detect unconfigured and failed disks on megaraid controllers

2 years agotilecache: remove trogdor as peer from sarkany
Grant Slater [Wed, 2 Jan 2019 17:17:59 +0000 (17:17 +0000)]
tilecache: remove trogdor as peer from sarkany

2 years agotilecache: remove trogdor as peer from simurgh
Grant Slater [Wed, 2 Jan 2019 17:17:06 +0000 (17:17 +0000)]
tilecache: remove trogdor as peer from simurgh

2 years agotilecache: remove trogdor as peer from cmok
Grant Slater [Wed, 2 Jan 2019 16:29:50 +0000 (16:29 +0000)]
tilecache: remove trogdor as peer from cmok

2 years agotilecache: remove trogdor as peer from rimfaxe
Grant Slater [Wed, 2 Jan 2019 16:28:55 +0000 (16:28 +0000)]
tilecache: remove trogdor as peer from rimfaxe

2 years agotilecache: remove trogdor as peer from angor
Grant Slater [Wed, 2 Jan 2019 16:27:14 +0000 (16:27 +0000)]
tilecache: remove trogdor as peer from angor

2 years agoMake replication delay monitoring more reliable
Tom Hughes [Tue, 1 Jan 2019 08:54:39 +0000 (08:54 +0000)]
Make replication delay monitoring more reliable

2 years agoUpdate carto stylesheet to v4.18.0
Tom Hughes [Fri, 21 Dec 2018 19:17:13 +0000 (19:17 +0000)]
Update carto stylesheet to v4.18.0

Closes #210

2 years agoimagery: use nginx upstream round-robin instead of least_conn
Grant Slater [Fri, 21 Dec 2018 13:45:14 +0000 (13:45 +0000)]
imagery: use nginx upstream round-robin instead of least_conn

2 years agoimagery: try harder to find a working fastcgi socket
Grant Slater [Fri, 21 Dec 2018 13:14:45 +0000 (13:14 +0000)]
imagery: try harder to find a working fastcgi socket

2 years agoRevert "systemd: fix property limit_cpu type"
Grant Slater [Fri, 21 Dec 2018 13:07:22 +0000 (13:07 +0000)]
Revert "systemd: fix property limit_cpu type"

This reverts commit 64602183a4d489484086f51b5cb4ad6f3dd59387.

2 years agosystemd: fix property limit_cpu type
Grant Slater [Fri, 21 Dec 2018 13:00:41 +0000 (13:00 +0000)]
systemd: fix property limit_cpu type

2 years agoimagery: fix typo
Grant Slater [Fri, 21 Dec 2018 12:55:24 +0000 (12:55 +0000)]
imagery: fix typo

2 years agoimagery: limit mapserv by CPU time
Grant Slater [Fri, 21 Dec 2018 12:53:24 +0000 (12:53 +0000)]
imagery: limit mapserv by CPU time

Use CPU time as a poor mans process limit, to kill process before it has leaked
too much memory. Memory limits do not seem to kill the process.

2 years agosystemd: Add LimitCPU support
Grant Slater [Fri, 21 Dec 2018 12:52:49 +0000 (12:52 +0000)]
systemd: Add LimitCPU support

2 years agoimagery: use limit_as on service
Grant Slater [Thu, 20 Dec 2018 22:42:53 +0000 (22:42 +0000)]
imagery: use limit_as on service

2 years agosystemd: add limitAS support
Grant Slater [Thu, 20 Dec 2018 22:42:08 +0000 (22:42 +0000)]
systemd: add limitAS support

2 years agoimagery: enable ubuntugis-unstable repo
Grant Slater [Thu, 20 Dec 2018 16:52:26 +0000 (16:52 +0000)]
imagery: enable ubuntugis-unstable repo

2 years agoimagery: remove legacy cleanup
Grant Slater [Thu, 20 Dec 2018 16:51:55 +0000 (16:51 +0000)]
imagery: remove legacy cleanup

2 years agoimagery: gb_os_sv disable diff layer by default
Grant Slater [Thu, 20 Dec 2018 16:35:09 +0000 (16:35 +0000)]
imagery: gb_os_sv disable diff layer by default

2 years agoimagery: mapserver connection defer
Grant Slater [Thu, 20 Dec 2018 16:34:29 +0000 (16:34 +0000)]
imagery: mapserver connection defer

2 years agoimagery: switch from multiwatch to seperate daemons
Grant Slater [Thu, 20 Dec 2018 15:28:39 +0000 (15:28 +0000)]
imagery: switch from multiwatch to seperate daemons

2 years agoimagery: ignore client about fastcgi side
Grant Slater [Wed, 19 Dec 2018 17:23:17 +0000 (17:23 +0000)]
imagery: ignore client about fastcgi side

2 years agoimagery: use multiple socket balancing
Grant Slater [Wed, 19 Dec 2018 17:12:57 +0000 (17:12 +0000)]
imagery: use multiple socket balancing

2 years agoimagery: do not fail socket upstreams
Grant Slater [Wed, 19 Dec 2018 15:55:28 +0000 (15:55 +0000)]
imagery: do not fail socket upstreams

2 years agoimagery: fix NA imagery properties
Grant Slater [Wed, 19 Dec 2018 13:19:51 +0000 (13:19 +0000)]
imagery: fix NA imagery properties

2 years agoimagery: Fix cookbook typo
Grant Slater [Wed, 19 Dec 2018 13:10:37 +0000 (13:10 +0000)]
imagery: Fix cookbook typo

2 years agoimagery: Add Namibian topo (pending GoFundMe target)
Grant Slater [Wed, 19 Dec 2018 13:07:51 +0000 (13:07 +0000)]
imagery: Add Namibian topo (pending GoFundMe target)

2 years agoDon't check disks in SLEEP or STANDBY mode
Tom Hughes [Tue, 18 Dec 2018 11:22:39 +0000 (11:22 +0000)]
Don't check disks in SLEEP or STANDBY mode

2 years agoEnable FTP helper
Grant Slater [Fri, 14 Dec 2018 18:10:23 +0000 (18:10 +0000)]
Enable FTP helper

2 years agoAdd helper support to firewall_rule
Grant Slater [Fri, 14 Dec 2018 18:10:12 +0000 (18:10 +0000)]
Add helper support to firewall_rule

2 years agoRemove FTP pasv port restrictions
Grant Slater [Fri, 14 Dec 2018 17:29:36 +0000 (17:29 +0000)]
Remove FTP pasv port restrictions

2 years agoFTP enable local perm for ftp users
Grant Slater [Fri, 14 Dec 2018 17:24:18 +0000 (17:24 +0000)]
FTP enable local perm for ftp users

2 years agoSwitch to custom PAM file for FTP
Grant Slater [Fri, 14 Dec 2018 17:00:34 +0000 (17:00 +0000)]
Switch to custom PAM file for FTP

2 years agoFix ftp shorewall action
Grant Slater [Fri, 14 Dec 2018 16:34:22 +0000 (16:34 +0000)]
Fix ftp shorewall action

2 years agoAdd basic FTP daemon to angor
Grant Slater [Fri, 14 Dec 2018 16:14:58 +0000 (16:14 +0000)]
Add basic FTP daemon to angor

2 years agoAdd ssh key for daveh
Tom Hughes [Fri, 14 Dec 2018 10:05:26 +0000 (10:05 +0000)]
Add ssh key for daveh

2 years agoFix munin replication plugin to work with osmium based state
Tom Hughes [Wed, 12 Dec 2018 20:22:57 +0000 (20:22 +0000)]
Fix munin replication plugin to work with osmium based state

2 years agoSwitch tile servers to use osmium for fetching diffs
Tom Hughes [Wed, 12 Dec 2018 19:04:23 +0000 (19:04 +0000)]
Switch tile servers to use osmium for fetching diffs

2 years agoAdd ramoth OOB to dhcp config
Tom Hughes [Sat, 8 Dec 2018 17:04:43 +0000 (17:04 +0000)]
Add ramoth OOB to dhcp config

2 years agoRemove database slave role from ramoth
Tom Hughes [Sat, 8 Dec 2018 16:53:17 +0000 (16:53 +0000)]
Remove database slave role from ramoth

2 years agoUpdate ramoth eth interfaces
Grant Slater [Sat, 8 Dec 2018 16:10:28 +0000 (16:10 +0000)]
Update ramoth eth interfaces

2 years agoDeploy 2019.stateofthemap.org
Tom Hughes [Sat, 8 Dec 2018 15:17:23 +0000 (15:17 +0000)]
Deploy 2019.stateofthemap.org

2 years agoUpdate IP addresses for pyrene
Tom Hughes [Wed, 5 Dec 2018 19:19:40 +0000 (19:19 +0000)]
Update IP addresses for pyrene

2 years agoExempt wikibase redirects from being rewritten to wiki pages
Tom Hughes [Wed, 28 Nov 2018 22:48:31 +0000 (22:48 +0000)]
Exempt wikibase redirects from being rewritten to wiki pages

2 years agoMerge remote-tracking branch 'github/pull/207'
Tom Hughes [Wed, 28 Nov 2018 21:10:07 +0000 (21:10 +0000)]
Merge remote-tracking branch 'github/pull/207'

2 years agoAdd Apache redirects for wiki
Yuri Astrakhan [Wed, 28 Nov 2018 18:21:58 +0000 (13:21 -0500)]
Add Apache redirects for wiki

These redirects allow proper Wikidata Query Service linking,
same as implemented on WMF sites.

2 years agoTry to fix OTRS queuing
Tom Hughes [Sun, 25 Nov 2018 20:22:20 +0000 (20:22 +0000)]
Try to fix OTRS queuing

2 years agoUpdate to use otrs.Console.pl for mail queue injection
Tom Hughes [Sun, 25 Nov 2018 19:04:26 +0000 (19:04 +0000)]
Update to use otrs.Console.pl for mail queue injection

Closes #205

2 years agoAdd a queue for the MWG on OTRS
Paul Norman [Sun, 25 Nov 2018 17:29:16 +0000 (09:29 -0800)]
Add a queue for the MWG on OTRS

2 years agoInstall zlib1g-dev for nokogiri
Tom Hughes [Sat, 24 Nov 2018 11:44:52 +0000 (11:44 +0000)]
Install zlib1g-dev for nokogiri

2 years agoUpdate carto stylesheet to v4.17.0
Tom Hughes [Fri, 23 Nov 2018 19:08:47 +0000 (19:08 +0000)]
Update carto stylesheet to v4.17.0

Closes #204

2 years agoUpdate piwik to 3.7.0
Tom Hughes [Tue, 20 Nov 2018 00:22:40 +0000 (00:22 +0000)]
Update piwik to 3.7.0

2 years agoremoving non-functional web page from allowed external images
Tigerfell [Mon, 19 Nov 2018 21:43:10 +0000 (22:43 +0100)]
removing non-functional web page from allowed external images

2 years agoSet a long timeout for dev instances proxying to cgimap
Tom Hughes [Mon, 19 Nov 2018 19:10:03 +0000 (19:10 +0000)]
Set a long timeout for dev instances proxying to cgimap

2 years agoUpdate bundle
Tom Hughes [Mon, 19 Nov 2018 19:09:56 +0000 (19:09 +0000)]
Update bundle

2 years agoMerge remote-tracking branch 'github/pull/202'
Tom Hughes [Mon, 19 Nov 2018 18:53:05 +0000 (18:53 +0000)]
Merge remote-tracking branch 'github/pull/202'

2 years agoadding automatic double redirect resolution
Tigerfell [Sun, 18 Nov 2018 20:26:46 +0000 (21:26 +0100)]
adding automatic double redirect resolution

2 years agoUpdate CiviCRM extensions to latest versions
Tom Hughes [Mon, 5 Nov 2018 11:25:24 +0000 (11:25 +0000)]
Update CiviCRM extensions to latest versions

2 years agoUpdate CiviCRM to 5.6.1
Tom Hughes [Mon, 5 Nov 2018 11:22:56 +0000 (11:22 +0000)]
Update CiviCRM to 5.6.1

2 years agoRun a job queue runner for each rails instance
Tom Hughes [Thu, 1 Nov 2018 19:06:21 +0000 (19:06 +0000)]
Run a job queue runner for each rails instance

Closes #201

2 years agoFix log rotation for dev apis
Tom Hughes [Wed, 31 Oct 2018 22:36:44 +0000 (22:36 +0000)]
Fix log rotation for dev apis

2 years agoAdded support for enableEntitySearchUI
Yuri Astrakhan [Sun, 28 Oct 2018 14:27:39 +0000 (10:27 -0400)]
Added support for enableEntitySearchUI

This feature will become available in v1.33. For now,
we continue using a nasty hack that should be removed as soon as
we migrate.

The current nasty hack:
  $wgResourceModules['wikibase.ui.entitysearch']['scripts'] = [];

Until then, it's a noop.

2 years agoUpdate carto stylesheet to v4.16.0
Tom Hughes [Fri, 19 Oct 2018 18:06:31 +0000 (19:06 +0100)]
Update carto stylesheet to v4.16.0

Closes #199

2 years agoAllow an optional .json extension on cgimap methods
Tom Hughes [Fri, 19 Oct 2018 17:58:12 +0000 (18:58 +0100)]
Allow an optional .json extension on cgimap methods

2 years agoAdd --enable-yajl when configuring cgimap
Tom Hughes [Fri, 19 Oct 2018 16:10:21 +0000 (17:10 +0100)]
Add --enable-yajl when configuring cgimap

2 years agoUpdate piwik to 3.6.1
Tom Hughes [Fri, 19 Oct 2018 15:53:18 +0000 (16:53 +0100)]
Update piwik to 3.6.1

2 years agoIncrease memory and disk cache size on jakelong
Tom Hughes [Thu, 18 Oct 2018 07:33:33 +0000 (08:33 +0100)]
Increase memory and disk cache size on jakelong

2 years agoRun composer for CirrusSearch
Tom Hughes [Sun, 14 Oct 2018 21:12:45 +0000 (22:12 +0100)]
Run composer for CirrusSearch

2 years agoRevert "Add Maps extension to the main wiki"
Tom Hughes [Sun, 14 Oct 2018 21:00:48 +0000 (22:00 +0100)]
Revert "Add Maps extension to the main wiki"

This reverts commit 5da3b1f59799cbc1283e79598a39c2715ba70fc4.

2 years agoAdd Maps extension to the main wiki
Tom Hughes [Sun, 14 Oct 2018 18:51:45 +0000 (19:51 +0100)]
Add Maps extension to the main wiki

2 years agoUpdate CiviCRM to 5.6.0
Tom Hughes [Sun, 14 Oct 2018 14:19:59 +0000 (15:19 +0100)]
Update CiviCRM to 5.6.0

2 years agoUse a letsencrypt certificate for the main mail server
Tom Hughes [Fri, 5 Oct 2018 18:10:10 +0000 (19:10 +0100)]
Use a letsencrypt certificate for the main mail server

2 years agoAdd optimised gnutls cipher string to SSL cookbook and use it for exim
Tom Hughes [Fri, 5 Oct 2018 15:09:20 +0000 (16:09 +0100)]
Add optimised gnutls cipher string to SSL cookbook and use it for exim

2 years agoImprove SMTP cipher selection
Tom Hughes [Fri, 5 Oct 2018 14:47:45 +0000 (15:47 +0100)]
Improve SMTP cipher selection

2 years agoPrefer server cipher ordering for SMTP
Tom Hughes [Fri, 5 Oct 2018 14:22:58 +0000 (15:22 +0100)]
Prefer server cipher ordering for SMTP

2 years agoDisable RC4, MD5 and SHA1 for SMTP encryption
Tom Hughes [Fri, 5 Oct 2018 14:22:24 +0000 (15:22 +0100)]
Disable RC4, MD5 and SHA1 for SMTP encryption

2 years agoRedirect all HTTP except openstreetmap.org straight to www
Tom Hughes [Fri, 5 Oct 2018 14:02:04 +0000 (15:02 +0100)]
Redirect all HTTP except openstreetmap.org straight to www

2 years agoDisable SSLv3 for SMTP connections
Tom Hughes [Fri, 5 Oct 2018 11:14:35 +0000 (12:14 +0100)]
Disable SSLv3 for SMTP connections

2 years agoUpdate IP addresses for jakelong
Tom Hughes [Wed, 3 Oct 2018 20:06:56 +0000 (21:06 +0100)]
Update IP addresses for jakelong

2 years agoRestore redirect from http://openstreetmap.org to https://openstreetmap.org
Tom Hughes [Tue, 2 Oct 2018 21:26:17 +0000 (22:26 +0100)]
Restore redirect from openstreetmap.org to https://openstreetmap.org

This is necessary for HSTS preload - we cannot redirect directly
to the www.openstreetmap.org name!

2 years agoDon't configure a flood_stage watermark for elasticsearch 5.x
Tom Hughes [Mon, 1 Oct 2018 21:43:34 +0000 (22:43 +0100)]
Don't configure a flood_stage watermark for elasticsearch 5.x

2 years agoUse java 8 for logstash
Tom Hughes [Mon, 1 Oct 2018 18:26:00 +0000 (19:26 +0100)]
Use java 8 for logstash

2 years agoUpdate elasticsearch configuraiton for 6.x
Tom Hughes [Mon, 1 Oct 2018 18:02:55 +0000 (19:02 +0100)]
Update elasticsearch configuraiton for 6.x

2 years agoUpgrade logstash to the 6.x release stream
Tom Hughes [Mon, 1 Oct 2018 17:37:56 +0000 (18:37 +0100)]
Upgrade logstash to the 6.x release stream